Provides centralized storage and versioning for trained models, including metadata about training runs, model artifacts, and deployment history.
Model Registry
CCC.MLDE.CP08
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.MLDE.TH02 | Training Data or Model Artifacts are Exfiltrated | Notebook instances and connected data pipelines may be configured with unrestricted egress paths, such as file downloads, public network interfaces, or writable external destinations. Training datasets, model artifacts, and embedded credentials could be transferred out of the environment through these paths. This results in a loss of confidentiality for proprietary data and models, and may expose regulated or sensitive records used in training. |
| CCC.MLDE.TH03 | Model Artifacts or Experiment Records are Tampered With | Model registry entries, experiment metadata, and reproducibility records may be modified by entities with write access to the environment. Altered artifacts or records could be promoted to training and deployment workflows in place of the intended versions. This compromises the integrity of deployed models and the reliability of experiment lineage used for reproduction and audit. |