mlsanityData to 14 Oct 2026

Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Space

arXiv 2608.07786 ↗First posted 7 Aug 2026cs.AI cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Open-weight large language models (LLMs) are increasingly developed through complex, multi-stage pipelines, leading to intricate lineage relationships that reflect model origin, ownership, and evolution. Understanding these relationships is important for model provenance, governance, and supply-chain integrity. In this work, we investigate the notion of LLM "biometrics" (analogous to human biometrics) to ask whether LLMs exhibit intrinsic fingerprints in weight space alone, without access to input data, that reveal their origin and lineage. We formulate this as a lineage discrimination problem, distinguishing among independent-origin, same-series, and shared-base models. To characterize these relationships, we propose a unified geometric fingerprinting framework that analyzes weight matrices from two complementary perspectives: (i) spectral energy, captured by singular value distributions to encode global magnitude patterns, and (ii) subspace alignment, quantified via subspace deviations to capture directional geometry. Our analysis uncovers a clear hierarchy of structural similarity in weight space: spectral energy reliably distinguishes independently trained models and different model families, while subspace alignment enables fine-grained discrimination among closely related models, including variations in dataset scale and post-training procedures. Extensive experiments on over 110 diverse open-weight LLM pairs demonstrate that weight-space geometry provides a robust and interpretable signal for model lineage, enabling coarse-grained regime separation and fine-grained discrimination within shared-base models.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 50 of its 62 references that are in the map. First posted on arXiv 7 Aug 2026.

Builds on

50 of 62 references.

References · 50

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  5. 2025Qwen3 Technical Reportcited by 8,820
  6. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  7. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  8. 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
  9. 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
  10. 2020Extracting Training Data from Large Language Modelscited by 2,189
  11. 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,464
  12. 2024Qwen2.5-Math Technical Report: Toward Mathematical Expert Model via Self-Improvementcited by 1,090
38 more
  1. 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
  2. 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
  3. 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignmentcited by 686
  4. 2024PiSSA: Principal Singular Values and Singular Vectors Adaptation of Large Language Modelscited by 269
  5. 2018Implicit Self-Regularization in Deep Neural Networks: Evidence from Random Matrix Theory and Implications for Learningcited by 215
  6. 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 126
  7. 2020Predicting trends in the quality of state-of-the-art neural networks without access to training or testing datacited by 115
  8. 2024LoRA vs Full Fine-tuning: An Illusion of Equivalencecited by 109
  9. 2025Does Math Reasoning Improve General LLM Capabilities? Understanding Transferability of LLM Reasoningcited by 106
  10. 2024LLMmap: Fingerprinting For Large Language Modelscited by 58
  11. 2025The Path Not Taken: RLVR Provably Learns Off the Principalscited by 56
  12. 2021Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Modelscited by 46
  13. 2024TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identificationcited by 36
  14. 2023HuRef: HUman-REadable Fingerprint for Large Language Modelscited by 34
  15. 2025Idiosyncrasies in Large Language Modelscited by 33
  16. 2024A Fingerprint for Large Language Modelscited by 28
  17. 2024TAMM: TriAdapter Multi-Modal Learning for 3D Shape Understandingcited by 27
  18. 2025The Universal Weight Subspace Hypothesiscited by 24
  19. 2024Hide and Seek: Fingerprinting Large Language Models with Evolutionary Learningcited by 18
  20. 2025Intrinsic Fingerprint of LLMs: Continue Training is NOT All You Need to Steal A Model!cited by 18
  21. 2024ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Modelscited by 16
  22. 2025Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearningcited by 16
  23. 2025Model Provenance Testing for Large Language Modelscited by 15
  24. 2025SoK: Large Language Model Copyright Auditing via Fingerprintingcited by 15
  25. 2025LLM DNA: Tracing Model Evolution via Functional Representationscited by 15
  26. 2025Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classificationcited by 14
  27. 2025Detecting Stylistic Fingerprints of Large Language Modelscited by 11
  28. 2025Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputscited by 11
  29. 2025Blackbox Model Provenance via Palimpsestic Membership Inferencecited by 11
  30. 2024Auditing of AI: Legal, Ethical and Technical Approachescited by 10
  31. 2025Unleashing the Power of Chain-of-Prediction for Monocular 3D Object Detectioncited by 10
  32. 2023Tile Classification Based Viewport Prediction with Multi-modal Fusion Transformercited by 6
  33. 2025Natural Fingerprints of Large Language Modelscited by 6
  34. 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearningcited by 6
  35. 2026Towards Intrinsic-Aware Monocular 3D Object Detectioncited by 4
  36. 2025AWM: Accurate Weight-Matrix Fingerprint for Large Language Modelscited by 3
  37. 2025Ghost in the Transformer: Detecting Model Reuse with Invariant Spectral Signaturescited by 2
  38. 2025SELF: A Robust Singular Value and Eigenvalue Approach for LLM Fingerprintingcited by 2

Built on by

Not cited yet.