01
Sign in
Open ArDrive and sign in
Uploads under 100 KB are free, so no tokens are needed. A manifest is a few KB.
Permanent fingerprints for open AI models
ModelSeal
Is that really the model you downloaded? Fingerprint AI model files in your browser, anchor the record permanently on Arweave, and let anyone verify a download before they run it.
Seal a model, or verify a download.
Loading the hashing engine…
1. Describe the model
2. Add the model files
Drop model files here
Any type, several at once: .safetensors, .gguf, .bin, config.json. Multi-GB files are read in 8 MB chunks.
3. Your manifest
Add at least one file, then enter a model name and version.
If the download is blocked in this frame, use Copy JSON and save it as a file named manifest.json.
4. Publish to Arweave
02
Upload
Upload manifest.json to a public drive
Public files can be fetched by anyone through arweave.net, which verification needs.
03
Tag
Set these custom tags, if offered
- App-Name = ModelSeal
- Model-Name =
- Model-Version =
Tags let people find your seal with “Search by model name”.
04
Share
Share the Data Transaction ID
Copy the file’s Data Transaction ID and list it with in your README, model card or website.
Wander wallet detected
Publish the manifest straight from your wallet, with the tags above set for you. Arweave charges a small fee in AR.
1. Load the sealed manifest
The sealed record
2. Check your downloaded files
Drop the files you downloaded
They are hashed on this device and compared with the sealed fingerprints.
How it works
Three steps, one permanent record.
01
Author
Seal
The author hashes each model file locally (SHA-256) and publishes a small manifest to Arweave, where it’s permanent and can’t be edited or deleted.
02
Author
Share
The author lists the manifest’s transaction ID with the model.
03
Anyone
Verify
Anyone hashes their download locally and compares it to the permanent record: Match, Mismatch or Unknown.
Limitations
A fingerprint proves a file hasn’t changed since it was sealed. It doesn’t prove the original model was safe, or that the sealer is the real author. Author wallet signatures are on the roadmap.