Mechanism · Model identity attestation
For private models, a user can confirm consistency but not content
On this page
SignificantOpen questionOpen
When weights are not published, users can check that the same root hash is served each time, but not what the model is 1. Pairing the hash with an attested evaluation, as in Attestable Audits, is one proposed remedy 3.