One provenance implication here is that the model definition and the executed inference graph are no longer the same artifact boundary.
If the runtime rewrites model code and replaces modules with fused kernels, deployment evidence probably needs to preserve both the source model identity and the transformation/runtime path.