A due diligence checklist for data residency, license terms, and origin risk before an open model goes into production.