Watch the explanation. Practice the skill.
Secure supply chain and continuous delivery
Know which software, models and data are in your release.
Captions appear here during playback.
Secure supply chain and continuous delivery
Know which software, models and data are in your release.
Video playback is unavailable. Read the descriptive transcript below, go directly to practice, or open the video file.
Source-based teaching example · Fictional data · Reviewed 2026-10-03. Microsoft Mark · locally synthesized. On a small screen, use fullscreen for diagram details or read the transcript.
Read the descriptive transcript
0:00 · What you will learn
Know which software, models and data are in your release.
What appears on screen
Know which software, models and data are in your release.
0:06 · The idea
Inventory the parts loaded at runtime and their origins. Check exact versions and bytes. Matching a hash proves identity, not that the item is trustworthy or suitable.
What appears on screen
Inventory the parts loaded at runtime and their origins. Check exact versions and bytes. Matching a hash proves identity, not that the item is trustworthy or suitable.
0:21 · One useful term
Hash. A fingerprint of file contents used to check whether the bytes match.
What appears on screen
A fingerprint of file contents used to check whether the bytes match.
0:29 · A worked example
The supplied release record contains a changed model hash and a flagged training dependency. The pipeline blocks release, records why, and checks the corrected bundle.
What appears on screen
The supplied release record contains a changed model hash and a flagged training dependency. The pipeline blocks release, records why, and checks the corrected bundle.
0:42 · Your turn to think
Does a matching file hash prove the file’s source is safe? Pause and decide before continuing.
What appears on screen
Does a matching file hash prove the file’s source is safe? Pause the video if you need more time.
0:59 · Why this answer works
No. Verify origin and relevant security evidence separately. Keep unknown-origin items out of use pending review.
What appears on screen
No. Verify origin and relevant security evidence separately. Keep unknown-origin items out of use pending review.
1:10 · Check 1
Inventory every runtime-loaded part.
What appears on screen
Inventory every runtime-loaded part.
1:16 · Check 2
Check both byte identity and origin.
What appears on screen
Check both byte identity and origin.
1:21 · Check 3
Keep release evidence reproducible.
What appears on screen
Keep release evidence reproducible.
1:26 · Now try a different case
Open the lesson and try its different practice case. Use every check in the full task. Watching alone does not mark the lesson complete.
What appears on screen
Open the lesson Try the new case Check and revise The full task and its requirements are in the linked lesson.
Watching explains the example. Complete the lesson practice to check what you can do. Explore all visual lessons →