Annex IV, 2(b) · declared by the provider

Model card as committed

What the provider says the model is, pinned by the plan, and beside it what the sandbox observed of the model in its own runs.

Familymock-good (demonstration)

PublisherDemo Provider

Parametersnone: a rule, not a trained network

Servingimage

01Declared · not checked

Declared

Declared by the provider, dev@provider.example, and committed through the gate. The sandbox checks that this is the card the plan pins. It does not check that what the card says is true.

Provider: Demo Provider
System: Point-of-sale age estimator
Model: mock-good
Publisher: Demo Provider
Family: mock-good (demonstration)
Parameters: none: a rule, not a trained network
Architecture: Mock age estimator (reads a synthetic pixel pattern)
Source: as declared by the provider; not verified by the sandbox
Committed: ledger seq 31 · 2026-09-28T07:22:49.850Z

02Declared

Licence

Apache-2.0

03Pinned · matches the plan

Pinning

The plan pins the image's digest; the centre runs its SIF.

Card digest: sha256:cb9d72b851f42b19cde0ec766863c80261198027f77a8cd68d2892b828ed6722
Plan pin: sha256:c426b8c53c7b7885e10f5a127e5686544ea2df3a6cd4137d7ccfa612896f3389
Status: Matches the plan
Pinned by: the model image

04Declared · image

Serving

Image: mock-good:fixed (simulated image)
Kind: image

05Declared

Intended use

Estimate whether a customer is 18 or over at unattended points of sale for age-restricted products, so that the machine either completes or refuses the sale. The harm the plan is written around is a minor being served; accuracy is judged against this purpose and nothing else.

06Declared

Input and output

Input: One face image, as a PNG. No labels, ids or metadata.
Output fields: estimated_age, decision, model_version

08Declared · 2

Limitations

A mock for demonstration: it reads age from a synthetic pixel pattern, not from a face, so a run measures the pipeline, not a real model.
Version 1.1.0 removes the offset that run 1 found.

09Measured · 2 runs

Observed in this sandbox

Measured by the harness and signed in each attestation, not declared. Results are on the Detail view, for the roles that may read them.

RunPromptTemperature · seedsAcceleratorData sent to

1Not the pinned promptsha256:85eb5be75cd3…0 · [20261101]cpu-only (mock provider)nowhere recorded

2Not the pinned promptsha256:85eb5be75cd3…0 · [20261101]cpu-only (mock provider)nowhere recorded

The card as committed (JSON)ledger seq 31

Show the record

{
  "input": "One face image, as a PNG. No labels, ids or metadata.",
  "intended_use": "Estimate whether a customer is 18 or over at unattended points of sale for age-restricted products, so that the machine either completes or refuses the sale. The harm the plan is written around is a minor being served; accuracy is judged against this purpose and nothing else.",
  "limitations": [
    "A mock for demonstration: it reads age from a synthetic pixel pattern, not from a face, so a run measures the pipeline, not a real model.",
    "Version 1.1.0 removes the offset that run 1 found."
  ],
  "model": {
    "architecture": "Mock age estimator (reads a synthetic pixel pattern)",
    "family": "mock-good (demonstration)",
    "id": "mock-good",
    "licence": "Apache-2.0",
    "parameters": "none: a rule, not a trained network",
    "publisher": "Demo Provider",
    "source": "as declared by the provider; not verified by the sandbox",
    "version": "1.1.0"
  },
  "output": {
    "fields": [
      "estimated_age",
      "decision",
      "model_version"
    ]
  },
  "provider": "Demo Provider",
  "schema": "sandbox-model-card/0.1",
  "serving": {
    "image": "mock-good:fixed (simulated image)",
    "kind": "image",
    "pinning": "The plan pins the image's digest; the centre runs its SIF."
  },
  "system_name": "Point-of-sale age estimator"
}