LATIDIA · Ciberseguridad

Lo que firma no es lo que ejecuta: la brecha de verificabilidad en las cadenas de suministro cuantificadas de LLM

arXiv:2610.19498v1 Anuncio Tipo: nuevo Resumen: La firma del modelo autentica los pesos de precisión completa W con los que se publica un LLM, pero los usuarios ejecutan un artefacto cuantizado Q cuya transformación de producción no está determinada de forma única.

La noticia

arXiv:2610.19498v1 Announce Type: new Abstract: Model signing authenticates the full-precision weights W an LLM is released with, yet users run a quantized artifact Q whose producing transformation is not uniquely determined under current disclosure. We separate the non-environment inputs from the execution environment E and measure a quantity that, to our knowledge, has not been measured before: the Independent Verifiability Rate (IVR), the fraction of a popularity-sampled GGUF ecosystem that a third party can re-derive bit-for-bit. Across the 200 most-downloaded Hugging Face GGUF repositories (198 in scope), no artifact or model card records the build environment, so under a recorded-inputs protocol the IVR is 0/198. Yet the artifacts are not