From 46964ee15e86714a5fa72eaa70ba873ed2d83944 Mon Sep 17 00:00:00 2001
From: Petr Onderka <petronderka@microsoft.com>
Date: Fri, 22 May 2026 15:22:42 +0200
Subject: [PATCH 1/3] Add note to only load trusted models

---
 .../Builder/BuilderExtensions.cs              | 10 +++++++
 .../Model/ModelOperationsCatalog.cs           |  4 +++
 .../OnnxCatalog.cs                            | 30 +++++++++++++++++++
 .../TensorflowCatalog.cs                      |  2 ++
 4 files changed, 46 insertions(+)

diff --git a/src/Microsoft.Extensions.ML/Builder/BuilderExtensions.cs b/src/Microsoft.Extensions.ML/Builder/BuilderExtensions.cs
index 45ededdb10..a311014ed9 100644
--- a/src/Microsoft.Extensions.ML/Builder/BuilderExtensions.cs
+++ b/src/Microsoft.Extensions.ML/Builder/BuilderExtensions.cs
@@ -20,6 +20,7 @@ public static class BuilderExtensions
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string uri)
             where TData : class
@@ -41,6 +42,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPr
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string modelName, string uri)
             where TData : class
@@ -62,6 +64,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPr
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string modelName, Uri uri)
             where TData : class where TPrediction : class, new()
@@ -80,6 +83,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPr
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string uri, TimeSpan period)
             where TData : class where TPrediction : class, new()
@@ -103,6 +107,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPr
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string modelName, string uri, TimeSpan period)
             where TData : class
@@ -127,6 +132,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPr
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string modelName, Uri uri, TimeSpan period)
             where TData : class
@@ -150,6 +156,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromUri<TData, TPr
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromFile<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string filePath)
             where TData : class
@@ -169,6 +176,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromFile<TData, TP
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromFile<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string filePath, bool watchForChanges)
             where TData : class
@@ -190,6 +198,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromFile<TData, TP
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromFile<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string modelName, string filePath)
             where TData : class
@@ -214,6 +223,7 @@ public static PredictionEnginePoolBuilder<TData, TPrediction> FromFile<TData, TP
         /// <returns>
         /// The updated <see cref="PredictionEnginePoolBuilder{TData, TPrediction}"/>.
         /// </returns>
+        /// <remarks>Only add models from trusted sources. Adding models from untrusted sources is a security risk.</remarks>
         public static PredictionEnginePoolBuilder<TData, TPrediction> FromFile<TData, TPrediction>(
             this PredictionEnginePoolBuilder<TData, TPrediction> builder, string modelName, string filePath, bool watchForChanges)
             where TData : class
diff --git a/src/Microsoft.ML.Data/Model/ModelOperationsCatalog.cs b/src/Microsoft.ML.Data/Model/ModelOperationsCatalog.cs
index 26f13c71b8..6c098890fd 100644
--- a/src/Microsoft.ML.Data/Model/ModelOperationsCatalog.cs
+++ b/src/Microsoft.ML.Data/Model/ModelOperationsCatalog.cs
@@ -142,6 +142,7 @@ private void SaveInputSchema(DataViewSchema inputSchema, RepositoryWriter rep)
         /// <param name="inputSchema">Will contain the input schema for the model. If the model was saved without
         /// any description of the input, there will be no input schema. In this case this can be <see langword="null"/>.</param>
         /// <returns>The loaded model.</returns>
+        /// <remarks>Only load models from trusted sources. Loading models from untrusted sources is a security risk.</remarks>
         /// <example>
         /// <format type="text/markdown">
         /// <![CDATA[
@@ -201,6 +202,7 @@ public ITransformer Load(Stream stream, out DataViewSchema inputSchema)
         /// <param name="inputSchema">Will contain the input schema for the model. If the model was saved without
         /// any description of the input, there will be no input schema. In this case this can be <see langword="null"/>.</param>
         /// <returns>The loaded model.</returns>
+        /// <remarks>Only load models from trusted sources. Loading models from untrusted sources is a security risk.</remarks>
         /// <example>
         /// <format type="text/markdown">
         /// <![CDATA[
@@ -255,6 +257,7 @@ private ITransformer DecomposeLoader(ref IDataLoader<IMultiStreamSource> loader)
         /// this method will throw an exception. The scenario where no loader is stored in the stream should
         /// be handled instead using the <see cref="Load(Stream, out DataViewSchema)"/> method.</param>
         /// <returns>The transformer model from the model stream.</returns>
+        /// <remarks>Only load models from trusted sources. Loading models from untrusted sources is a security risk.</remarks>
         public ITransformer LoadWithDataLoader(Stream stream, out IDataLoader<IMultiStreamSource> loader)
         {
             _env.CheckValue(stream, nameof(stream));
@@ -283,6 +286,7 @@ public ITransformer LoadWithDataLoader(Stream stream, out IDataLoader<IMultiStre
         /// this method will throw an exception. The scenario where no loader is stored in the stream should
         /// be handled instead using the <see cref="Load(Stream, out DataViewSchema)"/> method.</param>
         /// <returns>The transformer model from the model file.</returns>
+        /// <remarks>Only load models from trusted sources. Loading models from untrusted sources is a security risk.</remarks>
         public ITransformer LoadWithDataLoader(string filePath, out IDataLoader<IMultiStreamSource> loader)
         {
             _env.CheckNonEmpty(filePath, nameof(filePath));
diff --git a/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs b/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
index 210e13e849..8728c0584c 100644
--- a/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
+++ b/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
@@ -23,6 +23,8 @@ public static class OnnxCatalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelFile">The path of the file containing the ONNX model.</param>
@@ -51,6 +53,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelBytes">The <see cref="System.IO.Stream"/> containing the model bytes.</param>
@@ -79,6 +83,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelFile">The path of the file containing the ONNX model.</param>
@@ -115,6 +121,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelBytes">The <see cref="System.IO.Stream"/> containing the model bytes.</param>
@@ -154,6 +162,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -186,6 +196,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -212,6 +224,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// </summary>
         /// <remarks>
         /// If the options.GpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="options">Options for the <see cref="OnnxScoringEstimator"/>.</param>
@@ -239,6 +253,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -277,6 +293,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -311,6 +329,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -336,6 +356,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -365,6 +387,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -395,6 +419,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -426,6 +452,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="recursionLimit">Optional, specifies the Protobuf CodedInputStream recursion limit. Default value is 100.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -458,6 +486,8 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="recursionLimit">Optional, specifies the Protobuf CodedInputStream recursion limit. Default value is 100.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// 
+        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
diff --git a/src/Microsoft.ML.TensorFlow/TensorflowCatalog.cs b/src/Microsoft.ML.TensorFlow/TensorflowCatalog.cs
index 372d4b1029..78790cdfbd 100644
--- a/src/Microsoft.ML.TensorFlow/TensorflowCatalog.cs
+++ b/src/Microsoft.ML.TensorFlow/TensorflowCatalog.cs
@@ -26,6 +26,7 @@ public static class TensorflowCatalog
         /// </summary>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelLocation">Location of the TensorFlow model.</param>
+        /// <remarks>Only load models from trusted sources. Loading models from untrusted sources is a security risk.</remarks>
         /// <example>
         /// <format type="text/markdown">
         /// <![CDATA[
@@ -52,6 +53,7 @@ public static TensorFlowModel LoadTensorFlowModel(this ModelOperationsCatalog ca
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelLocation">Location of the TensorFlow model.</param>
         /// <param name="treatOutputAsBatched">If the first dimension of the output is unknown, should it be treated as batched or not.</param>
+        /// <remarks>Only load models from trusted sources. Loading models from untrusted sources is a security risk.</remarks>
         /// <example>
         /// <format type="text/markdown">
         /// <![CDATA[

From ecc726d693e502bd3d2b4d3e6078929e8524a968 Mon Sep 17 00:00:00 2001
From: Petr Onderka <petronderka@microsoft.com>
Date: Tue, 26 May 2026 15:46:54 +0200
Subject: [PATCH 2/3] Use <para> for security warning in OnnxCatalog remarks

Addresses review feedback to avoid the blank '/// ' separator lines, which can produce trailing whitespace and noisy diffs.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .../OnnxCatalog.cs                            | 47 +++++++------------
 1 file changed, 16 insertions(+), 31 deletions(-)

diff --git a/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs b/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
index 8728c0584c..f837d63872 100644
--- a/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
+++ b/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
@@ -1,4 +1,4 @@
-// Licensed to the .NET Foundation under one or more agreements.
+// Licensed to the .NET Foundation under one or more agreements.
 // The .NET Foundation licenses this file to you under the MIT license.
 // See the LICENSE file in the project root for more information.
 
@@ -23,8 +23,7 @@ public static class OnnxCatalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelFile">The path of the file containing the ONNX model.</param>
@@ -53,8 +52,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelBytes">The <see cref="System.IO.Stream"/> containing the model bytes.</param>
@@ -83,8 +81,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelFile">The path of the file containing the ONNX model.</param>
@@ -121,8 +118,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="modelBytes">The <see cref="System.IO.Stream"/> containing the model bytes.</param>
@@ -162,8 +158,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -196,8 +191,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -224,8 +218,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// </summary>
         /// <remarks>
         /// If the options.GpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
         /// <param name="options">Options for the <see cref="OnnxScoringEstimator"/>.</param>
@@ -253,8 +246,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -293,8 +285,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
         /// <format type="text/markdown">
@@ -329,8 +320,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -356,8 +346,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -387,8 +376,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -419,8 +407,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -452,8 +439,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="recursionLimit">Optional, specifies the Protobuf CodedInputStream recursion limit. Default value is 100.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,
@@ -486,8 +472,7 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="recursionLimit">Optional, specifies the Protobuf CodedInputStream recursion limit. Default value is 100.</param>
         /// <remarks>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
-        /// 
-        /// Only apply models from trusted sources. Applying models from untrusted sources is a security risk.
+        /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
             string[] outputColumnNames,

From bebdaa51eae844f92a042d6617d5a9b1abb7b7fd Mon Sep 17 00:00:00 2001
From: Petr Onderka <petronderka@microsoft.com>
Date: Tue, 26 May 2026 15:54:48 +0200
Subject: [PATCH 3/3] Use <para> properly

---
 .../OnnxCatalog.cs                            | 32 ++++++++++++++++++-
 1 file changed, 31 insertions(+), 1 deletion(-)

diff --git a/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs b/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
index f837d63872..7903981c24 100644
--- a/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
+++ b/src/Microsoft.ML.OnnxTransformer/OnnxCatalog.cs
@@ -1,4 +1,4 @@
-// Licensed to the .NET Foundation under one or more agreements.
+// Licensed to the .NET Foundation under one or more agreements.
 // The .NET Foundation licenses this file to you under the MIT license.
 // See the LICENSE file in the project root for more information.
 
@@ -20,9 +20,11 @@ public static class OnnxCatalog
         /// and how to run it on a GPU.
         /// </summary>
         /// <remarks>
+        /// <para>
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
@@ -49,9 +51,11 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// and how to run it on a GPU.
         /// </summary>
         /// <remarks>
+        /// <para>
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
@@ -78,9 +82,11 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// and how to run it on a GPU.
         /// </summary>
         /// <remarks>
+        /// <para>
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
@@ -115,9 +121,11 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// and how to run it on a GPU.
         /// </summary>
         /// <remarks>
+        /// <para>
         /// The name/type of input columns must exactly match name/type of the ONNX model inputs.
         /// The name/type of the produced output columns will match name/type of the ONNX model outputs.
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
@@ -157,7 +165,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
@@ -190,7 +200,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
@@ -217,7 +229,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// and how to run it on a GPU.
         /// </summary>
         /// <remarks>
+        /// <para>
         /// If the options.GpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <param name="catalog">The transform's catalog.</param>
@@ -245,7 +259,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
@@ -284,7 +300,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         /// <example>
@@ -319,7 +337,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
@@ -345,7 +365,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
@@ -375,7 +397,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
@@ -406,7 +430,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="gpuDeviceId">Optional GPU device ID to run execution on, <see langword="null" /> to run on CPU.</param>
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
@@ -438,7 +464,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <param name="recursionLimit">Optional, specifies the Protobuf CodedInputStream recursion limit. Default value is 100.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,
@@ -471,7 +499,9 @@ public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog
         /// <param name="fallbackToCpu">If GPU error, raise exception or fallback to CPU.</param>
         /// <param name="recursionLimit">Optional, specifies the Protobuf CodedInputStream recursion limit. Default value is 100.</param>
         /// <remarks>
+        /// <para>
         /// If the gpuDeviceId value is <see langword="null" /> the <see cref="P:MLContext.GpuDeviceId"/> value will be used if it is not <see langword="null" />.
+        /// </para>
         /// <para>Only apply models from trusted sources. Applying models from untrusted sources is a security risk.</para>
         /// </remarks>
         public static OnnxScoringEstimator ApplyOnnxModel(this TransformsCatalog catalog,