Every note that touches model weights, newest first.
Containment reviews should cover model artifacts without turning replication experiments into claims of practical autonomous spread.