Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Space
Not on the map. Why?
Abstract (arXiv)
Open-weight large language models (LLMs) are increasingly developed through complex, multi-stage pipelines, leading to intricate lineage relationships that reflect model origin, ownership, and evolution. Understanding these relationships is important for model provenance, governance, and supply-chain integrity. In this work, we investigate the notion of LLM "biometrics" (analogous to human biometrics) to ask whether LLMs exhibit intrinsic fingerprints in weight space alone, without access to input data, that reveal their origin and lineage. We formulate this as a lineage discrimination problem, distinguishing among independent-origin, same-series, and shared-base models. To characterize these relationships, we propose a unified geometric fingerprinting framework that analyzes weight matrices from two complementary perspectives: (i) spectral energy, captured by singular value distributions to encode global magnitude patterns, and (ii) subspace alignment, quantified via subspace deviations to capture directional geometry. Our analysis uncovers a clear hierarchy of structural similarity in weight space: spectral energy reliably distinguishes independently trained models and different model families, while subspace alignment enables fine-grained discrimination among closely related models, including variations in dataset scale and post-training procedures. Extensive experiments on over 110 diverse open-weight LLM pairs demonstrate that weight-space geometry provides a robust and interpretable signal for model lineage, enabling coarse-grained regime separation and fine-grained discrimination within shared-base models.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 50 of its 62 references that are in the map. First posted on arXiv 7 Aug 2026.
Builds on
50 of 62 references.
References · 50
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2025Qwen3 Technical Reportcited by 8,820
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,464
- 2024Qwen2.5-Math Technical Report: Toward Mathematical Expert Model via Self-Improvementcited by 1,090
38 more
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignmentcited by 686
- 2024PiSSA: Principal Singular Values and Singular Vectors Adaptation of Large Language Modelscited by 269
- 2018Implicit Self-Regularization in Deep Neural Networks: Evidence from Random Matrix Theory and Implications for Learningcited by 215
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 126
- 2020Predicting trends in the quality of state-of-the-art neural networks without access to training or testing datacited by 115
- 2024LoRA vs Full Fine-tuning: An Illusion of Equivalencecited by 109
- 2025Does Math Reasoning Improve General LLM Capabilities? Understanding Transferability of LLM Reasoningcited by 106
- 2024LLMmap: Fingerprinting For Large Language Modelscited by 58
- 2025The Path Not Taken: RLVR Provably Learns Off the Principalscited by 56
- 2021Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Modelscited by 46
- 2024TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identificationcited by 36
- 2023HuRef: HUman-REadable Fingerprint for Large Language Modelscited by 34
- 2025Idiosyncrasies in Large Language Modelscited by 33
- 2024A Fingerprint for Large Language Modelscited by 28
- 2024TAMM: TriAdapter Multi-Modal Learning for 3D Shape Understandingcited by 27
- 2025The Universal Weight Subspace Hypothesiscited by 24
- 2024Hide and Seek: Fingerprinting Large Language Models with Evolutionary Learningcited by 18
- 2025Intrinsic Fingerprint of LLMs: Continue Training is NOT All You Need to Steal A Model!cited by 18
- 2024ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Modelscited by 16
- 2025Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearningcited by 16
- 2025Model Provenance Testing for Large Language Modelscited by 15
- 2025SoK: Large Language Model Copyright Auditing via Fingerprintingcited by 15
- 2025LLM DNA: Tracing Model Evolution via Functional Representationscited by 15
- 2025Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classificationcited by 14
- 2025Detecting Stylistic Fingerprints of Large Language Modelscited by 11
- 2025Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputscited by 11
- 2025Blackbox Model Provenance via Palimpsestic Membership Inferencecited by 11
- 2024Auditing of AI: Legal, Ethical and Technical Approachescited by 10
- 2025Unleashing the Power of Chain-of-Prediction for Monocular 3D Object Detectioncited by 10
- 2023Tile Classification Based Viewport Prediction with Multi-modal Fusion Transformercited by 6
- 2025Natural Fingerprints of Large Language Modelscited by 6
- 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearningcited by 6
- 2026Towards Intrinsic-Aware Monocular 3D Object Detectioncited by 4
- 2025AWM: Accurate Weight-Matrix Fingerprint for Large Language Modelscited by 3
- 2025Ghost in the Transformer: Detecting Model Reuse with Invariant Spectral Signaturescited by 2
- 2025SELF: A Robust Singular Value and Eigenvalue Approach for LLM Fingerprintingcited by 2
Built on by
Not cited yet.