{"id":"https://openalex.org/W7165622098","doi":"https://doi.org/10.48550/arxiv.2606.21638","title":"Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs","display_name":"Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs","publication_year":2026,"publication_date":"2026-06-19","ids":{"openalex":"https://openalex.org/W7165622098","doi":"https://doi.org/10.48550/arxiv.2606.21638"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.21638","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.21638","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.21638","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139183104","display_name":"Charbel El Feghali","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Feghali, Charbel El","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015473787","display_name":"Arkil Patel","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Patel, Arkil","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058072829","display_name":"Nicholas Meade","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meade, Nicholas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041111343","display_name":"Spandana Gella","orcid":"https://orcid.org/0000-0003-2725-4476"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gella, Spandana","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074102828","display_name":"Verna Dankers","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dankers, Verna","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5010725488","display_name":"Somasekhar Reddy","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Reddy, Siva","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.46950000524520874,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.46950000524520874,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.09220000356435776,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.04190000146627426,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5379999876022339},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4424000084400177},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.43869999051094055},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.4099999964237213},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.4011000096797943},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.37790000438690186},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.3702999949455261},{"id":"https://openalex.org/keywords/permutation","display_name":"Permutation (music)","score":0.3402000069618225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6809999942779541},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5379999876022339},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4537999927997589},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4424000084400177},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.43869999051094055},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.4099999964237213},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.4011000096797943},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.37790000438690186},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3702999949455261},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.3402000069618225},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.33320000767707825},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.33309999108314514},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3253999948501587},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.30809998512268066},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3061999976634979},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.30140000581741333},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2957000136375427},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.2890999913215637},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.27250000834465027},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.21638","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.21638","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.21638","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.21638","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5875802040100098}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Open-weight":[0],"Large":[1],"Language":[2,81],"Models":[3,82],"(LLMs)":[4],"enable":[5],"scientific":[6],"progress":[7],"and":[8,43,66,163,166,180,225],"broad":[9],"deployment.":[10],"However,":[11],"they":[12],"make":[13],"it":[14],"difficult":[15],"to":[16,19,50,58,154,202],"control":[17],"access":[18,32],"sensitive":[20],"capabilities.":[21,131,193],"Current":[22],"practice":[23],"either":[24],"suppresses":[25],"dangerous":[26],"capabilities":[27],"before":[28],"release":[29,238],"or":[30],"mediates":[31],"through":[33],"closed":[34],"services":[35],"that":[36,128,137,168,197],"use":[37],"specialized":[38],"model":[39],"variants,":[40],"input/output":[41],"monitors,":[42],"API":[44],"permissions.":[45],"The":[46],"former":[47],"is":[48,69],"susceptible":[49],"jailbreaks":[51],"while":[52],"sacrificing":[53],"capability":[54,93,241],"for":[55],"all":[56],"users":[57],"mitigate":[59],"the":[60,67,125,146,156,169,186,210,217,220],"risks":[61],"posed":[62],"by":[63],"a":[64,85,100,104,112,115,134,174,233],"few,":[65],"latter":[68],"fundamentally":[70],"incompatible":[71],"with":[72,152,239],"open-weight":[73,237],"release.":[74],"In":[75,95,229],"this":[76],"paper,":[77],"we":[78,195],"propose":[79],"Tiered":[80],"(TLMs),":[83],"where":[84],"single":[86],"set":[87],"of":[88,191],"released":[89],"weights":[90,127],"supports":[91],"multiple":[92,203],"levels.":[94],"its":[96],"default":[97],"public":[98,157,187],"configuration,":[99],"TLM":[101],"behaves":[102],"as":[103],"conventional":[105],"LLM.":[106],"A":[107],"compact":[108],"secret":[109],"key":[110,227],"specifies":[111],"permutation":[113],"over":[114,124],"small":[116],"parameter":[117],"subset,":[118],"inducing":[119],"an":[120],"alternative":[121],"computation":[122],"graph":[123],"same":[126],"exposes":[129],"additional":[130],"We":[132,160],"develop":[133],"training":[135],"protocol":[136],"jointly":[138],"pretrains":[139],"both":[140],"configurations":[141],"from":[142],"scratch,":[143],"then":[144],"fine-tunes":[145],"keyed":[147,170],"configuration":[148,171,188],"on":[149,209],"private":[150,182],"data":[151],"regularization":[153],"preserve":[155],"model's":[158,211],"behavior.":[159],"pretrain":[161],"180M-":[162],"650M-parameter":[164],"TLMs":[165,231],"demonstrate":[167],"can":[172],"acquire":[173],"new":[175],"language,":[176],"gain":[177],"instruction-following":[178],"ability,":[179],"memorize":[181],"factual":[183],"knowledge,":[184],"whereas":[185],"exhibits":[189],"none":[190],"these":[192],"Moreover,":[194],"show":[196],"our":[198],"approach":[199],"extends":[200],"naturally":[201],"hierarchical":[204],"tiers.":[205],"Because":[206],"authorization":[207],"operates":[208],"weight":[212],"structure":[213],"rather":[214],"than":[215],"in":[216],"input":[218],"space,":[219],"mechanism":[221],"resists":[222],"fine-tuning-based":[223],"extraction":[224],"partial":[226],"compromise.":[228],"general,":[230],"take":[232],"step":[234],"toward":[235],"reconciling":[236],"selective":[240],"control.":[242]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-24T00:00:00"}