chio bind

Bind a model provider under a signed model card and print the weights hash and capability set the card declares.

On this page

Bind a provider under a signed model card.

Usage

Command synopsistext

chio bind [OPTIONS] --card <PATH> <PROVIDER>

<PROVIDER> Provider identifier to bind under the card. Free-form string surfaced in the resolved-binding summary; not interpreted by the helper. Required.
--card <PATH> Path to the canonical-JSON encoded model card. Required.
--bundle <PATH> Optional path to the cosign bundle for the card. When supplied, the helper verifies the bundle through chio_attest_verify::SigstoreVerifier::verify_bundle and refuses to print the binding summary on failure.
--issuer-san-regex <REGEX> Cosign certificate identity SAN regex required when --bundle is supplied. Forwarded verbatim to chio_attest_verify::ExpectedIdentity::certificate_identity_regexp.
--issuer-oidc <URL> OIDC issuer expected on the cosign certificate. Required with --bundle.
--weights-binding-mode <MODE> Runtime weights binding mode. required and required_with_pin require --bundle so card verification cannot be silently skipped. Default not_required.

Additional behavior

chio bind <provider> --card <path> loads the model card from <path> (canonical-JSON encoded per spec/schemas/model-card.v1.json), validates its structural shape, and prints the resolved weights_hash and allowed_capability_set so an operator can sanity check before promoting to production policy. The cosign bundle verify path consumes chio-attest-verify when --bundle is supplied; otherwise the helper prints the card fields without attesting authenticity.