基本信息
- 来源: arxiv
- 原始来源: http://arxiv.org/abs/2608.31142v1
- 发布域名: arxiv.org
- 分类: cs.SE
- 作者: Yisen Xi
要点解读
这是什么
该内容提出一种四阶段黑盒审计协议，用于验证匿名模型的真实身份，通过平台快照回溯、配置指纹匹配、词汇器差异测试和行为探测四个步骤来判断模型是否与声明一致。
用在哪里
适用于模型发布平台内部审查、第三方合规审计以及需要确认匿名模型来源可信度的开发者与安全团队，尤其在模型以代号发布且缺少公开文档的情况下。
可以推断的
推测：随着模型发布渠道多样化，平台和监管方对匿名模型的身份验证需求将进一步增长。
推测：协议采用仅依赖标准库的实现方式，说明其部署门槛低，易于在不同环境中复现和集成。
来源摘要/节选
The 2025–2026 AI market has seen a wave of stealth releases: frontier models launched anonymously on developer platforms under codenames. For their users, identity determines data-handling terms, supply-chain risk, and capability expectations. No validated methodology exists for black-box identity verification of anonymous models: practitioner checklists lack accuracy evidence, and self-identification is untrustworthy by design. We propose a four-stage forensic audit protocol for API-served models. Stage 0 reconstructs launch-time configuration from archived platform snapshots (Internet Archive), exposing preview–production drift. Stage 1 fingerprints configuration (context, output ceiling, reasoning, modality) against the platform catalog. Stage 2 tests tokenizer identity with a cross-length differential that rejects short-prompt collisions. Stage 3 corroborates with behavioral probes. We test declaration consistency on 10 known-identity releases (7 exact, 2 precision-differences, 1 partial, 0 counter-directional), not end-to-end identification under anonymity. Identification is validated prospectively on a flagship case whose 2026-08-23 analysis pointed to the GLM-5.3 version line and whose official reveal confirmed those family and version-line inferences (deployment variant was not pre-asserted; Flash was consistent post-reveal), and on three Stage-0-only cases where the protocol produced a graded hypothesis or declined rather than guessed. A standard-library-only implementation is provided as supplementary material.
来源说明
当前保存的是来源摘要，不代表论文全文。请以原始来源为准。
「要点解读」由 AI Stack 依据上方已保存内容整理，不代表来源的完整表述；标注「推测：」的判断来自编辑，不是来源陈述。