Licenses are routinely stripped as AI artifacts move downstream: in a 232,270-chain trace, permissive licenses survive almost universally (95.1%) while obligation-bearing licenses rarely persist (below 7%), and 62.3% of chains include at least one artifact with no declared license; the pattern is concentrated in a few foundational datasets and calls for clearer licensing practices and platform safeguards.

Main Finding

License obligations attached to datasets and models rarely survive end-to-end through AI supply chains. In a traced set of 232,270 dataset→model→application chains, 62.3% pass through at least one artifact with no declared license, and obligation-bearing license categories (e.g., Sharealike, Copyleft, ML-specific restrictions) almost never survive end-to-end (all below ~7% survival), while Permissive licenses survive at 95.1%. License laundering is therefore widespread and concentrated in a small set of foundational datasets.

Key Points

• Scope and scale: 232,270 dataset→model→application chains were constructed spanning Hugging Face and GitHub (3,120 datasets, 5,556 models, 24,076 applications after filtering).
• Unknown laundering (absence → downstream declared license):
  • 62.3% of chains contain at least one artifact with an Unknown (no/ambiguous) license.
  • 88.8% of chains with an Unknown dataset lead to a Known model; 80.3% of Unknown models lead to Known applications — i.e., downstream actors often present a definitive license despite no upstream basis.
  • Laundering is concentrated: the top 10% of Unknown datasets account for ~89.5% of dataset→model laundering transitions (foundational datasets like ImageNet-1K, The Pile, BookCorpus).
• Known→Unknown flips also common: 24.9% of chains with a Known model end at an application with no declared license (dropping obligations).
• Category laundering (one declared license category replaced by another downstream):
  • Analyzed on 87,639 fully-Known chains (every artifact had a Known category).
  • 37.5% of fully-Known chains contain at least one laundered transition (a category dropped).
  • Permissive licenses: 95.1% end-to-end survival.
  • Obligation-bearing categories (Sharealike, Copyleft, ML License, CC-Restrictive, etc.): each falls below ~7% end-to-end survival (example: Sharealike survives only ~4.7% end-to-end).
  • When a restrictive category is dropped, the downstream license is most often Permissive.
• Real-world harms: documented cases (e.g., Books3, BookCorpus) show laundered datasets propagated permissive labels; downstream legal action (e.g., settlement related to training on pirated books) created large liabilities for multiple downstream actors.
• Mechanisms and gaps:
  • Existing software composition analysis (SCA) tools do not cover cross-platform AI supply chains (Hugging Face metadata + GitHub code usage).
  • Metadata sparsity: only ~7.1% of Hugging Face models declare training datasets; many license strings are ambiguous; licensing labels are often incomplete.
• Validity caveats: study tracks declared license labels (metadata and ScanCode outputs), not the underlying legal texts; sample is biased toward artifacts that declare provenance and the popular/disclosed portion of the ecosystem; 495 of 765 unique license strings were unclassified and some chains excluded (~12.2% pre-filter chains).

Data & Methods

• Supply-chain construction:
  • Linked Hugging Face datasets → models using HF dataset dependency metadata.
  • Linked models → GitHub applications via code search and AST-based detection of model invocations.
  • Collected license labels: Hugging Face metadata for datasets/models; ScanCode for GitHub repositories.
  • Initial candidate set: 294,012 chains; after removing base-only models and unmapped license strings, final analytic set = 232,270 chains.
• License classification:
  • Observed 765 unique license strings; manually mapped 270 known strings into seven categories based on obligations: Permissive, Copyleft, Sharealike, ML License (e.g., OpenRAIL), CC-Restrictive (NC/ND), Public Domain, Unknown (absent/ambiguous).
  • Unknown category includes empty/“Other”/ambiguous strings.
• Measurements:
  • Unknown laundering: transitions classified as Unknown→Known, Known→Unknown, Unknown→Unknown, Known→Known; computed transition rates and Lorenz curves to measure concentration.
  • Category laundering: analyzed category transition matrices at dataset→model, model→application, and end-to-end for fully-Known chains; defined survival as persistence of obligation-bearing categories to application.
• Reproducibility: authors provide replication package (link in paper).

Implications for AI Economics

• Legal risk as an asset discount / externality
  • Models and applications that appear permissively licensed may carry latent upstream legal risk. Valuation of AI assets (models, apps, products) should incorporate provenance-related legal risk; laundered assets merit a discount or contingent liability reserve.
  • Single-event liabilities (takedowns, forced relicensing, settlements) can impose large, asymmetric financial losses that propagate to many downstream users — creating negative externalities across the ecosystem.
• Concentration of systemic risk
  • A small set of foundational datasets drive most laundering. This concentration creates systemic fragility: legal action against a few datasets could cascade losses across many dependent models and applications, increasing systemic risk in the AI services market.
• Transaction and compliance costs
  • Practitioners must perform upstream due diligence (trace datasets, validate licenses) to avoid liability, increasing integration costs and time-to-market. Firms that fail to do so risk downstream takedowns, forced relicensing, or litigation costs.
  • Demand will grow for provenance/audit services, automated license-tracing tools, and legal-compliance platforms analogous to SCA for traditional software; these are potential new markets.
• Insurance and capital markets
  • Liability exposure from license laundering suggests new insurance products (IP/provenance coverage, takedown/legal expense insurance). Insurers will require better provenance signals and tooling to underwrite intelligently, and premiums will reflect dataset concentration and traceability.
  • Investors and acquirers should perform license-provenance audits during due diligence; unclear provenance increases deal risk and may depress valuations.
• Market incentives and product differentiation
  • Models and datasets with verifiable, “clean” provenance (clear upstream licensing, audited chains) can command a premium and competitive advantage. Certification or registry services could enable market differentiation.
  • Platforms (Hugging Face, GitHub) that enforce or facilitate robust metadata/provenance could reduce market frictions and liability externalities, altering competitive dynamics.
• Policy and governance implications
  • Standardizing mandatory dataset/license metadata and provenance reporting would reduce information asymmetries and lower collective legal risk; regulators or platforms could require minimal provenance fields for published models.
  • Certification, registries, or safe-harbors for verified-data providers could stabilize markets; conversely, regulatory inaction risks repeated high-impact settlements and distrust in model reuse markets.
• Research and infrastructure investment
  • Economic efficiency of the AI ecosystem will improve with tooling that traces licenses end-to-end and flags laundering—this is a public-good infrastructure gap. Investment (private or public) in cross-platform SCA-like tools for ML supply chains will lower transaction costs and liability uncertainty.
• Strategic behavior and contracting
  • Downstream integrators should contractually require provenance disclosures and indemnities; upstream dataset providers may need clearer licensing strategies. Contract design, warranty and indemnity clauses will become more central to AI procurement and partnerships.

In short: license laundering creates measurable, concentrated legal risk that affects valuation, contracting, insurance, market structure, and the demand for provenance and compliance infrastructure. Economists, platform designers, and market participants should treat provenance as a measurable economic input to asset value and systemic stability.