GrayShield: Bit-Level Sanitization for Transformer Model Supply-Chain Security

Excerpt

arXiv:2610.04319v1 Announce Type: cross Abstract: Transformer models such as BERT and Vision Transformer~(ViT) achieve strong performance via densely parameterized attention backbones. However, the least significant bits~(LSBs) of their 32-bit floating-point weights can be abused as covert channels to conceal malicious payloads, posing a serious threat to the AI model supply chain. We propose \GS (\GSabbr), a lightweight, post-training, zero-data sanitization method that completely replaces the