Chapter 6: Model Registries & Version Control

WIA-AI-008 Standard • Estimated reading time: 40 minutes

6.1 Why Model Registries?

As organizations scale their ML operations, managing dozens or hundreds of models becomes challenging. Model registries provide centralized storage, versioning, metadata management, and access control for machine learning models. They enable collaboration, reproducibility, and governance across teams.

Key Benefits

6.2 MLflow Model Registry

MLflow is an open-source platform for managing the ML lifecycle, including a robust model registry.

Setting Up MLflow

# Install MLflow
# pip install mlflow

# Start MLflow tracking server
# mlflow server --host 0.0.0.0 --port 5000

import mlflow
import mlflow.pytorch

# Set tracking URI
mlflow.set_tracking_uri("http://localhost:5000")

# Create experiment
mlflow.set_experiment("image-classification")

# Train and log model
with mlflow.start_run():
    # Training code
    model = train_model()

    # Log parameters
    mlflow.log_param("learning_rate", 0.001)
    mlflow.log_param("batch_size", 32)
    mlflow.log_param("epochs", 10)

    # Log metrics
    mlflow.log_metric("train_accuracy", 0.95)
    mlflow.log_metric("val_accuracy", 0.92)

    # Log model
    mlflow.pytorch.log_model(
        model,
        "model",
        registered_model_name="ResNet18Classifier"
    )

    print(f"Model logged with run_id: {mlflow.active_run().info.run_id}")

Model Versioning

from mlflow.tracking import MlflowClient

client = MlflowClient()

# Register new version
result = client.create_model_version(
    name="ResNet18Classifier",
    source="runs:/abc123/model",
    run_id="abc123"
)

print(f"Created version: {result.version}")

# List all versions
versions = client.search_model_versions("name='ResNet18Classifier'")
for v in versions:
    print(f"Version {v.version}: {v.current_stage} - {v.creation_timestamp}")

# Transition to staging
client.transition_model_version_stage(
    name="ResNet18Classifier",
    version=2,
    stage="Staging"
)

# Promote to production
client.transition_model_version_stage(
    name="ResNet18Classifier",
    version=2,
    stage="Production"
)

# Archive old version
client.transition_model_version_stage(
    name="ResNet18Classifier",
    version=1,
    stage="Archived"
)

Loading Models from Registry

import mlflow.pytorch

# Load latest production model
model_uri = "models:/ResNet18Classifier/Production"
model = mlflow.pytorch.load_model(model_uri)

# Load specific version
model_uri = "models:/ResNet18Classifier/2"
model = mlflow.pytorch.load_model(model_uri)

# Use for inference
import torch
input_data = torch.randn(1, 3, 224, 224)
output = model(input_data)
print(f"Predictions: {output}")

6.3 Hugging Face Hub

Hugging Face Hub is a popular platform for sharing and discovering models, particularly for NLP and multimodal AI.

Uploading Models

from huggingface_hub import HfApi, create_repo
from transformers import AutoModel, AutoTokenizer

# Create repository
repo_id = "username/my-awesome-model"
create_repo(repo_id, exist_ok=True)

# Save model and tokenizer
model = AutoModel.from_pretrained("bert-base-uncased")
tokenizer = AutoTokenizer.from_pretrained("bert-base-uncased")

model.save_pretrained("./model")
tokenizer.save_pretrained("./model")

# Upload to Hub
api = HfApi()
api.upload_folder(
    folder_path="./model",
    repo_id=repo_id,
    repo_type="model"
)

print(f"Model uploaded to: https://huggingface.co/{repo_id}")

Model Cards on Hugging Face

# Create README.md (model card)
model_card = """---
language: en
license: apache-2.0
tags:
- text-classification
- sentiment-analysis
datasets:
- imdb
metrics:
- accuracy
---

# My Awesome Model

## Model Description
Fine-tuned BERT for sentiment analysis on IMDB dataset.

## Intended Uses
Classify movie reviews as positive or negative.

## Training Data
IMDB dataset (50,000 reviews)

## Training Procedure
- Batch size: 16
- Learning rate: 2e-5
- Epochs: 3

## Evaluation Results
- Accuracy: 93.2%
- F1 Score: 0.928

## Limitations
- English only
- May not generalize to other domains

弘益人間 - Benefit All Humanity
"""

with open("./model/README.md", "w") as f:
    f.write(model_card)

# Upload model card
api.upload_file(
    path_or_fileobj="./model/README.md",
    path_in_repo="README.md",
    repo_id=repo_id
)

Loading from Hugging Face Hub

from transformers import AutoModel, AutoTokenizer

# Load model
model = AutoModel.from_pretrained("username/my-awesome-model")
tokenizer = AutoTokenizer.from_pretrained("username/my-awesome-model")

# Use for inference
inputs = tokenizer("This movie was great!", return_tensors="pt")
outputs = model(**inputs)
print(outputs)

6.4 Git-Based Model Versioning

Git LFS (Large File Storage) enables versioning large model files alongside code.

Setting Up Git LFS

# Install Git LFS
# brew install git-lfs  (macOS)
# apt-get install git-lfs  (Ubuntu)

# Initialize in repository
git lfs install

# Track model files
git lfs track "*.pth"
git lfs track "*.onnx"
git lfs track "*.h5"
git lfs track "*.tflite"

# Add .gitattributes
git add .gitattributes

# Add and commit models
git add models/resnet18.pth
git commit -m "Add ResNet-18 v1.0"

# Push to remote (LFS files uploaded separately)
git push origin main

Model Versioning with Tags

# Tag model versions
git tag -a v1.0.0 -m "ResNet-18 baseline model"
git tag -a v1.1.0 -m "ResNet-18 with improved augmentation"
git tag -a v2.0.0 -m "ResNet-50 architecture upgrade"

# Push tags
git push origin --tags

# Checkout specific version
git checkout v1.0.0

# List all versions
git tag -l

6.5 DVC (Data Version Control)

DVC extends Git to handle large datasets and models, providing ML-specific versioning.

DVC Workflow

# Install DVC
# pip install dvc

# Initialize DVC
dvc init

# Configure remote storage (S3, Azure, GCS, etc.)
dvc remote add -d myremote s3://my-bucket/dvc-storage

# Track model files
dvc add models/resnet18.pth

# This creates models/resnet18.pth.dvc

# Commit DVC metadata (not the actual file)
git add models/resnet18.pth.dvc models/.gitignore
git commit -m "Track ResNet-18 model with DVC"

# Push data to remote storage
dvc push

# Pull data from remote
dvc pull

# Switch to different version
git checkout v1.0.0
dvc checkout

DVC Pipelines

# Define ML pipeline in dvc.yaml
# dvc.yaml
stages:
  train:
    cmd: python train.py
    deps:
      - train.py
      - data/train.csv
    params:
      - train.learning_rate
      - train.epochs
    outs:
      - models/model.pth

  evaluate:
    cmd: python evaluate.py
    deps:
      - evaluate.py
      - models/model.pth
      - data/test.csv
    metrics:
      - metrics.json:
          cache: false

# Run pipeline
dvc repro

# Compare experiments
dvc metrics show
dvc metrics diff

6.6 Model Metadata Standards

Comprehensive Model Card

model_metadata = {
    # Model Identity
    "model_name": "sentiment-classifier-v2",
    "model_version": "2.1.0",
    "model_type": "text-classification",
    "architecture": "BERT-base",

    # Training Information
    "training": {
        "framework": "pytorch",
        "framework_version": "2.0.1",
        "dataset": "imdb",
        "dataset_version": "1.0",
        "training_date": "2025-01-15",
        "training_duration_hours": 4.2,
        "hyperparameters": {
            "learning_rate": 2e-5,
            "batch_size": 16,
            "epochs": 3,
            "optimizer": "AdamW",
            "scheduler": "linear"
        }
    },

    # Performance Metrics
    "metrics": {
        "accuracy": 0.932,
        "f1_score": 0.928,
        "precision": 0.941,
        "recall": 0.915,
        "validation_loss": 0.234
    },

    # Model Characteristics
    "characteristics": {
        "input_shape": [1, 512],
        "output_shape": [1, 2],
        "num_parameters": 110_000_000,
        "model_size_mb": 420,
        "quantized": False,
        "fp16": False
    },

    # Deployment
    "deployment": {
        "target_platform": "cloud",
        "serving_framework": "torchserve",
        "inference_latency_ms": 45,
        "throughput_qps": 100,
        "hardware": "NVIDIA A100"
    },

    # Governance
    "governance": {
        "owner": "ml-team@company.com",
        "license": "apache-2.0",
        "ethical_review": True,
        "bias_analysis": True,
        "privacy_compliant": True,
        "intended_use": "Sentiment analysis for movie reviews",
        "limitations": "English language only, may not generalize to other domains",
        "ethical_considerations": "Potential bias in movie genre representation"
    },

    # Provenance
    "provenance": {
        "base_model": "bert-base-uncased",
        "derived_from": "sentiment-classifier-v1",
        "git_commit": "abc123def456",
        "mlflow_run_id": "xyz789"
    },

    # Philosophy
    "philosophy": "弘益人間 - Benefit All Humanity"
}

import json
with open("model_card.json", "w") as f:
    json.dump(model_metadata, f, indent=2)

6.7 Access Control and Security

Role-Based Access Control (RBAC)

# Define roles and permissions
roles = {
    "data_scientist": {
        "permissions": ["read", "write", "register"],
        "models": ["development/*"]
    },
    "ml_engineer": {
        "permissions": ["read", "write", "register", "promote"],
        "models": ["*"]
    },
    "data_analyst": {
        "permissions": ["read"],
        "models": ["production/*"]
    },
    "admin": {
        "permissions": ["*"],
        "models": ["*"]
    }
}

# Implement in MLflow
from mlflow.server import handlers

def check_permission(user, action, model_name):
    user_role = get_user_role(user)
    permissions = roles.get(user_role, {}).get("permissions", [])

    if "*" in permissions or action in permissions:
        # Check model access
        allowed_models = roles[user_role]["models"]
        if "*" in allowed_models or model_name in allowed_models:
            return True

    return False

Model Signing and Verification

import hashlib
import hmac

def sign_model(model_path, secret_key):
    """
    Create cryptographic signature for model
    """
    with open(model_path, 'rb') as f:
        model_data = f.read()

    signature = hmac.new(
        secret_key.encode(),
        model_data,
        hashlib.sha256
    ).hexdigest()

    return signature

def verify_model(model_path, signature, secret_key):
    """
    Verify model integrity
    """
    expected_signature = sign_model(model_path, secret_key)
    return hmac.compare_digest(signature, expected_signature)

# Usage
secret_key = "my-secret-key"  # Store securely!

# Sign model
signature = sign_model("model.pth", secret_key)
print(f"Model signature: {signature}")

# Verify before loading
if verify_model("model.pth", signature, secret_key):
    model = torch.load("model.pth")
    print("✓ Model verified and loaded")
else:
    print("✗ Model verification failed!")

6.8 Model Lifecycle Management

Stage Transitions

class ModelLifecycle:
    """
    Manage model progression through lifecycle stages
    """
    STAGES = ["Development", "Staging", "Production", "Archived"]

    def __init__(self, registry_client):
        self.client = registry_client

    def promote_to_staging(self, model_name, version, checks=None):
        """
        Promote model to staging after validation
        """
        if checks:
            # Run validation checks
            if not self.run_checks(model_name, version, checks):
                raise ValueError("Model failed validation checks")

        self.client.transition_model_version_stage(
            name=model_name,
            version=version,
            stage="Staging"
        )

        print(f"✓ {model_name} v{version} promoted to Staging")

    def promote_to_production(self, model_name, version, approval_required=True):
        """
        Promote to production with optional approval
        """
        if approval_required:
            approval = input(f"Approve {model_name} v{version} for production? (yes/no): ")
            if approval.lower() != "yes":
                print("Production deployment cancelled")
                return

        # Archive current production model
        current_prod = self.get_production_version(model_name)
        if current_prod:
            self.client.transition_model_version_stage(
                name=model_name,
                version=current_prod.version,
                stage="Archived"
            )

        # Promote new version
        self.client.transition_model_version_stage(
            name=model_name,
            version=version,
            stage="Production"
        )

        print(f"✓ {model_name} v{version} deployed to Production")

    def rollback(self, model_name, to_version):
        """
        Rollback to previous version
        """
        self.client.transition_model_version_stage(
            name=model_name,
            version=to_version,
            stage="Production"
        )

        print(f"✓ Rolled back to {model_name} v{to_version}")

# Usage
lifecycle = ModelLifecycle(mlflow_client)
lifecycle.promote_to_staging("ResNet18", version=3, checks=["accuracy", "latency"])
lifecycle.promote_to_production("ResNet18", version=3)

6.9 Registry Federation

Multi-Registry Architecture

class FederatedRegistry:
    """
    Aggregate models from multiple registries
    """
    def __init__(self):
        self.registries = {
            "mlflow": MLflowRegistry("http://mlflow.company.com"),
            "huggingface": HuggingFaceRegistry("company-org"),
            "s3": S3Registry("s3://company-models")
        }

    def search_models(self, query):
        """
        Search across all registries
        """
        results = []
        for name, registry in self.registries.items():
            matches = registry.search(query)
            for match in matches:
                match['source'] = name
                results.append(match)

        return results

    def load_model(self, model_uri):
        """
        Load model from appropriate registry
        """
        # Parse URI: registry://model-name/version
        registry_name, model_path = self.parse_uri(model_uri)
        registry = self.registries[registry_name]
        return registry.load(model_path)

# Usage
fed_registry = FederatedRegistry()
models = fed_registry.search_models("sentiment-analysis")
model = fed_registry.load_model("mlflow://ResNet18/Production")

6.10 Best Practices

1. Consistent Naming Conventions

# Model naming convention
# Format: {use-case}-{architecture}-{variant}-v{version}
# Examples:
#   - sentiment-analysis-bert-base-v1.2.0
#   - image-classification-resnet50-quantized-v2.1.0
#   - object-detection-yolov8-large-v1.0.0

2. Automated Testing Before Registration

def validate_before_registration(model, test_data):
    """
    Run validation before registering model
    """
    tests = {
        "accuracy_threshold": lambda: evaluate_accuracy(model) > 0.90,
        "latency_threshold": lambda: measure_latency(model) < 100,  # ms
        "memory_limit": lambda: get_model_size(model) < 500,  # MB
        "numerical_stability": lambda: test_numerical_stability(model, test_data)
    }

    results = {}
    for test_name, test_fn in tests.items():
        try:
            passed = test_fn()
            results[test_name] = "PASS" if passed else "FAIL"
        except Exception as e:
            results[test_name] = f"ERROR: {str(e)}"

    all_passed = all(v == "PASS" for v in results.values())

    return all_passed, results

3. Comprehensive Logging

# Log everything about the model
with mlflow.start_run():
    # Code version
    mlflow.log_param("git_commit", get_git_commit())

    # Data version
    mlflow.log_param("dataset_version", "v2.1")

    # All hyperparameters
    mlflow.log_params(hyperparameters)

    # Training metrics over time
    for epoch in range(num_epochs):
        mlflow.log_metric("train_loss", train_loss, step=epoch)
        mlflow.log_metric("val_loss", val_loss, step=epoch)

    # Final evaluation
    mlflow.log_metrics(final_metrics)

    # Model artifacts
    mlflow.log_artifact("confusion_matrix.png")
    mlflow.log_artifact("feature_importance.csv")

    # Model itself
    mlflow.pytorch.log_model(model, "model")

Summary

Review Questions

  1. What are the key benefits of using a model registry?
  2. Explain the MLflow model versioning and staging workflow.
  3. How do you create and upload a model card to Hugging Face Hub?
  4. Compare Git LFS and DVC for model versioning. When would you use each?
  5. What information should be included in comprehensive model metadata?
  6. Describe a role-based access control (RBAC) system for model registries.
  7. How do you cryptographically sign and verify models?
  8. Design a model lifecycle with stages from development to production.
  9. What is registry federation and why is it useful?
  10. Create a checklist of validations to run before registering a new model.

Korea Standardization Infrastructure Mapping

Korea operates a comprehensive standards governance system through inter-ministerial cooperation. National Standards Council (under Prime Minister's Office, per Framework Act on National Standards Article 5) coordinates KATS (Korean Agency for Technology and Standards), MFDS (Ministry of Food and Drug Safety), MOTIE (Ministry of Trade, Industry and Energy), MSIT (Ministry of Science and ICT), MOIS (Ministry of the Interior and Safety), MOE (Ministry of Environment), MOHW (Ministry of Health and Welfare), MND (Ministry of National Defense), MCST (Ministry of Culture, Sports and Tourism), MOFA (Ministry of Foreign Affairs), MOJ (Ministry of Justice), and FSC (Financial Services Commission). Accreditation and Testing: KOLAS (Korea Laboratory Accreditation Scheme) accredits 800+ testing laboratories. KAS (Korea Accreditation System) accredits 50+ certification bodies. KTC (Korea Testing Certification), KTR (Korea Testing & Research Institute), KTL (Korea Testing Laboratory), and KCL (Korea Conformity Laboratories) provide conformance testing. Telecom and Cyber: KCC (Korea Communications Commission), KCA (Korea Communications Agency), TTA (Telecommunications Technology Association), IITP (Institute for Information & Communications Technology Planning & Evaluation), NIPA (National IT Industry Promotion Agency), KISA (Korea Internet & Security Agency), KCMVP (Korea Cryptographic Module Validation Program), NIS (National Intelligence Service), NSR (National Security Research Institute), and NCSC (National Cyber Security Center). National R&D Centers: KIST, ETRI, KAIST, Seoul National University, Yonsei University, Korea University, POSTECH, UNIST, GIST, DGIST, KISTI, KIER, KIMM, KRICT, KFRI, KRIBB. International Standards Cooperation: ISO TC/SC Korean secretariats, IEC TC/SC Korean secretariats, ITU-T Study Group Korean chairs, 3GPP RAN/SA Korean chairs, IEEE 802 Korean chairs, W3C Korea office, OASIS Korea office, IETF Korea cooperation, OECD CSTP, UN ESCAP, APEC SCSC Korean cooperation. Korean Industrial Standards (KS) Catalog: KS X (Information) 25,000+, KS A (Basic) 15,000+, KS B (Machinery) 25,000+, KS C (Electrical) 18,000+, KS D (Metallurgy) 12,000+, KS E (Mining) 5,000+, KS F (Construction) 18,000+, KS H (Food) 8,000+, KS I (Environment) 5,000+, KS J (Biology) 3,000+, KS K (Textile) 15,000+, KS L (Ceramics) 7,000+, KS M (Chemistry) 12,000+, KS P (Medical) 5,000+, KS Q (Quality Mgmt) 4,000+, KS R (Transport) 12,000+, KS S (Service) 3,000+, KS T (Packaging) 4,000+, KS V (Shipbuilding) 5,000+, KS W (Aerospace) 3,000+ — totaling 220,000+ Korean Industrial Standards. Key Acts: Personal Information Protection Act (Act 19234, effective Sept 15, 2024), Electronic Government Act, Electronic Signature Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, Information and Communications Infrastructure Protection Act, Data Industry Act, Public Data Act, AI Framework Act (Act 20212, effective July 2026), Industrial Technology Innovation Promotion Act, Framework Act on Science and Technology — 70+ Korean standardization-related laws.

Korea Digital Transformation Detailed Mapping

Korea operates digital transformation through a comprehensive governance system. Digital Government: Digital Platform Government Committee (established September 2022, under the President)·Ministry of the Interior and Safety Digital Government Bureau·e-Government Support Center·Gov.kr·National Citizen Service·KDIS (Korea Digital Information Society)·NIA (National Information Society Agency)·MOIS (Ministry of the Interior and Safety). K-DNS Infrastructure: Korea Internet & Security Agency (KISA) Korea Internet Center·KISA DNS Root Server·KRNIC (Korea Network Information Center)·BGP Korea·National Cyber Security Center (NCSC)·KCC (Korea Communications Commission)·MSIT (Ministry of Science and ICT)·NIA·NIPA. Korean Cloud Infrastructure: KT Cloud·NAVER Cloud (NCloud)·Samsung SDS Cloud·LG U+ Cloud·NHN Cloud·Kakao Enterprise Cloud·SK Telecom Cloud·KISA Cloud Security Assurance Program (CSAP)·KCMVP-validated cloud·ISMS-P (Information Security & Personal Information Management System). Korean Security Certifications: KISA ISMS-P certification·KCMVP (Korean Cryptographic Module Validation Program)·NIS (National Intelligence Service) "National Cryptographic Technology Operation Standards"·NCSC "National Cyber Security Strategy 2024-2028"·CC (Common Criteria) Korean evaluation bodies·EAL4·EAL5·KS X ISO/IEC 15408·19790·24759 Korean Profile. Korean Data Standards: NIA AI Hub·National Data Standardization Committee·Statistics Korea (KOSTAT)·MyData 4 Designated Combination Specialists (Samsung SDS, KICI, KOSTAT, KFTC)·National Institute of Korean Language·National Law Information Center·National Spatial Information Platform·National Spatial Data Center·Korean Spatial Information Standards. Finance and Fintech Standards: FSC (Financial Services Commission)·FSS (Financial Supervisory Service)·FIU (Financial Intelligence Unit)·BOK (Bank of Korea)·FSEC (Financial Security Institute)·KFTC (Korea Financial Telecommunications)·KSD (Korea Securities Depository)·KRX (Korea Exchange) 8-agency cooperation. 5G/6G Communications Infrastructure: 5G subscribers 35 million (2024)·5G base stations 350,000·6G commercialization target 2028·5G dedicated networks 16 operators·6G Acceleration Council (MSIT, 2024). K-Content: KOCCA (Korea Creative Content Agency)·MCST (Ministry of Culture, Sports and Tourism)·KCA (Korea Communications Agency)·Korea Culture Information Service Agency·Korean Film Archive·Korea Publishing Industry Promotion Agency. Data 3 Acts (Personal Information Protection Act·Credit Information Act·Telecommunications Network Act, 2020 enforcement)·Data Industry Act (2021)·Public Data Act (2013)·AI Framework Act (2026)·Digital Platform Government Framework Act (2024 proposed) — Korea digital transformation core legislation.