13 — AI Model and Dataset Cards Checklist#
Verify that model and dataset documentation accurately communicates intended use, capabilities, limitations, provenance, evaluation evidence, risks, and change history. A card is a living disclosure and engineering record—not proof of regulatory compliance, model safety, lawful data rights, or benchmark reproducibility.
Scope: Frontend-specific. This file is one part of the 13_AI_Model_and_Dataset_Cards.md checklist. Apply the domain-wide release gate across all applicable scope files; each checklist ID remains unique.
Review details#
- Project / product:
- Release / version / environment:
- Scope and applicable jurisdictions / markets:
- Model, dataset, provider and artifact versions:
- Card audience, publication location, and visibility rules:
- Documentation, evaluation, provenance and risk owners:
- Reviewer / owner:
- Review date:
- Decision: Pending / Approved / Approved with documented exceptions / Blocked
How to use#
- Copy the reusable checklist into project-specific review records. Leave every checkbox in this repository unchecked.
- Evaluate the model card and dataset card separately where both exist; for a third-party model or dataset, verify documented provider facts independently when feasible and mark undisclosed facts as unknown instead of guessing.
- Mark
[x]only after checking versioned model or dataset artifacts, lineage manifests, evaluation results, licenses and rights reviews, source documents, publication controls, or a recorded owner decision. Keep evidence, accepted exceptions, failed checks and justifiedN/Aoutside this shared template, keyed byCARDSID. - Apply
## API Checksand## Frontend Checkswhere applicable, noting that an internal-only or offline dataset may not expose one or both surfaces. - Decide explicitly what is appropriate to publish: technical summaries and meaningful limitations may be public, while source data, confidential tests, protected characteristics and security-sensitive artifacts may require restricted internal records.
- Re-review cards when source rights, model versions, usage boundaries, dataset versions, evaluation outcomes, safety policies, deployment conditions or known incidents change. Use the dedicated data curation, model evaluation, governance and lifecycle checklists for deeper controls.
Frontend Checks#
- CARDS-111 Make model and dataset descriptions easy to find from the relevant product feature, documentation page, or download surface.
- CARDS-112 Explain intended and out-of-scope uses in accessible language without making unproven safety or accuracy guarantees.
- CARDS-113 Show meaningful limitations and supported-language or modality restrictions near consequential user decisions.
- CARDS-114 Make clear whether a claim describes the underlying model, an external provider, or the complete application workflow.
- CARDS-115 Present evaluation metric names, baselines, sample sizes, and known limitations in a way non-experts can interpret.
- CARDS-116 Distinguish tested behavior from forecasts, marketing statements, and pending research outcomes.
- CARDS-117 Display correct model version, card revision, and update date when users compare or rely on model information.
- CARDS-118 Provide a clear path to license, usage conditions, dataset provenance, and appropriate privacy notices.
- CARDS-119 Ensure cards, citations, metadata badges, and documents remain keyboard accessible and screen-reader understandable.
- CARDS-120 Test long technical tables, code examples, mixed scripts, and responsive layouts on supported devices.
- CARDS-121 Do not expose hidden examples, confidential data, or protected subgroup counts in public card previews or downloadable reports.
- CARDS-122 Show missing, withdrawn, outdated, or unavailable documentation as such rather than silently substituting a different model card.
- CARDS-123 Ensure external card and paper links have descriptive labels and expected destinations.
- CARDS-124 Provide a correction or error-reporting contact for misleading, outdated, or harmful model documentation.
- CARDS-125 Use consistent terminology and qualified localization for critical limitations or legal notices where applicable.
- CARDS-126 Keep user-visible examples aligned with the production model and do not publish examples that reveal real secrets or private histories.
- CARDS-127 Label claims sourced from third-party model cards when the application has not independently verified them.
- CARDS-128 Test frontend updates when a staged rollout changes model aliases, supported capabilities, or access permissions.
- CARDS-129 Verify downloadable cards are clearly dated, versioned, and available only to permitted audiences.
- CARDS-130 Confirm user research or review shows the card communicates meaningful risks without overwhelming the intended audience.
Release gate#
- The released model and/or dataset has an identifiable owner, exact artifact version and approved current card with intended uses, out-of-scope uses and supported constraints.
- Source, training and dataset provenance, relevant licensing or rights restrictions, transformations and open lineage gaps are documented without exposing protected records.
- The card presents version-matched evaluation evidence, tested populations or modalities, material performance differences and known severe failure cases or uncertainty.
- Meaningful safety, privacy, bias, accessibility and downstream misuse limitations have responsible mitigation or escalation guidance proportionate to risk.
- Published metadata, references, model identifiers and dataset links have passed schema, access-control, consistency and link checks where relevant.
- API and frontend surfaces expose appropriate, version-matched documentation, and correctly handle restricted, withdrawn or superseded cards.
- The maintenance owner, change-triggered review, correction intake, revision history, publication controls and responsible reviewers are in place.
- Significant missing rights, contradictory or misleading capability claims, unsupported high-impact uses or unresolved disclosure risks are blocked or formally dispositioned by qualified approvers.
Domain-specific approval rule: Block documentation approval if material claims cannot be reconciled to the actual model or dataset, a critical known limitation is concealed, a public card exposes protected information, or rights and usage restrictions remain unreviewed for the intended release. Publication does not certify a model, validate every provider claim or grant dataset-use rights.
Trusted references and scope#
The following primary specifications, publishing guides and responsible-AI references support practical model and dataset documentation. Use the parts applicable to the artifact and publication platform.
- Hugging Face — Model Cards — required contextual information, intended use, limitations, training and evaluation metadata.
- Hugging Face — Annotated Model Card — structured model card template, cross-functional responsibilities, bias and risk documentation.
- Hugging Face — Model Release Checklist — model release readiness, versioned artifacts and documented metadata.
- Hugging Face — Dataset Cards — dataset composition, language, license, intended use, and machine-readable metadata.
- Hugging Face — Model Card Publishing Guide — versioned metadata editing, publishing and review workflows on Hugging Face Hub.
- MLCommons — Croissant Format — interoperable dataset metadata, resources, record structure, and ML semantics.
- MLCommons — Croissant 1.1 Announcement — updated machine-readable provenance and governance metadata; adoption is optional.
- W3C — PROV Overview — interoperable representation of source, agent and transformation provenance.
- NIST AI RMF Playbook — Map — intended context, documented system limits, assumptions and foreseeable impacts.
- NIST AI RMF Playbook — Measure — quality, fairness, reliability and risk-measurement evidence and limitations.
- Microsoft — Responsible AI Transparency Note — clear distinctions among the model, people, deployment context, supported uses and limitations.
- TensorFlow — Model Card Toolkit — model-card generation from training and evaluation metadata, with implementation-specific support.
Applicability: Hugging Face model and dataset card metadata conventions apply when using that platform; an equivalent internal registry and documentation process can be appropriate for restricted artifacts. MLCommons Croissant 1.1 provides an optional machine-readable dataset metadata specification, including provenance, rather than a universal requirement. W3C PROV documents lineage structures but does not establish that training data was lawfully obtained. NIST AI RMF is voluntary guidance. Model Card Toolkit and vendor transparency notes are implementation examples, not evidence that an individual model is complete, unbiased, safe or certified. Never infer undisclosed third-party training details; document the uncertainty.
Source review date: 2026-11-12.
Suggested testing tools#
Choose tools appropriate to the project's stack and risks; automation supports evidence but does not approve the checklist.
- Test focus: required metadata, model/dataset versions, limitations, and documentation links; include browser and client behavior where applicable.
- Cross-stack: markdownlint-cli2 + lychee.
- Python: check-jsonschema + pytest; for pytest-based suites, run
python -m pytest -q. - TypeScript: Ajv + Vitest; for Vitest-based suites, run
npx vitest run(ornpx playwright testfor E2E). - JavaScript: Ajv + Jest; for Jest-based suites, run
npx jest --ci(ornpx playwright testfor E2E). - Evidence: Save tool versions, configuration, test environment, fixtures, results, and links in project-specific review records using the existing checklist IDs. Expert review remains necessary where relevant.
Suggested AI skills for verification#
These are optional agent review aids, not automated passes or release approval. Each linked repository had at least 1,000 GitHub stars when checked on 2026-11-12; counts are per repository, not per skill, and do not indicate security or correctness.
doc-coauthoring— Review completeness and clarity of published cards (anthropics/skills, 193,495 repo stars).evaluation-methodology— Check metrics, limitations, and evaluation disclosures (wshobson/agents, 42,437 repo stars).dataset-curation— Trace dataset sources, assumptions, and splits (wshobson/agents, 42,437 repo stars).
How to check: In a project-specific copy, have the agent audit the frontend scope and map findings to this file's existing checklist IDs, with code/configuration references, reproducible test results, failed or inapplicable cases, and uncertainties. Independently verify findings; keep shared template boxes unchecked and retain human approval requirements.
Before use: Read the skill's SKILL.md, referenced scripts, license, and requested tool permissions. Only execute vetted skills with appropriate access in a controlled environment.
Important warning: reference only#
⚠️ Reference only — not a definitive or exhaustive checklist. This template is a starting point for review, not the ultimate authority or a guarantee of project safety, quality, regulatory compliance, accessibility, security, or launch readiness.
Use project-specific judgment and independent verification. Requirements and risks evolve and differ by project, technology, and jurisdiction. Adapt the checks, consult current authoritative sources, perform relevant tests, and obtain qualified specialist review or approval when appropriate. Checking every box does not replace these steps.