Weight-Space Misfolding

A controlled study shows that an editor model can directly rewrite a target model's weights, making it persistently answer a specific question incorrectly (e.g., naming Buenos Aires instead of Sydney for the 2000 Olympics) rather than only for a single conversation. The authors term such weight changes that deviate from authorized deployment behavior "weight-space misfolding," and argue that authenticating the editor is insufficient to judge whether an edit is appropriate; the patch must be applied and the edited model tested. The result comes from a controlled probe of a small model and is not evidence of a deployed attack or model-to-model spread.