Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces AI Supply Chain Galaxy (AISCG), an interactive 3D visual analytics system designed to enhance model provenance and compliance auditing in the rapidly evolving AI supply chain. By mapping over 908,000 models from Hugging Face into a 3D spatial layout and integrating a rule-based compliance engine, AISCG enables users to explore complex dependency networks and identify compliance risks effectively. The analysis reveals that over half of the models exhibit compliance issues, including high rates of license omissions and "license drift," highlighting the urgent need for improved compliance tools in AI development.
Over 55% of AI models analyzed show compliance risks, underscoring a critical gap in the current compliance landscape.
The rapid proliferation of machine learning model reuse has transformed the AI ecosystem into a highly interconnected supply chain. Traditional compliance tools and static reports struggle to navigate these massive, multi-hop dependency networks. To address this, we present AI Supply Chain Galaxy (AISCG), an interactive 3D visual analytics system for model provenance and compliance auditing. AISCG maps models into a 3D spatial layout, integrating explicit structural dependencies with a rule-based compliance engine. It supports multi-scale exploration, from global community detection to localized, path-aware lineage tracing. We demonstrate its efficacy through an ecosystem-scale empirical analysis of 908,449 models from Hugging Face. Our findings reveal a concerning landscape: 55.46% of models exhibit compliance risks or metadata conflicts/omissions. We also identified distinct risk patterns, including a 56.67% license omission rate in adapter derivations and an 8.05% "license drift" rate in fine-tuning. Through a case study on the complex Llama model family, we show how AISCG empowers analysts to intuitively trace inherited restrictive terms and identify root causes across deep topological networks, significantly reducing the cognitive load of compliance auditing.