model provenance

Microsoft researchers describe Lazarus, a method that reprograms fewer than 10 dormant neurons in an LLM to backdoor an agent built on it, with no training required. The modified model passes standard evals until a trigger appears. Microsoft says provenance and weight integrity are the key defenses.