Research questionHow can safety takedowns remain effective after uncensored open-weight models are replicated and redistributed?Removing a model from its original host may not eliminate it once others quantize, mirror, and repackage the weights. These independent copies can remain deployable and support downstream applications, including malicious ones.