Stage qualified native runtime 0.2.0

runtimes/v0.2.0/DOWNLOAD.md

@@ -0,0 +1,71 @@
+# Download and install the qualified runtime
+
+Use Python 3.12 or newer for installation. Inference runs through the native executable and needs neither Python nor network access. The Hugging Face repository is private; authenticate locally with an account authorized for DataFog.
+
+```sh
+python -m pip install 'huggingface_hub==1.27.0'
+hf auth login
+```
+
+Select exactly one tested target: `linux-x86_64`, `linux-aarch64`, `macos-arm64`, `macos-x86_64`, or `windows-x86_64`. The release index records the tested OS, exact archive hash, runtime source commit, model revision and MCP compatibility revision. Linux ARM64 qualification on Ubuntu is not a Raspberry Pi OS qualification. Windows qualification on Server 2022 does not establish every desktop Windows version.
+
+Save this script as `download_install.py`. Replace the revision with the immutable runtime commit from the staging report. It downloads only your selected archive and the versioned installer, forces a fresh download, and verifies the archive and all installed file hashes.
+
+```python
+import argparse
+import json
+import subprocess
+import sys
+from pathlib import Path
+from huggingface_hub import hf_hub_download
+
+parser = argparse.ArgumentParser()
+parser.add_argument('--platform', required=True)
+parser.add_argument('--destination', type=Path, required=True)
+args = parser.parse_args()
+revision = 'RUNTIME_COMMIT'
+repo = 'DataFog/datafog-pii'
+prefix = 'runtimes/v0.2.0'
+downloads = Path('datafog-runtime-download').resolve()
+
+def download(name):
+    return Path(hf_hub_download(
+        repo_id=repo, revision=revision, filename=f'{prefix}/{name}',
+        local_dir=downloads, force_download=True,
+    ))
+
+index = json.loads(download('release-index.json').read_text(encoding='utf-8'))
+record = next(item for item in index['platforms'] if item['platform'] == args.platform)
+archive = download(record['archive']['filename'])
+download('tools/common.py')
+installer = download('tools/install_bundle.py')
+subprocess.run([
+    sys.executable, str(installer), '--archive', str(archive),
+    '--sha256', record['archive']['sha256'],
+    '--destination', str(args.destination.resolve()),
+], check=True)
+```
+
+Run it with your target and a new absolute destination; the installer refuses an existing directory and a mismatched host architecture.
+
+```sh
+python download_install.py --platform macos-arm64 --destination /absolute/new/datafog-bundle
+```
+
+On Windows, use `--platform windows-x86_64` and a path such as `C:\DataFog\bundle`. Install Microsoft's x64 Visual C++ Redistributable (2019-compatible v14). The installer probes startup and reports a missing runtime dependency. Intel macOS requires 15 or newer; ARM macOS requires 14 or newer.
+
+Use datafog-mcp PR #33's compatibility revision `01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3` (stacked on PR #32). Configure the installed path in MCP policy:
+
+```toml
+[model]
+bundle_directory = "/absolute/new/datafog-bundle"
+```
+
+On Windows, TOML literal strings avoid escaping backslashes:
+
+```toml
+[model]
+bundle_directory = 'C:\DataFog\bundle'
+```
+
+Keep weights, tokenizer, configuration and calibration together. GLiNER is not part of this download.

runtimes/v0.2.0/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

runtimes/v0.2.0/NOTICE

@@ -0,0 +1,7 @@
+DataFog PII v0.1.0 — Copyright 2026 DataFog contributors.
+Derived from distilbert/distilbert-base-cased (Apache-2.0), revision 6ea81172465e8b0ad3fddeed32b986cdcdcffcf0.
+Fine-tuned with NVIDIA Nemotron-PII (2025), Amy Steier, Andre Manoel, Alexa Haushalter, Maarten Van Segbroeck. CC BY 4.0.
+https://huggingface.co/datasets/nvidia/Nemotron-PII
+https://creativecommons.org/licenses/by/4.0/
+DataFog modifications: structural filtering, seven-label projection, grouped partitions, DistilBERT fine-tuning, windowing, span decoding and pooled calibration. This attribution does not imply NVIDIA endorsement.
+ONNX Runtime and Rust dependencies retain their respective notices under licenses/ and bundle/licenses/.

runtimes/v0.2.0/README.md

@@ -0,0 +1,7 @@
+Experimental DataFog PII model 0.1.0 with native runtime 0.2.0.
+
+Epoch-2 model weights, tokenizer, label mappings and pooled calibration remain frozen at Hugging Face revision 02cc6ca86a11dcb2b328861687770a22a7ea1b76. Native runtime adds platform-specific library names and disables ORT telemetry. MCP Windows executable selection is proposed in datafog-mcp PR #33 (stacked on #32).
+
+These exact archives passed native boundary tests, fresh archive installation, seven Python/native and original-Mac golden cases, and actual MCP integration tests on their recorded native runners. See release-index.json and per-platform qualification reports for archive hashes and tested environment scope. Other OS versions/devices and production quality remain unqualified.
+
+Weights: Apache-2.0; dataset attribution: CC-BY-4.0; upstream runtime/dependency notices are included. GLiNER is a separate comparison, not part of this model.

runtimes/v0.2.0/datafog-pii-0.1.0-runtime-0.2.0-linux-aarch64.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c22fd91dd601e22ccb13d074a555e58a6926e7b57adb5234171261763fa5b203
+size 263744529

runtimes/v0.2.0/datafog-pii-0.1.0-runtime-0.2.0-linux-x86_64.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:355f54837d3f4ff0aebc72700cb38591176b29e0f75c63c66e04d874df4eb713
+size 265799226

runtimes/v0.2.0/datafog-pii-0.1.0-runtime-0.2.0-macos-arm64.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b2980aa1de1702957da3182a0aee3ac3fed2686cf146f52eb037256936b04e37
+size 262335474

runtimes/v0.2.0/datafog-pii-0.1.0-runtime-0.2.0-macos-x86_64.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:47ae14fe1a37704672c2e6ebcad5e428b4cef9b3c538f092fa9789975199a53a
+size 262222950

runtimes/v0.2.0/datafog-pii-0.1.0-runtime-0.2.0-windows-x86_64.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cd4738fcff9f440fa80ce6a71be8c71719e2137d7fd35a8c099f42238740a8f3
+size 249849360

runtimes/v0.2.0/linux-aarch64-qualification.json

@@ -0,0 +1,99 @@
+{
+  "status": "qualified",
+  "platform": "linux-aarch64",
+  "tested_host": "Linux-6.17.0-1022-azure-aarch64-with-glibc2.39",
+  "archive": {
+    "filename": "datafog-pii-0.1.0-runtime-0.2.0-linux-aarch64.tar.gz",
+    "sha256": "c22fd91dd601e22ccb13d074a555e58a6926e7b57adb5234171261763fa5b203",
+    "bytes": 263744529,
+    "provenance": {
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "platform": "linux-aarch64",
+      "host": "Linux-6.17.0-1022-azure-aarch64-with-glibc2.39",
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "runtime": {
+        "url": "https://files.pythonhosted.org/packages/16/bd/cbc5b8f91963689fdd622f463508c01d0aa95d3f944747b1e0b1eb2160b8/onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_aarch64.whl",
+        "filename": "onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_aarch64.whl",
+        "sha256": "6c32a000d5139a38ba9349030b0032e3331acb559d596b22738d9d2b343a2b83",
+        "source": "official PyPI CPU wheel",
+        "version": "1.30.0"
+      },
+      "native_files": [
+        "libonnxruntime_providers_shared.so",
+        "libonnxruntime.so.1.30.0"
+      ],
+      "telemetry_disabled": true,
+      "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+      "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+      "python": "3.12.14 (main, Aug 13 2026, 02:48:06) [GCC 13.3.0]",
+      "status": "candidate; qualification evidence required"
+    }
+  },
+  "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+  "model_version": "0.1.0",
+  "runtime_version": "0.2.0",
+  "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+  "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+  "mcp_tests": {
+    "tests": 33,
+    "failures": 0,
+    "errors": 0,
+    "skipped": 0
+  },
+  "native_unit_tests": 3,
+  "golden_cases": 7,
+  "same_host_parity": {
+    "bundle": "/home/runner/work/DataFog-models/DataFog-models/.work/installed",
+    "cases": [
+      {
+        "bytes": 0,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 11,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 52,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 26,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 28,
+        "windows": 1,
+        "findings": 3
+      },
+      {
+        "bytes": 9933,
+        "windows": 5,
+        "findings": 3
+      },
+      {
+        "bytes": 4559,
+        "windows": 3,
+        "findings": 2
+      }
+    ],
+    "max_abs_logit_difference": 0.0,
+    "logits_bit_identical": true,
+    "logit_atol": 0.0001,
+    "logit_rtol": 1e-05,
+    "token_ids_masks_global_byte_offsets_parity": true,
+    "findings_redaction_parity": true,
+    "actual_python_predictor_parity": true,
+    "malformed_request_explicit_error_and_recovery": true,
+    "cold_process_debug_batch_seconds": 7.486043384999988,
+    "note": "Parity fixtures prove implementation consistency, not detection quality."
+  },
+  "workflow_run": "37249503334",
+  "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+  "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+}

runtimes/v0.2.0/linux-x86_64-qualification.json

@@ -0,0 +1,99 @@
+{
+  "status": "qualified",
+  "platform": "linux-x86_64",
+  "tested_host": "Linux-6.8.0-1064-azure-x86_64-with-glibc2.35",
+  "archive": {
+    "filename": "datafog-pii-0.1.0-runtime-0.2.0-linux-x86_64.tar.gz",
+    "sha256": "355f54837d3f4ff0aebc72700cb38591176b29e0f75c63c66e04d874df4eb713",
+    "bytes": 265799226,
+    "provenance": {
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "platform": "linux-x86_64",
+      "host": "Linux-6.8.0-1064-azure-x86_64-with-glibc2.35",
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "runtime": {
+        "url": "https://files.pythonhosted.org/packages/34/35/e7f862dbacbc99fadd9b14a614e49c99bf0f35fd9927a82f096e3de33531/onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_x86_64.whl",
+        "filename": "onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_x86_64.whl",
+        "sha256": "fa688e7891a6aa206636fe7372e27ee75fd17713289f6b4fc7b190e0a7de9328",
+        "source": "official PyPI CPU wheel",
+        "version": "1.30.0"
+      },
+      "native_files": [
+        "libonnxruntime_providers_shared.so",
+        "libonnxruntime.so.1.30.0"
+      ],
+      "telemetry_disabled": true,
+      "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+      "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+      "python": "3.12.14 (main, Aug 13 2026, 02:48:23) [GCC 11.4.0]",
+      "status": "candidate; qualification evidence required"
+    }
+  },
+  "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+  "model_version": "0.1.0",
+  "runtime_version": "0.2.0",
+  "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+  "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+  "mcp_tests": {
+    "tests": 33,
+    "failures": 0,
+    "errors": 0,
+    "skipped": 0
+  },
+  "native_unit_tests": 3,
+  "golden_cases": 7,
+  "same_host_parity": {
+    "bundle": "/home/runner/work/DataFog-models/DataFog-models/.work/installed",
+    "cases": [
+      {
+        "bytes": 0,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 11,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 52,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 26,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 28,
+        "windows": 1,
+        "findings": 3
+      },
+      {
+        "bytes": 9933,
+        "windows": 5,
+        "findings": 3
+      },
+      {
+        "bytes": 4559,
+        "windows": 3,
+        "findings": 2
+      }
+    ],
+    "max_abs_logit_difference": 0.0,
+    "logits_bit_identical": true,
+    "logit_atol": 0.0001,
+    "logit_rtol": 1e-05,
+    "token_ids_masks_global_byte_offsets_parity": true,
+    "findings_redaction_parity": true,
+    "actual_python_predictor_parity": true,
+    "malformed_request_explicit_error_and_recovery": true,
+    "cold_process_debug_batch_seconds": 4.687581455,
+    "note": "Parity fixtures prove implementation consistency, not detection quality."
+  },
+  "workflow_run": "37249503334",
+  "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+  "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+}

runtimes/v0.2.0/macos-arm64-qualification.json

@@ -0,0 +1,98 @@
+{
+  "status": "qualified",
+  "platform": "macos-arm64",
+  "tested_host": "macOS-14.8.9-arm64-arm-64bit",
+  "archive": {
+    "filename": "datafog-pii-0.1.0-runtime-0.2.0-macos-arm64.tar.gz",
+    "sha256": "b2980aa1de1702957da3182a0aee3ac3fed2686cf146f52eb037256936b04e37",
+    "bytes": 262335474,
+    "provenance": {
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "platform": "macos-arm64",
+      "host": "macOS-14.8.9-arm64-arm-64bit",
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "runtime": {
+        "url": "https://files.pythonhosted.org/packages/31/6f/48169f2e62b405bff5053cbd1d73fb5ce41ef7ecd13bb3bfcc191e689b8a/onnxruntime-1.30.0-cp312-cp312-macosx_14_0_arm64.whl",
+        "filename": "onnxruntime-1.30.0-cp312-cp312-macosx_14_0_arm64.whl",
+        "sha256": "001ed726c9bd5e2bc92faade7d37d889e9606a350b7d5529f0227df2e3bb57fd",
+        "source": "official PyPI CPU wheel",
+        "version": "1.30.0"
+      },
+      "native_files": [
+        "libonnxruntime.1.30.0.dylib"
+      ],
+      "telemetry_disabled": true,
+      "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+      "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+      "python": "3.12.10 (v3.12.10:0cc81280367, Apr  8 2025, 08:46:59) [Clang 13.0.0 (clang-1300.0.29.30)]",
+      "status": "candidate; qualification evidence required"
+    }
+  },
+  "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+  "model_version": "0.1.0",
+  "runtime_version": "0.2.0",
+  "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+  "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+  "mcp_tests": {
+    "tests": 33,
+    "failures": 0,
+    "errors": 0,
+    "skipped": 0
+  },
+  "native_unit_tests": 3,
+  "golden_cases": 7,
+  "same_host_parity": {
+    "bundle": "/Users/runner/work/DataFog-models/DataFog-models/.work/installed",
+    "cases": [
+      {
+        "bytes": 0,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 11,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 52,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 26,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 28,
+        "windows": 1,
+        "findings": 3
+      },
+      {
+        "bytes": 9933,
+        "windows": 5,
+        "findings": 3
+      },
+      {
+        "bytes": 4559,
+        "windows": 3,
+        "findings": 2
+      }
+    ],
+    "max_abs_logit_difference": 0.0,
+    "logits_bit_identical": true,
+    "logit_atol": 0.0001,
+    "logit_rtol": 1e-05,
+    "token_ids_masks_global_byte_offsets_parity": true,
+    "findings_redaction_parity": true,
+    "actual_python_predictor_parity": true,
+    "malformed_request_explicit_error_and_recovery": true,
+    "cold_process_debug_batch_seconds": 4.529053791000024,
+    "note": "Parity fixtures prove implementation consistency, not detection quality."
+  },
+  "workflow_run": "37249503334",
+  "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+  "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+}

runtimes/v0.2.0/macos-x86_64-qualification.json

@@ -0,0 +1,100 @@
+{
+  "status": "qualified",
+  "platform": "macos-x86_64",
+  "tested_host": "macOS-15.7.9-x86_64-i386-64bit",
+  "archive": {
+    "filename": "datafog-pii-0.1.0-runtime-0.2.0-macos-x86_64.tar.gz",
+    "sha256": "47ae14fe1a37704672c2e6ebcad5e428b4cef9b3c538f092fa9789975199a53a",
+    "bytes": 262222950,
+    "provenance": {
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "platform": "macos-x86_64",
+      "host": "macOS-15.7.9-x86_64-i386-64bit",
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "runtime": {
+        "source": "native source build",
+        "repo": "https://github.com/microsoft/onnxruntime.git",
+        "revision": "f2c39fe2f838cf35ce7da92824f5a5e3ee6e88a7",
+        "version": "1.30.0",
+        "minimum_macos": "15.0",
+        "wheel_sha256": "b5038ea18c33ae7928ab4839d177d3de1ca5b7ab96b2775e0c7cb83a405d5021",
+        "wheel_filename": "onnxruntime-1.30.0-cp312-cp312-macosx_15_0_universal2.whl"
+      },
+      "native_files": [
+        "libonnxruntime.1.30.0.dylib"
+      ],
+      "telemetry_disabled": true,
+      "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+      "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+      "python": "3.12.10 (v3.12.10:0cc81280367, Apr  8 2025, 08:47:00) [Clang 13.0.0 (clang-1300.0.29.30)]",
+      "status": "candidate; qualification evidence required"
+    }
+  },
+  "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+  "model_version": "0.1.0",
+  "runtime_version": "0.2.0",
+  "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+  "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+  "mcp_tests": {
+    "tests": 33,
+    "failures": 0,
+    "errors": 0,
+    "skipped": 0
+  },
+  "native_unit_tests": 3,
+  "golden_cases": 7,
+  "same_host_parity": {
+    "bundle": "/Users/runner/work/DataFog-models/DataFog-models/.work/installed",
+    "cases": [
+      {
+        "bytes": 0,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 11,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 52,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 26,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 28,
+        "windows": 1,
+        "findings": 3
+      },
+      {
+        "bytes": 9933,
+        "windows": 5,
+        "findings": 3
+      },
+      {
+        "bytes": 4559,
+        "windows": 3,
+        "findings": 2
+      }
+    ],
+    "max_abs_logit_difference": 0.0,
+    "logits_bit_identical": true,
+    "logit_atol": 0.0001,
+    "logit_rtol": 1e-05,
+    "token_ids_masks_global_byte_offsets_parity": true,
+    "findings_redaction_parity": true,
+    "actual_python_predictor_parity": true,
+    "malformed_request_explicit_error_and_recovery": true,
+    "cold_process_debug_batch_seconds": 8.927164207999795,
+    "note": "Parity fixtures prove implementation consistency, not detection quality."
+  },
+  "workflow_run": "37249503334",
+  "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+  "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+}

runtimes/v0.2.0/manifest.json

@@ -0,0 +1,72 @@
+{
+  "files": {
+    "LICENSE": {
+      "sha256": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30",
+      "bytes": 11358
+    },
+    "macos-x86_64-qualification.json": {
+      "sha256": "6c51bbc4f7615d323942ee43183d322e18d1d291efcfd8c338dca30a37fcc9e4",
+      "bytes": 3157
+    },
+    "macos-arm64-qualification.json": {
+      "sha256": "9f5431f724b70e3c015dd279973bc004c9a9d1957bb97a2c52736f4705c04b68",
+      "bytes": 3154
+    },
+    "datafog-pii-0.1.0-runtime-0.2.0-macos-arm64.tar.gz": {
+      "sha256": "b2980aa1de1702957da3182a0aee3ac3fed2686cf146f52eb037256936b04e37",
+      "bytes": 262335474
+    },
+    "linux-x86_64-qualification.json": {
+      "sha256": "a48c1ed0b2701d0564f11b8f455d9c4340fbca364c6925e7410cc7cb5b1851cf",
+      "bytes": 3194
+    },
+    "DOWNLOAD.md": {
+      "sha256": "66f0ed9ff28f5e4b561228ae76e48cb0fa418f9004a9d5f86b82f20843cd2b74",
+      "bytes": 3155
+    },
+    "windows-x86_64-qualification.json": {
+      "sha256": "d28a8c5901065bdeedebca34064c4b317dfba376fedc6cea53edb1e214d17181",
+      "bytes": 4146
+    },
+    "NOTICE": {
+      "sha256": "095e3c86feea233ae4b87d9d5650b9e9850c2bb708eac4f09b46655bf84a37c9",
+      "bytes": 709
+    },
+    "datafog-pii-0.1.0-runtime-0.2.0-windows-x86_64.tar.gz": {
+      "sha256": "cd4738fcff9f440fa80ce6a71be8c71719e2137d7fd35a8c099f42238740a8f3",
+      "bytes": 249849360
+    },
+    "datafog-pii-0.1.0-runtime-0.2.0-linux-aarch64.tar.gz": {
+      "sha256": "c22fd91dd601e22ccb13d074a555e58a6926e7b57adb5234171261763fa5b203",
+      "bytes": 263744529
+    },
+    "README.md": {
+      "sha256": "d0a219aaee0efdd38fa56384da2629d10a23179d4c70448caf6278ceb6ae0707",
+      "bytes": 922
+    },
+    "release-index.json": {
+      "sha256": "934d98c05c1b26697879ee3f00cc2fef1f07cc6cc0e53a443099098e15e227fc",
+      "bytes": 19035
+    },
+    "linux-aarch64-qualification.json": {
+      "sha256": "a6792194812ad71c757abfde9710a5a70c4581238626b052d3083a7b3659d3da",
+      "bytes": 3209
+    },
+    "datafog-pii-0.1.0-runtime-0.2.0-macos-x86_64.tar.gz": {
+      "sha256": "47ae14fe1a37704672c2e6ebcad5e428b4cef9b3c538f092fa9789975199a53a",
+      "bytes": 262222950
+    },
+    "datafog-pii-0.1.0-runtime-0.2.0-linux-x86_64.tar.gz": {
+      "sha256": "355f54837d3f4ff0aebc72700cb38591176b29e0f75c63c66e04d874df4eb713",
+      "bytes": 265799226
+    },
+    "tools/install_bundle.py": {
+      "sha256": "08534261ef2e3fefe27b224eee1d0e6aa26ff62fce98db00f5abd8562641f3de",
+      "bytes": 2866
+    },
+    "tools/common.py": {
+      "sha256": "b72fbea9ad2ae4ea9e231a420137d7e5ad5270089bb33f754537e0325338074e",
+      "bytes": 1931
+    }
+  }
+}

runtimes/v0.2.0/release-index.json

@@ -0,0 +1,523 @@
+{
+  "model": "datafog-pii",
+  "model_version": "0.1.0",
+  "runtime_version": "0.2.0",
+  "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+  "source_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+  "platforms": [
+    {
+      "status": "qualified",
+      "platform": "linux-x86_64",
+      "tested_host": "Linux-6.8.0-1064-azure-x86_64-with-glibc2.35",
+      "archive": {
+        "filename": "datafog-pii-0.1.0-runtime-0.2.0-linux-x86_64.tar.gz",
+        "sha256": "355f54837d3f4ff0aebc72700cb38591176b29e0f75c63c66e04d874df4eb713",
+        "bytes": 265799226,
+        "provenance": {
+          "model_version": "0.1.0",
+          "runtime_version": "0.2.0",
+          "platform": "linux-x86_64",
+          "host": "Linux-6.8.0-1064-azure-x86_64-with-glibc2.35",
+          "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+          "runtime": {
+            "url": "https://files.pythonhosted.org/packages/34/35/e7f862dbacbc99fadd9b14a614e49c99bf0f35fd9927a82f096e3de33531/onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_x86_64.whl",
+            "filename": "onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_x86_64.whl",
+            "sha256": "fa688e7891a6aa206636fe7372e27ee75fd17713289f6b4fc7b190e0a7de9328",
+            "source": "official PyPI CPU wheel",
+            "version": "1.30.0"
+          },
+          "native_files": [
+            "libonnxruntime_providers_shared.so",
+            "libonnxruntime.so.1.30.0"
+          ],
+          "telemetry_disabled": true,
+          "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+          "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+          "python": "3.12.14 (main, Aug 13 2026, 02:48:23) [GCC 11.4.0]",
+          "status": "candidate; qualification evidence required"
+        }
+      },
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+      "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+      "mcp_tests": {
+        "tests": 33,
+        "failures": 0,
+        "errors": 0,
+        "skipped": 0
+      },
+      "native_unit_tests": 3,
+      "golden_cases": 7,
+      "same_host_parity": {
+        "bundle": "/home/runner/work/DataFog-models/DataFog-models/.work/installed",
+        "cases": [
+          {
+            "bytes": 0,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 11,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 52,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 26,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 28,
+            "windows": 1,
+            "findings": 3
+          },
+          {
+            "bytes": 9933,
+            "windows": 5,
+            "findings": 3
+          },
+          {
+            "bytes": 4559,
+            "windows": 3,
+            "findings": 2
+          }
+        ],
+        "max_abs_logit_difference": 0.0,
+        "logits_bit_identical": true,
+        "logit_atol": 0.0001,
+        "logit_rtol": 1e-05,
+        "token_ids_masks_global_byte_offsets_parity": true,
+        "findings_redaction_parity": true,
+        "actual_python_predictor_parity": true,
+        "malformed_request_explicit_error_and_recovery": true,
+        "cold_process_debug_batch_seconds": 4.687581455,
+        "note": "Parity fixtures prove implementation consistency, not detection quality."
+      },
+      "workflow_run": "37249503334",
+      "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+      "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+    },
+    {
+      "status": "qualified",
+      "platform": "linux-aarch64",
+      "tested_host": "Linux-6.17.0-1022-azure-aarch64-with-glibc2.39",
+      "archive": {
+        "filename": "datafog-pii-0.1.0-runtime-0.2.0-linux-aarch64.tar.gz",
+        "sha256": "c22fd91dd601e22ccb13d074a555e58a6926e7b57adb5234171261763fa5b203",
+        "bytes": 263744529,
+        "provenance": {
+          "model_version": "0.1.0",
+          "runtime_version": "0.2.0",
+          "platform": "linux-aarch64",
+          "host": "Linux-6.17.0-1022-azure-aarch64-with-glibc2.39",
+          "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+          "runtime": {
+            "url": "https://files.pythonhosted.org/packages/16/bd/cbc5b8f91963689fdd622f463508c01d0aa95d3f944747b1e0b1eb2160b8/onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_aarch64.whl",
+            "filename": "onnxruntime-1.30.0-cp312-cp312-manylinux_2_28_aarch64.whl",
+            "sha256": "6c32a000d5139a38ba9349030b0032e3331acb559d596b22738d9d2b343a2b83",
+            "source": "official PyPI CPU wheel",
+            "version": "1.30.0"
+          },
+          "native_files": [
+            "libonnxruntime_providers_shared.so",
+            "libonnxruntime.so.1.30.0"
+          ],
+          "telemetry_disabled": true,
+          "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+          "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+          "python": "3.12.14 (main, Aug 13 2026, 02:48:06) [GCC 13.3.0]",
+          "status": "candidate; qualification evidence required"
+        }
+      },
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+      "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+      "mcp_tests": {
+        "tests": 33,
+        "failures": 0,
+        "errors": 0,
+        "skipped": 0
+      },
+      "native_unit_tests": 3,
+      "golden_cases": 7,
+      "same_host_parity": {
+        "bundle": "/home/runner/work/DataFog-models/DataFog-models/.work/installed",
+        "cases": [
+          {
+            "bytes": 0,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 11,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 52,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 26,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 28,
+            "windows": 1,
+            "findings": 3
+          },
+          {
+            "bytes": 9933,
+            "windows": 5,
+            "findings": 3
+          },
+          {
+            "bytes": 4559,
+            "windows": 3,
+            "findings": 2
+          }
+        ],
+        "max_abs_logit_difference": 0.0,
+        "logits_bit_identical": true,
+        "logit_atol": 0.0001,
+        "logit_rtol": 1e-05,
+        "token_ids_masks_global_byte_offsets_parity": true,
+        "findings_redaction_parity": true,
+        "actual_python_predictor_parity": true,
+        "malformed_request_explicit_error_and_recovery": true,
+        "cold_process_debug_batch_seconds": 7.486043384999988,
+        "note": "Parity fixtures prove implementation consistency, not detection quality."
+      },
+      "workflow_run": "37249503334",
+      "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+      "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+    },
+    {
+      "status": "qualified",
+      "platform": "macos-arm64",
+      "tested_host": "macOS-14.8.9-arm64-arm-64bit",
+      "archive": {
+        "filename": "datafog-pii-0.1.0-runtime-0.2.0-macos-arm64.tar.gz",
+        "sha256": "b2980aa1de1702957da3182a0aee3ac3fed2686cf146f52eb037256936b04e37",
+        "bytes": 262335474,
+        "provenance": {
+          "model_version": "0.1.0",
+          "runtime_version": "0.2.0",
+          "platform": "macos-arm64",
+          "host": "macOS-14.8.9-arm64-arm-64bit",
+          "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+          "runtime": {
+            "url": "https://files.pythonhosted.org/packages/31/6f/48169f2e62b405bff5053cbd1d73fb5ce41ef7ecd13bb3bfcc191e689b8a/onnxruntime-1.30.0-cp312-cp312-macosx_14_0_arm64.whl",
+            "filename": "onnxruntime-1.30.0-cp312-cp312-macosx_14_0_arm64.whl",
+            "sha256": "001ed726c9bd5e2bc92faade7d37d889e9606a350b7d5529f0227df2e3bb57fd",
+            "source": "official PyPI CPU wheel",
+            "version": "1.30.0"
+          },
+          "native_files": [
+            "libonnxruntime.1.30.0.dylib"
+          ],
+          "telemetry_disabled": true,
+          "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+          "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+          "python": "3.12.10 (v3.12.10:0cc81280367, Apr  8 2025, 08:46:59) [Clang 13.0.0 (clang-1300.0.29.30)]",
+          "status": "candidate; qualification evidence required"
+        }
+      },
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+      "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+      "mcp_tests": {
+        "tests": 33,
+        "failures": 0,
+        "errors": 0,
+        "skipped": 0
+      },
+      "native_unit_tests": 3,
+      "golden_cases": 7,
+      "same_host_parity": {
+        "bundle": "/Users/runner/work/DataFog-models/DataFog-models/.work/installed",
+        "cases": [
+          {
+            "bytes": 0,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 11,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 52,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 26,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 28,
+            "windows": 1,
+            "findings": 3
+          },
+          {
+            "bytes": 9933,
+            "windows": 5,
+            "findings": 3
+          },
+          {
+            "bytes": 4559,
+            "windows": 3,
+            "findings": 2
+          }
+        ],
+        "max_abs_logit_difference": 0.0,
+        "logits_bit_identical": true,
+        "logit_atol": 0.0001,
+        "logit_rtol": 1e-05,
+        "token_ids_masks_global_byte_offsets_parity": true,
+        "findings_redaction_parity": true,
+        "actual_python_predictor_parity": true,
+        "malformed_request_explicit_error_and_recovery": true,
+        "cold_process_debug_batch_seconds": 4.529053791000024,
+        "note": "Parity fixtures prove implementation consistency, not detection quality."
+      },
+      "workflow_run": "37249503334",
+      "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+      "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+    },
+    {
+      "status": "qualified",
+      "platform": "macos-x86_64",
+      "tested_host": "macOS-15.7.9-x86_64-i386-64bit",
+      "archive": {
+        "filename": "datafog-pii-0.1.0-runtime-0.2.0-macos-x86_64.tar.gz",
+        "sha256": "47ae14fe1a37704672c2e6ebcad5e428b4cef9b3c538f092fa9789975199a53a",
+        "bytes": 262222950,
+        "provenance": {
+          "model_version": "0.1.0",
+          "runtime_version": "0.2.0",
+          "platform": "macos-x86_64",
+          "host": "macOS-15.7.9-x86_64-i386-64bit",
+          "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+          "runtime": {
+            "source": "native source build",
+            "repo": "https://github.com/microsoft/onnxruntime.git",
+            "revision": "f2c39fe2f838cf35ce7da92824f5a5e3ee6e88a7",
+            "version": "1.30.0",
+            "minimum_macos": "15.0",
+            "wheel_sha256": "b5038ea18c33ae7928ab4839d177d3de1ca5b7ab96b2775e0c7cb83a405d5021",
+            "wheel_filename": "onnxruntime-1.30.0-cp312-cp312-macosx_15_0_universal2.whl"
+          },
+          "native_files": [
+            "libonnxruntime.1.30.0.dylib"
+          ],
+          "telemetry_disabled": true,
+          "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+          "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+          "python": "3.12.10 (v3.12.10:0cc81280367, Apr  8 2025, 08:47:00) [Clang 13.0.0 (clang-1300.0.29.30)]",
+          "status": "candidate; qualification evidence required"
+        }
+      },
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+      "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+      "mcp_tests": {
+        "tests": 33,
+        "failures": 0,
+        "errors": 0,
+        "skipped": 0
+      },
+      "native_unit_tests": 3,
+      "golden_cases": 7,
+      "same_host_parity": {
+        "bundle": "/Users/runner/work/DataFog-models/DataFog-models/.work/installed",
+        "cases": [
+          {
+            "bytes": 0,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 11,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 52,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 26,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 28,
+            "windows": 1,
+            "findings": 3
+          },
+          {
+            "bytes": 9933,
+            "windows": 5,
+            "findings": 3
+          },
+          {
+            "bytes": 4559,
+            "windows": 3,
+            "findings": 2
+          }
+        ],
+        "max_abs_logit_difference": 0.0,
+        "logits_bit_identical": true,
+        "logit_atol": 0.0001,
+        "logit_rtol": 1e-05,
+        "token_ids_masks_global_byte_offsets_parity": true,
+        "findings_redaction_parity": true,
+        "actual_python_predictor_parity": true,
+        "malformed_request_explicit_error_and_recovery": true,
+        "cold_process_debug_batch_seconds": 8.927164207999795,
+        "note": "Parity fixtures prove implementation consistency, not detection quality."
+      },
+      "workflow_run": "37249503334",
+      "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+      "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+    },
+    {
+      "status": "qualified",
+      "platform": "windows-x86_64",
+      "tested_host": "Windows-2022Server-10.0.20348-SP0",
+      "archive": {
+        "filename": "datafog-pii-0.1.0-runtime-0.2.0-windows-x86_64.tar.gz",
+        "sha256": "cd4738fcff9f440fa80ce6a71be8c71719e2137d7fd35a8c099f42238740a8f3",
+        "bytes": 249849360,
+        "provenance": {
+          "model_version": "0.1.0",
+          "runtime_version": "0.2.0",
+          "platform": "windows-x86_64",
+          "host": "Windows-2022Server-10.0.20348-SP0",
+          "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+          "runtime": {
+            "url": "https://files.pythonhosted.org/packages/a6/13/0f1699f6de549c9324bc9112a2a85b14c517904cd11b562a654643b755a1/onnxruntime-1.30.0-cp312-cp312-win_amd64.whl",
+            "filename": "onnxruntime-1.30.0-cp312-cp312-win_amd64.whl",
+            "sha256": "f3501472571f1b1eee50e017851e7929f5ea37312d2d8c2494a19e8fc58b4a38",
+            "source": "official PyPI CPU wheel",
+            "version": "1.30.0"
+          },
+          "native_files": [
+            "onnxruntime.dll",
+            "onnxruntime_providers_shared.dll"
+          ],
+          "telemetry_disabled": true,
+          "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+          "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+          "python": "3.12.10 (tags/v3.12.10:0cc8128, Apr  8 2025, 12:21:36) [MSC v.1943 64 bit (AMD64)]",
+          "status": "candidate; qualification evidence required",
+          "manifest_path_repair": {
+            "original_archive_sha256": "afcceebb647288f88eda67e9c18d46ce22e384a96902f8b2fbd56b8a08527d99",
+            "packaging_commit": "51324937c52852fc70bec96674c3ed39a617dac0",
+            "native_files_unchanged": {
+              "datafog-pii.exe": {
+                "sha256": "569e3f310c4a969ef5338c2d6f89c34db0413522f9b6210fb1fd77569f9dea27",
+                "bytes": 4235264
+              },
+              "onnxruntime.dll": {
+                "sha256": "e42c5c917207ff706530315177e39dca2539695a6a8d968a22225e34291b1f12",
+                "bytes": 18446176
+              },
+              "onnxruntime_providers_shared.dll": {
+                "sha256": "46b999f9d5cd9d284091407e9f50a262624e6a71265fc428a1dfbd42d149bd81",
+                "bytes": 21856
+              }
+            },
+            "change": "Canonical POSIX manifest paths; no executable/library/model change"
+          }
+        }
+      },
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+      "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+      "mcp_tests": {
+        "tests": 33,
+        "failures": 0,
+        "errors": 0,
+        "skipped": 0
+      },
+      "native_unit_tests": 3,
+      "golden_cases": 7,
+      "same_host_parity": {
+        "bundle": "D:\\a\\DataFog-models\\DataFog-models\\.work\\installed",
+        "cases": [
+          {
+            "bytes": 0,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 11,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 52,
+            "windows": 1,
+            "findings": 2
+          },
+          {
+            "bytes": 26,
+            "windows": 1,
+            "findings": 0
+          },
+          {
+            "bytes": 28,
+            "windows": 1,
+            "findings": 3
+          },
+          {
+            "bytes": 9933,
+            "windows": 5,
+            "findings": 3
+          },
+          {
+            "bytes": 4559,
+            "windows": 3,
+            "findings": 2
+          }
+        ],
+        "max_abs_logit_difference": 0.0,
+        "logits_bit_identical": true,
+        "logit_atol": 0.0001,
+        "logit_rtol": 1e-05,
+        "token_ids_masks_global_byte_offsets_parity": true,
+        "findings_redaction_parity": true,
+        "actual_python_predictor_parity": true,
+        "malformed_request_explicit_error_and_recovery": true,
+        "cold_process_debug_batch_seconds": 2.6044589999999914,
+        "note": "Parity fixtures prove implementation consistency, not detection quality."
+      },
+      "workflow_run": "37249503334",
+      "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+      "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+    }
+  ]
+}

runtimes/v0.2.0/tools/common.py

@@ -0,0 +1,61 @@
+"""Integrity and archive helpers shared by release tooling."""
+
+import hashlib
+import json
+import platform
+import tarfile
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+SPEC = ROOT / "models/datafog-pii/release.json"
+
+
+def read(path):
+    return json.loads(Path(path).read_text(encoding="utf-8"))
+
+
+def write(path, value):
+    path = Path(path)
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(value, indent=2) + "\n", encoding="utf-8")
+
+
+def sha256(path):
+    with Path(path).open("rb") as stream:
+        return hashlib.file_digest(stream, "sha256").hexdigest()
+
+
+def identity(path):
+    return {"sha256": sha256(path), "bytes": Path(path).stat().st_size}
+
+
+def safe_path(root, name):
+    candidate = Path(name)
+    if candidate.is_absolute() or ".." in candidate.parts or "\\" in name or ":" in name:
+        raise ValueError(f"Unsafe relative path: {name}")
+    return Path(root) / candidate
+
+
+def verify_files(root, files):
+    for name, expected in files.items():
+        path = safe_path(root, name)
+        if not path.is_file() or identity(path) != expected:
+            raise ValueError(f"Integrity verification failed: {name}")
+
+
+def host_platform():
+    system = {"Darwin": "macos", "Linux": "linux", "Windows": "windows"}[platform.system()]
+    machine = platform.machine().lower()
+    arch = {"amd64": "x86_64", "x86_64": "x86_64", "arm64": "arm64", "aarch64": "arm64"}[machine]
+    if system == "linux" and arch == "arm64":
+        arch = "aarch64"
+    return f"{system}-{arch}"
+
+
+def extract_archive(archive, destination):
+    with tarfile.open(archive) as stream:
+        for member in stream.getmembers():
+            safe_path(destination, member.name)
+            if not (member.isfile() or member.isdir()):
+                raise ValueError("Links and special files are forbidden in release archives")
+        stream.extractall(destination, filter="data")

runtimes/v0.2.0/tools/install_bundle.py

@@ -0,0 +1,70 @@
+"""Install a downloaded native archive with an expected SHA-256."""
+
+import argparse
+import json
+import platform
+import subprocess
+import tempfile
+from pathlib import Path
+
+from common import extract_archive, host_platform, read, sha256, verify_files
+
+
+def read_response(text):
+    return json.loads(text)
+
+
+def install(archive, expected_sha256, destination):
+    if sha256(archive) != expected_sha256:
+        raise ValueError("Archive checksum mismatch")
+    if destination.exists():
+        raise ValueError("Destination exists; install to a fresh directory")
+    destination.parent.mkdir(parents=True, exist_ok=True)
+    with tempfile.TemporaryDirectory(dir=destination.parent) as temporary:
+        bundle = Path(temporary) / "bundle"
+        bundle.mkdir()
+        extract_archive(archive, bundle)
+        manifest = read(bundle / "bundle-manifest.json")
+        if manifest["platform"] != host_platform():
+            raise ValueError("Archive platform does not match this host")
+        verify_files(bundle, manifest["files"])
+        if manifest["platform"].startswith("macos"):
+            minimum = 14 if manifest["platform"] == "macos-arm64" else 15
+            if int(platform.mac_ver()[0].split(".")[0]) < minimum:
+                raise ValueError(f"This archive requires macOS {minimum} or newer")
+        if platform.system() == "Windows":
+            # A subprocess load check leaves no DLL handles open during the final rename.
+            try:
+                probe = subprocess.run(
+                    [str((bundle / "datafog-pii.exe").resolve()), str(bundle.resolve())],
+                    input='{"text":""}\n',
+                    text=True,
+                    encoding="utf-8",
+                    capture_output=True,
+                    timeout=30,
+                    check=True,
+                )
+                if read_response(probe.stdout).get("findings") != []:
+                    raise ValueError("Invalid empty-input startup response")
+            except (OSError, subprocess.SubprocessError, ValueError) as error:
+                raise ValueError(
+                    "Native runtime could not load. Install Microsoft's x64 Visual C++ "
+                    "Redistributable (2019-compatible v14) and retry."
+                ) from error
+        executable = "datafog-pii.exe" if platform.system() == "Windows" else "datafog-pii"
+        (bundle / executable).chmod(0o755)
+        bundle.rename(destination)
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--archive", type=Path, required=True)
+    parser.add_argument("--sha256", required=True)
+    parser.add_argument("--destination", type=Path, required=True)
+    args = parser.parse_args()
+    install(args.archive, args.sha256, args.destination)
+    print(args.destination.resolve())
+
+
+if __name__ == "__main__":
+    main()

runtimes/v0.2.0/windows-x86_64-qualification.json

@@ -0,0 +1,118 @@
+{
+  "status": "qualified",
+  "platform": "windows-x86_64",
+  "tested_host": "Windows-2022Server-10.0.20348-SP0",
+  "archive": {
+    "filename": "datafog-pii-0.1.0-runtime-0.2.0-windows-x86_64.tar.gz",
+    "sha256": "cd4738fcff9f440fa80ce6a71be8c71719e2137d7fd35a8c099f42238740a8f3",
+    "bytes": 249849360,
+    "provenance": {
+      "model_version": "0.1.0",
+      "runtime_version": "0.2.0",
+      "platform": "windows-x86_64",
+      "host": "Windows-2022Server-10.0.20348-SP0",
+      "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+      "runtime": {
+        "url": "https://files.pythonhosted.org/packages/a6/13/0f1699f6de549c9324bc9112a2a85b14c517904cd11b562a654643b755a1/onnxruntime-1.30.0-cp312-cp312-win_amd64.whl",
+        "filename": "onnxruntime-1.30.0-cp312-cp312-win_amd64.whl",
+        "sha256": "f3501472571f1b1eee50e017851e7929f5ea37312d2d8c2494a19e8fc58b4a38",
+        "source": "official PyPI CPU wheel",
+        "version": "1.30.0"
+      },
+      "native_files": [
+        "onnxruntime.dll",
+        "onnxruntime_providers_shared.dll"
+      ],
+      "telemetry_disabled": true,
+      "repository_commit": "b9ce97fe0e3e07b833ac0f122cdaf234af186555",
+      "rustc": "rustc 1.94.1 (e408947bf 2026-03-25)",
+      "python": "3.12.10 (tags/v3.12.10:0cc8128, Apr  8 2025, 12:21:36) [MSC v.1943 64 bit (AMD64)]",
+      "status": "candidate; qualification evidence required",
+      "manifest_path_repair": {
+        "original_archive_sha256": "afcceebb647288f88eda67e9c18d46ce22e384a96902f8b2fbd56b8a08527d99",
+        "packaging_commit": "51324937c52852fc70bec96674c3ed39a617dac0",
+        "native_files_unchanged": {
+          "datafog-pii.exe": {
+            "sha256": "569e3f310c4a969ef5338c2d6f89c34db0413522f9b6210fb1fd77569f9dea27",
+            "bytes": 4235264
+          },
+          "onnxruntime.dll": {
+            "sha256": "e42c5c917207ff706530315177e39dca2539695a6a8d968a22225e34291b1f12",
+            "bytes": 18446176
+          },
+          "onnxruntime_providers_shared.dll": {
+            "sha256": "46b999f9d5cd9d284091407e9f50a262624e6a71265fc428a1dfbd42d149bd81",
+            "bytes": 21856
+          }
+        },
+        "change": "Canonical POSIX manifest paths; no executable/library/model change"
+      }
+    }
+  },
+  "hf_revision": "02cc6ca86a11dcb2b328861687770a22a7ea1b76",
+  "model_version": "0.1.0",
+  "runtime_version": "0.2.0",
+  "mcp_base_revision": "c2c45ec62728d85b7472131a3df9ccb67afd4a02",
+  "mcp_compatibility_revision": "01d7f74e693a7892ab1ed504d0d8f8c1e7ce51d3",
+  "mcp_tests": {
+    "tests": 33,
+    "failures": 0,
+    "errors": 0,
+    "skipped": 0
+  },
+  "native_unit_tests": 3,
+  "golden_cases": 7,
+  "same_host_parity": {
+    "bundle": "D:\\a\\DataFog-models\\DataFog-models\\.work\\installed",
+    "cases": [
+      {
+        "bytes": 0,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 11,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 52,
+        "windows": 1,
+        "findings": 2
+      },
+      {
+        "bytes": 26,
+        "windows": 1,
+        "findings": 0
+      },
+      {
+        "bytes": 28,
+        "windows": 1,
+        "findings": 3
+      },
+      {
+        "bytes": 9933,
+        "windows": 5,
+        "findings": 3
+      },
+      {
+        "bytes": 4559,
+        "windows": 3,
+        "findings": 2
+      }
+    ],
+    "max_abs_logit_difference": 0.0,
+    "logits_bit_identical": true,
+    "logit_atol": 0.0001,
+    "logit_rtol": 1e-05,
+    "token_ids_masks_global_byte_offsets_parity": true,
+    "findings_redaction_parity": true,
+    "actual_python_predictor_parity": true,
+    "malformed_request_explicit_error_and_recovery": true,
+    "cold_process_debug_batch_seconds": 2.6044589999999914,
+    "note": "Parity fixtures prove implementation consistency, not detection quality."
+  },
+  "workflow_run": "37249503334",
+  "qualification_commit": "e11c772943b0f040cbba90252672bf30df5ed24f",
+  "scope": "Named native CI environment; not every OS version, Linux distribution, or device."
+}