Model versioning and pinning

Referential security asks an evaluator to prove which system its score described

An arXiv paper argues that a hosted model name only routes a request, so a safety finding filed against that name loses its subject as soon as the weights, prompts, classifiers or serving stack change under it.