A vendor audit found unpinned models running unreviewed remote code via trust_remote_code=True, exposing the AI era's overlooked container supply chain risk.