An integer-only model format with a content-hashed manifest on Arweave lets anyone prove a model still behaves as its publisher claimed.