> The training data could also be considered source.
That makes me wonder about something: would it be less computationally intensive to prove that a trained net is the result of some training data than the training procedure? A lot less? Can it be proven that there is no backdoor (supplemental training data altering the results)?
I suspect you could prove rather cheaply that the trained net weight indeed correspond to a local minima for the training data. However, there is no telling that this is the best minima that could be achieved, nor that the provided training dataset is enough to obrain that result.
That makes me wonder about something: would it be less computationally intensive to prove that a trained net is the result of some training data than the training procedure? A lot less? Can it be proven that there is no backdoor (supplemental training data altering the results)?
I suspect you could prove rather cheaply that the trained net weight indeed correspond to a local minima for the training data. However, there is no telling that this is the best minima that could be achieved, nor that the provided training dataset is enough to obrain that result.