mlsanityData to 14 Oct 2026

SpanKey: Dynamic Key Space Conditioning for Neural Network Access Control

arXiv 2604.12254 ↗First posted 14 Apr 2026cs.CR cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

SpanKey is a lightweight way to gate inference without encrypting weights or chasing leaderboard accuracy on gated inference. The idea is to condition activations on secret keys. A basis matrix B defines a low-dimensional key subspace Span(B); during training we sample coefficients α and form keys k=α^top B, then inject them into intermediate activations with additive or multiplicative maps and strength γ. Valid keys lie in Span(B); invalid keys are sampled outside that subspace. We make three points. (i) Mechanism: subspace key injection and a multi-layer design space. (ii) Failure mode: key absorption, together with two analytical results (a Beta-energy split and margin-tail diagnostics), explains weak baseline separation in energy and margin terms -- these are not a security theorem. iii) Deny losses and experiments: Modes A--C and extensions, with CIFAR-10 ResNet-18 runs and MNIST ablations for Mode B. We summarize setup and first-order analysis, injectors, absorption, deny losses and ablations, a threat discussion that does not promise cryptography, and closing remarks on scale. Code: texttthttps://github.com/mindmemory-ai/dksc

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 8 of its 13 references that are in the map. First posted on arXiv 14 Apr 2026.

Builds on

8 of 13 references.

References · 8

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  2. 2017FiLM: Visual Reasoning with a General Conditioning Layercited by 2,333
  3. 2016Language Modeling with Gated Convolutional Networkscited by 702
  4. 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 112
  5. 2023Deep Intellectual Property Protection: A Surveycited by 17
  6. 2024ModelLock: Locking Your Model With a Spellcited by 6
  7. 2023EncryIP: A Practical Encryption-Based Framework for Model Intellectual Property Protectioncited by 3
  8. 2025Key-Conditioned Orthonormal Transform Gating (K-OTG): Multi-Key Access Control with Hidden-State Scrambling for LoRA-Tuned Modelscited by 1

Built on by

Not cited yet.