Model supply chains need the provenance work software already did

Software learned to sign artefacts and attest build provenance after a decade of painful incidents. Model distribution repeats the earlier era: weights pulled from public hubs, rarely verified, frequently re-uploaded by third parties.

The tooling transfers almost directly. What is missing is the expectation that it should be used.