aiqbench analysis
ModSleuth introduces a novel agentic system that recursively reconstructs fragmented LLM dependency graphs from public artifacts, addressing the critical challenge of reconciling inconsistent documentation across heterogeneous sources. By formalizing relationships between direct and indirect dependencies, the tool uncovers hidden issues such as multi-hop license obligations and discrepancies between released and training-time artifacts. This capability is essential for tech audiences concerned with supply chain transparency, legal compliance, and the robustness of modern model ecosystems.
Which Models Are Our Models Built On? Auditing Invisible Dependencies in Modern LLMs
arXiv:2606.12385v1 Announce Type: new Abstract: Modern LLM training pipelines increasingly rely on other models to generate data, filter corpora, judge outputs, and guide development decisions. These dependencies are recursive: a model may depend on an upstream artifact whose own dependencies are documented only in separate releases and artifacts. As a result, the full dependency structure is fragmented across heterogeneous public artifacts, with complexity and recursive depth far outpacing humans' ability to trace. We introduce ModSleuth, an agentic system that recursively reconstructs LLM dependency graphs from public artifacts with source-grounded evidence. We find that the primary challenge is no longer information extraction, but defining what constitutes a dependency and reconciling artifact references across inconsistent documentation. We address these challenges through a formalization that distinguishes direct and indirect dependencies, represents heterogeneous pipeline roles through operation-centered relationships, and resolves artifact identities across names, versions, and repositories. Applying ModSleuth to four public-artifact-rich LLM releases, we recover 1,060 source-verified dependencies and construct large-scale dependency graphs of modern LLM development. These graphs reveal multi-hop license obligations, train-evaluation coupling, discrepancies between released and training-time artifacts, and documentation inconsistencies that would otherwise be difficult to uncover. We release ModSleuth and the resulting dependency graphs to support transparent analysis of the increasingly complex ecosystems underlying modern LLMs.
Title:Which Models Are Our Models Built On? Auditing Invisible Dependencies in Modern LLMs
Abstract:Modern LLM training pipelines increasingly rely on other models to generate data, filter corpora, judge outputs, and guide development decisions. These dependencies are recursive: a model may depend on an upstream artifact whose own dependencies are documented only in separate releases and artifacts. As a result, the full dependency structure is fragmented across heterogeneous public artifacts, with complexity and recursive depth far outpacing humans' ability to trace. We introduce ModSleuth, an agentic system that recursively reconstructs LLM dependency graphs from public artifacts with source-grounded evidence. We find that the primary challenge is no longer information extraction, but defining what constitutes a dependency and reconciling artifact references across inconsistent documentation. We address these challenges through a formalization that distinguishes direct and indirect dependencies, represents heterogeneous pipeline roles through operation-centered relationships, and resolves artifact identities across names, versions, and repositories. Applying ModSleuth to four public-artifact-rich LLM releases, we recover 1,060 source-verified dependencies and construct large-scale dependency graphs of modern LLM development. These graphs reveal multi-hop license obligations, train-evaluation coupling, discrepancies between released and training-time artifacts, and documentation inconsistencies that would otherwise be difficult to uncover. We release ModSleuth and the resulting dependency graphs to support transparent analysis of the increasingly complex ecosystems underlying modern LLMs.
Computation and Language (cs.CL)
arXiv:2606.12385 [cs.CL]
(or arXiv:2606.12385v1 [cs.CL] for this version)
https://doi.org/10.48550/arXiv.2606.12385 Focus to learn more arXiv-issued DOI via DataCite (pending registration)
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 311 words
Related coverage
GitLab 19.4 release notes
GitLab · Sep 17, 2026
Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?
arXiv · Jul 29, 2026
CORE-STACK+: Meta-Learning for Deep Stacked Generalization
arXiv · Sep 24, 2026
The Poisoned Conversation: Privacy-Leaking Watermarks in Unified Multimodal Models
arXiv · Oct 6, 2026