Session
Robustness Certificates for Open-Weight Deployments
What guarantees you can and cannot make once model weights are public.
Speakers
Once weights are open, guardrails that live outside the model can be removed. This talk asks what certifiable robustness properties survive open release, covers tamper-evident evaluation and provable input-region guarantees, and is honest about the properties that cannot be certified at all.