移动端下载 AI 模型完整性验证与版本绑定实施指南

#!/usr/bin/env python3
import sys
import json
import hashlib
from pathlib import Path

def load_manifest(manifest_path):
    if not Path(manifest_path).exists():
        print(f"ERROR: Manifest file not found at {manifest_path}")
        sys.exit(1)
    try:
        with open(manifest_path, 'r', encoding='utf-8') as f:
            return json.load(f)
    except json.JSONDecodeError as e:
        print(f"ERROR: Invalid JSON in manifest: {e}")
        sys.exit(1)

def verify_source_trust(manifest_data, allowed_domains):
    model_url = manifest_data.get('source_url', '')
    if not any(model_url.startswith(domain) for domain in allowed_domains):
        print(f"CRITICAL: Source URL '{model_url}' is not in allowlist.")
        return False
    print(f"OK: Source URL '{model_url}' matches trusted domain.")
    return True

def check_signature_status(manifest_data):
    sig_info = manifest_data.get('signature', {})
    if not sig_info.get('algorithm') or not sig_info.get('value'):
        print("CRITICAL: Signature information is missing or incomplete.")
        return False
    if sig_info.get('status') != 'valid':
        print(f"WARNING: Signature status reported as '{sig_info.get('status')}'.")
        return False
    print("OK: Signature structure present and status valid.")
    return True

def validate_version_binding(manifest_data, expected_version):
    current_ver = manifest_data.get('version')
    if current_ver != expected_version:
        print(f"MISMATCH: Expected version {expected_version}, found {current_ver}.")
        return False
    print(f"OK: Version binding confirmed ({current_ver}).")
    return True

if __name__ == "__main__":
    if len(sys.argv) < 4:
        print("Usage: script.py <manifest.json> <allowed_domains_json> <expected_version>")
        sys.exit(1)
    
    manifest_file = sys.argv[1]
    try:
        allowed_domains = json.loads(sys.argv[2])
    except json.JSONDecodeError:
        print("ERROR: Invalid JSON format for allowed domains.")
        sys.exit(1)
    target_version = sys.argv[3]

    data = load_manifest(manifest_file)
    
    checks_passed = True
    checks_passed &= verify_source_trust(data, allowed_domains)
    checks_passed &= check_signature_status(data)
    checks_passed &= validate_version_binding(data, target_version)

    if not checks_passed:
        print("RESULT: Model manifest validation FAILED. Do not proceed with download.")
        sys.exit(1)
    else:
        print("RESULT: All pre-download checks PASSED.")
        sys.exit(0)