Why a Model Hash Will Not Catch a Ten-Neuron Backdoor
pr0h0•
Microsoft researchers demonstrated that editing fewer than ten neurons can reliably backdoor an AI agent, exposing why cryptographic weight hashes and provenance checks cannot detect tiny malicious weight edits in open-weight model supply chains.
ai-securitymodel-supply-chainbackdoor-attacks