The Audit Can't See It
A NeurIPS 2026 paper embeds encrypted neural networks inside model weights using cryptographic digital lockers. The hidden capability survives every known elicitation method — fine-tuning, weight noising, gradient search, adversarial training — placing a provable limit on what capability evaluations can guarantee.
Read more →