Current focus: Trustfall Lite, an open-source CLI for checking local Hugging Face and Ollama model artifacts against a signed registry; and Trustfall Deep, a runtime model-identity protocol in design.

Interested in model provenance, runtime identity, AI security, signed evidence, and making infrastructure boring enough to trust.

https://www.fallrisk.ai

---

I built Trustfall Lite, an open-source CLI that scans local Hugging Face and Ollama model caches, computes artifact hashes, and checks them against a signed public registry.

https://github.com/fallrisk-ai/trustfall-lite

Install:

pipx install fallrisk-trustfall trustfall scan

By default, Trustfall can query the API with artifact hashes. It does not upload model bytes or file paths. There is also a local-only mode:

trustfall registry --refresh trustfall scan --local-only

anthony@fallrisk.ai