Tao Validate Recipe Transfer
NVIDIAOfficialCreated by NVIDIA Corporation
- Skill
- Workflow
- Software development
- Apache-2.0
- Medium risk
- Has scripts
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
This skill provides a structured, multi-phase workflow to port published computer vision research code to a new dataset. It emphasizes rigorous verification at every step, starting with a feasibility gate and a mandatory Phase A porting gate that requires reproducing the original paper's results using the authors' own checkpoints. The process includes domain gap analysis, recipe adjustment based on dataset characteristics, and a verification ladder to ensure the training pipeline is sound before committing significant compute resources. It is designed to prevent common pitfalls like test leakage, preprocessing mismatches, and inappropriate hyperparameter transfer.
What it does
- Validates research code by reproducing published results using official checkpoints.
- Identifies domain gaps between source benchmarks and custom datasets.
- Provides a framework for adjusting training recipes based on dataset scale and characteristics.
- Detects data leakage and near-duplicates across training, validation, and test splits.
- Verifies preprocessing parity between training, evaluation, and deployment paths.
- Generates status reports comparing model performance against baselines and original paper results.
When to use it
- When porting a computer vision paper's code and training recipe to a new, custom dataset.
- To diagnose why a fine-tuned vision model performs poorly in production despite good validation metrics.
- When investigating failed or disappointing computer vision training runs.
- To audit an existing computer vision pipeline before deployment.
Advantages
- Prevents the propagation of silent bugs by enforcing a strict Phase A verification gate.
- Reduces wasted compute time by catching pipeline errors early through a verification ladder.
- Provides objective metrics for domain gaps to justify recipe modifications.
- Ensures reproducibility by pinning commits and documenting environment configurations.
Usage examples
- “I want to train a model from this CV paper on my own dataset of factory parts.”
- The agent will initiate the Forward mode, starting with the Phase 0 feasibility gate to assess the task, license, and data requirements before proceeding to port the code.
- “My model has great validation mAP but fails in production. Can you help me figure out why?”
- The agent will enter Post-mortem mode, using the failure atlas to systematically diagnose potential issues like preprocessing mismatches or test leakage.
Install
Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/nvidia/tao-validate-recipe-transfer/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip tao-validate-recipe-transfer.zip -d .agents/skills
Documentation by NVIDIA Corporation
CV Recipe Transfer
Port published CV work onto customer data without inheriting the silent bugs that make the resulting numbers meaningless.
The core idea
This work splits into two phases with fundamentally different epistemic status:
Phase A (Port) — get the official code running faithfully. There is external ground truth here: the authors' released checkpoint and reported number.
Phase B (Transfer) — move the recipe onto customer data. There is no external ground truth. The paper's number stops being meaningful the moment the dataset changes.
Everything verifiable must be verified in Phase A, because the safety net disappears at the boundary. Once you are in Phase B, an implementation bug and a genuine domain mismatch produce identical symptoms: a mediocre number with a clean-looking loss curve.
Two consequences that drive everything below:
Never skip the Phase A gate to "save time." It costs hours and it is the only thing that licenses trust in every number that follows.
Stop treating the paper's number as the target once the dataset changes. The target is beat the strongest cheap baseline on the customer's own test set, measured at a deliberately chosen operating point.
Mode selection
Read the request and pick a mode. Say which one you picked and why.
Post-mortem mode — a run already happened and the result was wrong, disappointing, or
suspiciously good. Go to references/postmortem.md. Do not start by rerunning anything.
Walk the checks in likelihood order and find the gate that was skipped.
Forward mode — no run yet, or starting over. Work Phase 0 → A → G → T → R → E below.
Audit mode — a pipeline exists and works, someone wants it checked before it goes to a customer. Run the Phase A gate and the Phase G report against the existing artifacts, then the parity and leakage scripts. Skip the porting work.
If the request is ambiguous, ask which of the three it is before doing anything expensive.
Phase 0 — Feasibility gate
Cheap, and it prevents the most expensive class of mistake. Do this before reading any code.
Ask and answer, in writing:
Does this need training at all? Zero-shot and promptable models cover a lot of what used to require a fine-tune — Grounding DINO, SAM-family, OWL-ViT, CLIP, and plain pretrained COCO detectors. If the customer's classes overlap COCO/LVIS vocabulary, or the task is "find the obvious object," measure a pretrained baseline first. A surprising fraction of three-week fine-tuning projects are answered by an afternoon of prompting.
Is this the right paper? Papers get picked by benchmark rank, but rank on COCO predicts very little about performance on 800 images of factory parts. Check that the paper's benchmark resembles the customer's data on the axes in Phase G.
License. Research-only, non-commercial, and AGPL clauses are common in CV repos and this is customer-facing work. Check the repo license, the weights license (often different from the code), and the license of any pretrained backbone. This is a hard gate — flag it now, not after three weeks of work.
Is there enough labeled data, and does a test set exist that reflects production? If the only data is a random export, the test set will be optimistic no matter what you do.
Record the answers. If the feasibility gate fails, say so plainly and stop — that is a successful outcome of this skill, not a failure.
Phase A — Port
Goal: prove the code, the data pipeline, the preprocessing, and the metric implementation
are all faithful. Read references/port-gate.md for the detailed procedure.
The gate, in short:
Pin the commit. Repos drift and released code routinely differs from the paper. Pin the hash. Then read the repo's issue threads — undocumented hyperparameters, known discrepancies with the paper, and "why can't I reproduce Table 2" live there. Assume the code and the paper disagree somewhere until proven otherwise.
Build the environment. Custom CUDA ops (deformable attention, DCN, custom NMS) in older research repos are the single biggest time sink specific to CV. Detect them early and containerize. Do not fight the host toolchain.
THE GATE: run their checkpoint through their eval on their benchmark and match the reported number. This single check validates environment, data pipeline, preprocessing, and metric implementation without training anything. Hours, not days.
Match within ~0.2 points: pass.
Off by 0.5–2 points: something in preprocessing or eval config is wrong. Do not proceed.
Off by a lot: wrong checkpoint, wrong class mapping, or a silently partial state-dict load. See the failure atlas.
Validate the training path with a short run on a benchmark subset. You are checking loss-curve shape and that it descends as expected, not the final number.
Scan for hardcoded benchmark assumptions. Official code is written for exactly one dataset. Class counts, normalization constants, anchor priors, path structure, and sometimes image size are baked in — occasionally inside the model definition rather than the config. Finding all of them is most of the porting work.
references/port-gate.mdhas the grep patterns.
Do not enter Phase B until step 3 passes. If it cannot be made to pass, say so and report the gap — "this repo does not reproduce its own paper" is a legitimate and valuable finding.
Phase G — Domain gap report
Make the gap measurable rather than assumed. Run:
python scripts/domain_gap_report.py --source <source_annotations> --target <target_annotations> --out gap_report.mdIt compares the source benchmark and the customer set on image count, resolution and aspect distribution, objects per image, class balance, and — most importantly — object size as a fraction of image area.
That last axis drives more recipe decisions than any other. COCO objects average a few percent of image area. If the customer's aerial, microscopy, or inspection imagery puts them at 0.1%, that immediately implicates input resolution, FPN level assignment, anchor scales, and rules out mosaic-style augmentation. The script emits these as explicit flags with reasons, not generic warnings.
The magnitude of the gap on each axis tells you which recipe fields in Phase T are at risk. Carry the flags forward — they are the justification for every deviation from the paper.
Also run split hygiene here, before any training:
python scripts/split_leakage_check.py --splits train=<dir> val=<dir> test=<dir> --report leakage.mdNear-duplicate images across splits are the single biggest source of inflated CV numbers. Video frames sampled at 5fps, the same scene from a fixed camera, the same patient, the same production lot — a random split gives 0.95 mAP and a model that collapses on deployment. Detectable via perceptual hashing and group metadata; almost nobody checks. If this skill does one thing well, make it this.
Phase T — Transfer the recipe
The intellectual core. Classify every field in the paper's recipe into one of three
buckets before writing a config. references/recipe-fields.md has the full field-by-field
table; the buckets are:
Transfer-invariant — architecture, loss formulation, optimizer choice, most augmentation types. Carry over unchanged.
Scale-dependent — schedule length, LR (via batch size and linear scaling), augmentation strength, weight decay, EMA decay. Must be adjusted for dataset size, and the direction of adjustment is usually predictable.
Dataset-derived — anchor and box size priors, input resolution, class weighting, FPN level assignment, NMS/score thresholds. Must be recomputed from the customer's data, never copied.
The trap that catches almost everyone
If you initialize from the authors' released checkpoint — which you almost always should on a small customer dataset — their schedule is wrong for you by a large factor. Their recipe assumes ImageNet init or from-scratch training on 118k images. You are fine-tuning on 2,000. Copying the paper's 300-epoch schedule is a common, expensive, and entirely predictable mistake. Expect: much shorter schedule, lower LR (often 10x), shorter warmup, possibly a frozen stem, and weaker augmentation.
State the initialization explicitly in the config and derive the schedule from it. If you cannot say in one sentence whether you are fine-tuning or training from scratch, stop and resolve that first.
Preprocessing is a single artifact
Write the preprocessing spec — resize policy (letterbox vs stretch), channel order, normalization constants, augmentation ordering — into one file that the training pipeline, the eval path, and the export path all read. Then verify numerically:
python scripts/preprocess_parity.py --config <preproc.yaml> --image <sample.jpg> --paths train,eval,exportPreprocessing mismatch between training and inference is the failure mode that actually kills deployments: excellent validation mAP, garbage in production, and a long debugging loop because nothing ever errors. Assert tensor equality rather than trusting that two code paths do the same thing.
Phase R — Run
Apply the verification ladder from references/verification-ladder.md before spending real
GPU hours. Abbreviated:
Shape and dtype trace; parameter count against the paper's stated count
Loss at initialization equals its analytic value
Gradient flow — every parameter that should get gradient does, nothing silently frozen
Overfit a single batch to near-zero loss. If it cannot, the pipeline is wrong, full stop
Overfit ~100 images; confirm the eval path agrees with the training path on that data
Short schedule at reduced scale; check trend
Full run
Fail early, fail cheap. Most disasters are a wrong pipeline trained for three days.
Alongside the full run, keep a regression suite: the pretrained baseline from Phase 0 and any prior best model, evaluated on the same frozen test set. Log dataset version, config, and commit hash together so any checkpoint is reproducible.
Phase E — Evaluate and report
Choose an operating point. Everyone reports mAP@50-95 and then deploys at a confidence threshold nobody chose deliberately. Pick the threshold from the PR curve against the customer's actual precision/recall tradeoff — the cost of a miss versus a false alarm is a business question, so ask it — and report metrics at that threshold alongside the aggregate.
Break down, don't average. Per-class and per-slice (object size, lighting, camera, site, time-of-day). A single mAP hides the fact that the model fails entirely on the one class the customer cares about.
Error analysis. For detection, separate classification errors, localization errors, duplicates, background false positives, and missed detections — they have different fixes. High-confidence false positives are often missing annotations, not model errors: a missing box is not a missing label, it is a wrong label, and the model was explicitly taught to suppress that object. Feed these back into annotation QC.
Status artifact — emit one at every evaluation, including mid-run. Write status.json
and render it:
python scripts/render_status.py --status status.json --out status.htmlIt shows exactly two things: the delta against the paper on top, and the best result so far
against its baseline below. assets/status.example.json is the schema by example. Two rules
that make it honest:
A metric the paper never published gets
"paper": null, which renders asn/pwith no delta. Never fill that column with a number from a different variant or a blog post.If the customer dataset has no published result — the normal case — say so in
calloutand name what the comparison is actually against. "vs the previous run" and "vs a published result" are different claims.
Mid-run is a first-class state: label the cards still climbing and say so in the footnote,
so nobody quotes a partial number as final.
Report structure — use this template:
# <Task> recipe transfer: <paper> → <customer dataset>
## Outcome
One paragraph. The number, at the chosen operating point, versus the baseline.
## Phase A verification
Did the official checkpoint reproduce the reported number? Exact figures.
## Domain gap
The measured gap and which recipe fields it forced us to change.
## Recipe deviations
Table: field | paper value | our value | bucket | reason.
## Results
Per-class and per-slice at the chosen threshold. PR curve. Regression vs baseline.
## Error analysis
Failure categories with counts and examples.
## Known risks
What we could not verify, and what would change the conclusion.The "Known risks" section is not optional. It is the difference between a number a customer can act on and a number that will embarrass someone in three months.
Reference files
Read these as needed rather than upfront:
references/postmortem.md— diagnose a failed run. Symptom-ordered, cheapest checks first. Start here in post-mortem mode.references/port-gate.md— Phase A detail: commit pinning, CUDA op survival, checkpoint gate procedure, hardcoded-assumption grep patterns.references/recipe-fields.md— the full field classification table, per task family.references/verification-ladder.md— the seven rungs, with the expected analytic values.references/failure-atlas.md— symptom → cause → check, for the ~25 recurring failures.references/stacks.md— framework-specific notes: raw research repo, MMDetection / Detectron2, Ultralytics, timm / torchvision, TAO. Read only the relevant one.
Scripts
scripts/domain_gap_report.py— quantified source-vs-target gap with risk flagsscripts/split_leakage_check.py— perceptual-hash near-duplicate detection across splitsscripts/preprocess_parity.py— numerical assertion that train/eval/export preprocessing agreescripts/render_status.py— the Phase E status artifact: paper delta + best result so far
Run them with --help for options. The first three are dependency-light (numpy + Pillow) and
render_status.py is stdlib-only, so all of them run inside a research repo's container
without disturbing its environment.
Honest framing
For a customer's private task there is no SOTA. There is no leaderboard for "find defects in this customer's parts." There is only the baseline and your number. So do not promise state-of-the-art; promise a well-validated result with no methodology bugs, defensible to someone who wants to poke at it.
That is worth more than it sounds, because a large share of impressive-looking fine-tuning results are inflated by test leakage, evaluating on the training distribution, or comparing against a deliberately weak baseline. Those errors are mechanical, and this skill exists to catch them.
Files
- ATTRIBUTION.mdAdded by AutoGineer954 B
- BENCHMARK.md8.5 KiB
- LICENSELicence file added by AutoGineer11.2 KiB
- SKILL.md16.3 KiB
- assets/status.example.json1.7 KiB
- config/skillspector-baseline.yaml834 B
- evals/evals.json7.6 KiB
- references/failure-atlas.md4.2 KiB
- references/port-gate.md6.7 KiB
- references/postmortem.md9.3 KiB
- references/recipe-fields.md6.8 KiB
- references/recipe_spec.yaml4.1 KiB
- references/stacks.md4.2 KiB
- references/verification-ladder.md4.6 KiB
- scripts/domain_gap_report.pyScript13.8 KiB
- scripts/preprocess_parity.pyScript15.8 KiB
- scripts/render_status.pyScript6.8 KiB
- scripts/split_leakage_check.pyScript8.2 KiB
- skill-card.md4.1 KiB
- skill.oms.sig7.5 KiB
LICENSE
Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
1. Definitions.
"License" shall mean the terms and conditions for use, reproduction,
and distribution as defined by Sections 1 through 9 of this document.
"Licensor" shall mean the copyright owner or entity authorized by
the copyright owner that is granting the License.
"Legal Entity" shall mean the union of the acting entity and all
other entities that control, are controlled by, or are under common
control with that entity. For the purposes of this definition,
"control" means (i) the power, direct or indirect, to cause the
direction or management of such entity, whether by contract or
otherwise, or (ii) ownership of fifty percent (50%) or more of the
outstanding shares, or (iii) beneficial ownership of such entity.
"You" (or "Your") shall mean an individual or Legal Entity
exercising permissions granted by this License.
"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation
source, and configuration files.
"Object" form shall mean any form resulting from mechanical
transformation or translation of a Source form, including but
not limited to compiled object code, generated documentation,
and conversions to other media types.
"Work" shall mean the work of authorship, whether in Source or
Object form, made available under the License, as indicated by a
copyright notice that is included in or attached to the work
(an example is provided in the Appendix below).
"Derivative Works" shall mean any work, whether in Source or Object
form, that is based on (or derived from) the Work and for which the
editorial revisions, annotations, elaborations, or other modifications
represent, as a whole, an original work of authorship. For the purposes
of this License, Derivative Works shall not include works that remain
separable from, or merely link (or bind by name) to the interfaces of,
the Work and Derivative Works thereof.
"Contribution" shall mean any work of authorship, including
the original version of the Work and any modifications or additions
to that Work or Derivative Works thereof, that is intentionally
submitted to Licensor for inclusion in the Work by the copyright owner
or by an individual or Legal Entity authorized to submit on behalf of
the copyright owner. For the purposes of this definition, "submitted"
means any form of electronic, verbal, or written communication sent
to the Licensor or its representatives, including but not limited to
communication on electronic mailing lists, source code control systems,
and issue tracking systems that are managed by, or on behalf of, the
Licensor for the purpose of discussing and improving the Work, but
excluding communication that is conspicuously marked or otherwise
designated in writing by the copyright owner as "Not a Contribution."
"Contributor" shall mean Licensor and any individual or Legal Entity
on behalf of whom a Contribution has been received by Licensor and
subsequently incorporated within the Work.
2. Grant of Copyright License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
copyright license to reproduce, prepare Derivative Works of,
publicly display, publicly perform, sublicense, and distribute the
Work and such Derivative Works in Source or Object form.
3. Grant of Patent License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
(except as stated in this section) patent license to make, have made,
use, offer to sell, sell, import, and otherwise transfer the Work,
where such license applies only to those patent claims licensable
by such Contributor that are necessarily infringed by their
Contribution(s) alone or by combination of their Contribution(s)
with the Work to which such Contribution(s) was submitted. If You
institute patent litigation against any entity (including a
cross-claim or counterclaim in a lawsuit) alleging that the Work
or a Contribution incorporated within the Work constitutes direct
or contributory patent infringement, then any patent licenses
granted to You under this License for that Work shall terminate
as of the date such litigation is filed.
4. Redistribution. You may reproduce and distribute copies of the
Work or Derivative Works thereof in any medium, with or without
modifications, and in Source or Object form, provided that You
meet the following conditions:
(a) You must give any other recipients of the Work or
Derivative Works a copy of this License; and
(b) You must cause any modified files to carry prominent notices
stating that You changed the files; and
(c) You must retain, in the Source form of any Derivative Works
that You distribute, all copyright, patent, trademark, and
attribution notices from the Source form of the Work,
excluding those notices that do not pertain to any part of
the Derivative Works; and
(d) If the Work includes a "NOTICE" text file as part of its
distribution, then any Derivative Works that You distribute must
include a readable copy of the attribution notices contained
within such NOTICE file, excluding those notices that do not
pertain to any part of the Derivative Works, in at least one
of the following places: within a NOTICE text file distributed
as part of the Derivative Works; within the Source form or
documentation, if provided along with the Derivative Works; or,
within a display generated by the Derivative Works, if and
wherever such third-party notices normally appear. The contents
of the NOTICE file are for informational purposes only and
do not modify the License. You may add Your own attribution
notices within Derivative Works that You distribute, alongside
or as an addendum to the NOTICE text from the Work, provided
that such additional attribution notices cannot be construed
as modifying the License.
You may add Your own copyright statement to Your modifications and
may provide additional or different license terms and conditions
for use, reproduction, or distribution of Your modifications, or
for any such Derivative Works as a whole, provided Your use,
reproduction, and distribution of the Work otherwise complies with
the conditions stated in this License.
5. Submission of Contributions. Unless You explicitly state otherwise,
any Contribution intentionally submitted for inclusion in the Work
by You to the Licensor shall be under the terms and conditions of
this License, without any additional terms or conditions.
Notwithstanding the above, nothing herein shall supersede or modify
the terms of any separate license agreement you may have executed
with Licensor regarding such Contributions.
6. Trademarks. This License does not grant permission to use the trade
names, trademarks, service marks, or product names of the Licensor,
except as required for reasonable and customary use in describing the
origin of the Work and reproducing the content of the NOTICE file.
7. Disclaimer of Warranty. Unless required by applicable law or
agreed to in writing, Licensor provides the Work (and each
Contributor provides its Contributions) on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied, including, without limitation, any warranties or conditions
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
PARTICULAR PURPOSE. You are solely responsible for determining the
appropriateness of using or redistributing the Work and assume any
risks associated with Your exercise of permissions under this License.
8. Limitation of Liability. In no event and under no legal theory,
whether in tort (including negligence), contract, or otherwise,
unless required by applicable law (such as deliberate and grossly
negligent acts) or agreed to in writing, shall any Contributor be
liable to You for damages, including any direct, indirect, special,
incidental, or consequential damages of any character arising as a
result of this License or out of the use or inability to use the
Work (including but not limited to damages for loss of goodwill,
work stoppage, computer failure or malfunction, or any and all
other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.
9. Accepting Warranty or Additional Liability. While redistributing
the Work or Derivative Works thereof, You may choose to offer,
and charge a fee for, acceptance of support, warranty, indemnity,
or other liability obligations and/or rights consistent with this
License. However, in accepting such obligations, You may act only
on Your own behalf and on Your sole responsibility, not on behalf
of any other Contributor, and only if You agree to indemnify,
defend, and hold each Contributor harmless for any liability
incurred by, or claims asserted against, such Contributor by reason
of your accepting any such warranty or additional liability.
END OF TERMS AND CONDITIONS
APPENDIX: How to apply the Apache License to your work.
To apply the Apache License to your work, attach the following
boilerplate notice, with the fields enclosed by brackets "[]"
replaced with your own identifying information. (Don't include
the brackets!) The text should be enclosed in the appropriate
comment syntax for the file format. We also recommend that a
file or class name and description of purpose be included on the
same "printed page" as the copyright notice for easier
identification within third-party archives.
Copyright [yyyy] [name of copyright owner]
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Declares allowed tools, Needs Python
The author says: Methodology skill — no container of its own. Three of the four scripts need only Python 3 with numpy and Pillow; render_status.py is stdlib-only. They run inside a research repo's own environment without disturbing it. Phases A and R execute the ported repo's training/eval, so they inherit that repo's requirements (typically docker + nvidia-container-toolkit + an NVIDIA GPU).
Security
What our scanner noticed· Medium risk
- Large base64-encoded blobs
- Scripts that your agent may run
This skill includes scripts that your agent may run. Read them before you use it.
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Created by
- NVIDIA Corporation
- Publisher
- NVIDIA (Official)
- Source
- NVIDIA/skills · skills/tao-validate-recipe-transfer · commit fce3cca
- Licence
- Apache License 2.0 (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE-APACHE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by NVIDIA Corporation or NVIDIA.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download tao-validate-recipe-transfer.zip