2025
Blackbox Model Provenance via Palimpsestic Membership Inference
NeurIPS 2025spotlight
Suppose Alice trains an open-weight language model and Bob uses a blackbox derivative of Alice’s model to produce text. Can Alice prove that Bob is using her model, either by querying Bob’s derivative model (query setting) or from the text alone ( observational setting)? We formulate this question a…