Skip to content

feat(demo-06): weight custody talk-track demo - #28

Merged
imran-siddique merged 1 commit into
mainfrom
feat/demo-06-weight-custody
Jul 27, 2026
Merged

feat(demo-06): weight custody talk-track demo#28
imran-siddique merged 1 commit into
mainfrom
feat/demo-06-weight-custody

Conversation

@imran-siddique

Copy link
Copy Markdown
Contributor

What

Adds a sixth demo to the talk track, now that the WCM SDK is on PyPI. Demos 1-5 govern what an agent does; demo 6 is the layer beneath, the model weights themselves.

demo-06-weight-custody/run.py is a pure in-process Weight Custody Manifest flow with a software (mock) attestation provider, so it runs with no hardware and no server, depending only on weight-custody-manifest>=0.19.0:

  1. A manifest binds the checkpoint's exact weights_hash, jointly signed (builder + custodian); the signature verifies.
  2. The attestation gate releases the key only for the certified serving stack.
  3. A tampered checkpoint's hash does not match the manifest, so it is refused before it ever loads (the centerpiece: possession is not provenance).
  4. A fine-tune's lineage verifies back to the signed base.
  5. Honest close: accountability-grade against an operator who physically owns the silicon (TEE.fail), not silicon-proof custody.

Wiring

  • demo.py: registered as choice 6 with narration; --help now lists {1,2,3,4,5,6}.
  • requirements.txt: adds weight-custody-manifest>=0.19.0.
  • README.md: broadened intro (six demos across cMCP, TRACE, WCM), a Demo 6 section, and the structure tree.

Verified locally against the published 0.19.0 package: python demo-06-weight-custody/run.py and python demo.py 6 --no-pause both exit 0. No em dashes.

🤖 Generated with Claude Code

Add a sixth demo depending on the published weight-custody-manifest
package (>=0.19.0). A pure in-process WCM flow with a software (mock)
attestation provider: a manifest binds the exact weight hash and is
jointly signed, the attestation gate releases the key only for the
certified serving stack, a tampered checkpoint is refused before load,
and a fine-tune's lineage verifies back to the signed base. Runs with no
hardware and no server.

Wire it into demo.py (choice 6 + narration) and requirements.txt, and
broaden the README (six demos across cMCP, TRACE, and WCM).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@imran-siddique
imran-siddique merged commit ca31486 into main Jul 27, 2026
3 checks passed
@imran-siddique
imran-siddique deleted the feat/demo-06-weight-custody branch July 29, 2026 23:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant