Conceptual trust boundary and review layers
A conceptual relationship diagram moves from OpenAI's research environment to reported activity on Hugging Face production systems, then separates host evidence, company response, vendor remediation, independent analysis, and legal review. Every connection uses equal-width geometry.
Technical containment, company response, vendor remediation, independent analysis, and legal review are separate layers with different evidence owners.
| Record type | Source | Relationship or node | Target | Evidence lane | Source IDs | State |
|---|---|---|---|---|---|---|
| Node | OpenAI investigation, control changes, and evaluations | Node | OpenAI company report | oa-1, oa-2 | Caution | |
| Node | Host containment, reconstruction, and affected-asset assessment | Node | Hugging Face host telemetry | hf-1, hf-2 | Verified | |
| Node | METR and Redwood analysis with access limits | Node | METR and Redwood independent investigation | mr-1, mr-2 | Caution | |
| Node | Alabama investigation and records demands | Node | Legal process | al-1, al-2 | Caution | |
| Node | Reported activity on Hugging Face production systems | Node | OpenAI company report | oa-1, oa-2 | Caution | |
| Node | OpenAI research and evaluation environment | Node | OpenAI company report | oa-1, oa-2 | Caution | |
| Node | JFrog statement and advisory context | Node | Vendor remediation | jf-1, jf-2 | Caution | |
| Edge | OpenAI investigation, control changes, and evaluations | Legal inquiry; no liability finding | Alabama investigation and records demands | Legal process | al-1, al-2 | Caution |
| Edge | OpenAI investigation, control changes, and evaluations | Vendor remediation context | JFrog statement and advisory context | Vendor remediation | jf-1, jf-2 | Caution |
| Edge | Host containment, reconstruction, and affected-asset assessment | Separate company review layer | OpenAI investigation, control changes, and evaluations | OpenAI company report | oa-1, oa-2 | Caution |
| Edge | Host containment, reconstruction, and affected-asset assessment | Evidence supplied for bounded review | METR and Redwood analysis with access limits | METR and Redwood independent investigation | mr-1, mr-2 | Caution |
| Edge | Reported activity on Hugging Face production systems | Host response record; no causal claim | Host containment, reconstruction, and affected-asset assessment | Hugging Face host telemetry | hf-1, hf-2 | Verified |
| Edge | OpenAI research and evaluation environment | Company-reported sequence; no causal claim | Reported activity on Hugging Face production systems | OpenAI company report | oa-1, oa-2 | Caution |
- Sources
- Retrieved
- Units
- conceptual relationships
- Transformations
- Keep the diagram conceptual and omit reusable technical instructions, secret indicators, and sensitive infrastructure detail.
- Render every connection with equal-width lines.
- Use relationship labels and state labels in addition to color.
- Uncertainty
- The diagram reconciles reported layers and is not a complete architecture or control inventory. Every node remains attributable to its source family.
- What this figure does not prove
- The diagram does not establish a complete technical path, traffic volume, probability, intent, severity, control effectiveness, liability, or universal agent behavior.