model-provider risk