Model loading code bypasses security review

A customer's security team asked which exact model weights ran in production and who reviewed the loading code. The ML team knew the model name on Hugging Face but not the revision, because the Dockerfile pulled "latest." Loading code passed trust_remote_code=True, letting a stranger's Python file run automatically without review.