// GLOSSARY

Registry

The central system for managing model artefacts, versions and deployment; it is assessed under access control, the promote/rollback flow, audit logging and abuse scenarios. It sits at the center of the model trust chain and must not be confused with a simple file store; because a file store only keeps, while a registry is where the decision is made of which model, which version and whose approval goes to production. This makes it the single most valuable node of the supply chain. From the attacker's logic the difference is decisive: if the registry is compromised, the attacker does not hunt vulnerabilities one by one but alters the deployed model directly, and that change spreads to all consumers through the legitimate deployment pipeline; this is exactly the logic of SolarWinds-type supply-chain attacks. So the assessment focuses not on the model's content but on who accesses the registry with what authority, how the promote decision is audited, and whether provenance and attestation evidence is preserved here.