How are you going to prove that a few thousand weights among billions on a privately owned server were actually amplified or ablated post-training?