External Models

Inference is provided by a third-party service outside the platform.

Classification definition is a project adaptation of the DASF deployment model descriptions. Source applicability is column M of AI Lifecycle Risks, snapshot 2026-10-22.

Combine patterns using union (OR). An agent that uses retrieval and a third-party model should include agentic-ai, rag and external-model; include foundation-llm if the model is a foundation model. Do not assume “pre-trained” means merely calling an already trained foundation model: this taxonomy distinguishes pretraining from consumption.

14 source-applicable risks:

• DASF-R-4.2 — Lack of end-to-end ML lifecycle
• DASF-R-6.2 — Insufficient evaluation data
• DASF-R-6.3 — Lack of Interpretability and Explainability
• DASF-R-7.1 — Backdoor machine learning / Trojaned model
• DASF-R-7.3 — ML Supply chain vulnerabilities
• DASF-R-8.1 — Model attribution
• DASF-R-9.7 — Denial of Service (DoS)
• DASF-R-9.8 — LLM hallucinations
• DASF-R-9.11 — Model Inference API Access
• DASF-R-9.13 — Excessive agency
• DASF-R-10.1 — Lack of audit and monitoring inference quality
• DASF-R-10.2 — Output manipulation
• DASF-R-11.1 — Lack of MLOps — repeatable enforced standards
• DASF-R-12.7 — Initial Access