S0044RS1-T01-S0044-Z · Full risk code

Violation of Open-Source Model License Terms

開源模型授權條款違反

Design & Development
Risk Description

When an organization builds a commercial product on an open-source model without carefully reviewing the license; due to unmitigated control gaps, after launch, the product is found to violate a non-commercial restriction, requiring withdrawal and rebuilding or separate licensing, and the initial development investment is at risk, triggering compliance exposure and operational reputational costs.

Framework Mappings

OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0010
NIST AI 100-2Supply Chain
ISO/IEC 5338設計與開發
MIT AI Risk RepositoryDomain 6

Risk Treatment & Implementation Guidance

Review license terms before adopting open-source models, confirming and documenting commercial restrictions, derivative obligations and redistribution conditions; Maintain an AI bill of materials recording models, datasets and their license status; Include license-compliance confirmation in release checks so non-conforming terms block commercial use