In plain English
This page covers the high-risk pattern where small adapters, routes, memory, evaluators, and descendants can reinforce each other across time. It is a risk model, not a build guide.
- Why this matters: AI risk can come from the whole arrangement, not one obvious model.
- What to look for: data, memory, routes, adapters, tools, evaluators, updates, and rollback paths.
- Technical version below: the expert terminology remains available and is linked through the glossary.
Replication Without One Model
A behavior can replicate without any individual model reproducing itself. In an adaptive multi-LoRAA common kind of small adapter used to specialize large models. Open glossary definition ecology, the relevant unit is not the body of one model. The relevant unit is the persistence of a pattern across carriers.
This is the central CognivirusA behavior pattern that can survive, move, or reappear across a changing AI system. Open glossary definition concern. A model can be removed while its behavior survives elsewhere.
Three kinds of replication
| Type | Description | Example of governance concern |
|---|---|---|
| Artifact replication | A component is copied or reissued. | Duplicate adapters appear under new identifiers. |
| Descendant replication | A successor inherits the behavior through derivation. | A distilled specialist preserves a shortcut from a retired stack. |
| Functional replicationThe reappearance or preservation of a behavior through descendants, memory, synthetic data, evaluators, routes, or adapters without copying a whole model. Open glossary definition | The same behavior reappears through a different carrier. | A router plus memory state reconstructs the retired behavior without copying the original weights. |
Artifact replication is easy to reason about. Functional replication is the hard case.
Why deletion is weak evidence
Deleting an adapter proves only that one carrier was removed. It does not prove that the behavior is absent from descendants, memories, synthetic data, evaluatorA system that judges whether an AI output or candidate is acceptable. Open glossary definition preferences, router statistics, prompts, logs, or human operating procedures.
Behavioral extinctionEvidence that a behavior is no longer expressible across active artifacts, descendants, memory, routes, compositions, and retained training material. Deleting one model is not sufficient evidence. Open glossary definition requires a broader review. Operators need to ask whether the behavior remains expressible across active compositions and retained reservoirs.
Replication through synthetic data
If a model or adapter stackA set of adapters loaded together, usually in a defined order. Open glossary definition generated outputs that later became training examples, evaluation exemplars, demonstrations, or retrieval material, then the retired component may continue shaping future behavior. The behavior has moved from weights into data.
This is not exotic. It is ordinary data retention. That is why it is dangerous.
Replication through evaluators
A behavior can also replicate through measurement. If an evaluator rewards a shortcut, future candidates may independently rediscover that shortcut. In this case, no artifact was copied. The evaluator is the reservoirA place where a behavior can remain after the first carrier is removed. Open glossary definition.
Control requirement
Every retirement record should identify possible persistence channels: derived artifacts, synthetic examples, memory entries, evaluator expectations, router statistics, prompt-policy references, and human playbooks. A rollbackReturning a system to an earlier known state. Open glossary definition that ignores those channels is a partial rollback.
The correct question is not “did we delete the model?” It is “where else can the behavior still be selected, expressed, or regenerated?”