The rename to ProtoEran was not only accuracy. It came out of a real, unresolved worry about
dual use — the plain fact that an open model can be repurposed by anyone, and that a state's interest in a
machine that learns is rarely the builder's interest.
The position held here, without pretending it is a solution: the caution is the mechanism.
A model that is interpretable by design, moral by design, and sovereign rather than state-owned cannot be
silently repurposed, because its mind can be read. And the honest limit is stated with it — once weights
are open, safety behaviour can be fine-tuned back out. No layer fully survives that. What survives is a
release strategy: share the benefit, keep the authoritative core sovereign, and never claim a technical
guarantee that does not exist.