A model's provenance is its origin: who produced it, with what data, under what license, and where it is downloaded from. Use trusted sources, verify checksums and the license, and avoid file formats that can execute code when opened.
Example
Check the license and the file's checksum before deploying a downloaded model.