{"course":{"slug":"running-models-yourself","title":"Running Models Yourself","url":"https://addaly.com/learn/running-models-yourself","level":"intermediate","track":"deep"},"lesson":{"slug":"what-you-may-ship","title":"What you may ship, and what nobody has settled","url":"https://addaly.com/learn/running-models-yourself/what-you-may-ship","position":82,"of":82,"minutes":9,"answer":"A fine-tuned model inherits obligations from the base licence, the dataset's terms and the terms of any model used to generate data.","keyIdea":"A fine-tuned model inherits obligations from the base licence, the dataset's terms and the terms of any model used to generate data, and because copyright in training and in weights themselves is unsettled and differs by country, the durable protection is a provenance record and a short model card written at the time."},"body":{"format":"markdown","text":"## Three licences stack, and people check one\n\nA model you fine-tuned carries obligations from at least three sources, and they are independent of each other.\n\n**The base weights' licence.** Apache-2.0 and MIT are permissive. Several widely used families are not, despite being called open: some carry an acceptable-use policy that travels with derivative works, some add a naming requirement, and at least one imposes conditions that only take effect above a monthly-active-user threshold. Read the licence file in the repository rather than the word on the model card.\n\n**The dataset's licence or terms.** A public dataset frequently carries a non-commercial or share-alike condition. Scraped content carries the source's terms. Data your own users produced carries whatever your privacy notice promised them, which is a commitment you made and can be held to regardless of anything else.\n\n**The terms of any model used to generate data.** If you produced training examples with a hosted model, that provider's terms apply to the output. Several restrict using outputs to develop or improve a competing model. Whether a narrow task adapter is a competing model is contested, largely untested in court, and answered differently by different providers' wording.\n\n## Naming clauses are real and easy to breach\n\nSome base licences require derivative models to carry a prefix in their name and to state the base model they came from. This sounds trivial and it is the clause most often breached, because people name the artefact after their company and publish it without reading past the first paragraph.\n\nIt costs nothing to comply. Put the base model's name and licence file alongside your weights, and follow any naming requirement literally.\n\n## What is unsettled\n\nThree questions have no settled answer, and anyone who tells you otherwise is describing one jurisdiction's current position as though it were universal.\n\n**Whether training on copyrighted material is permitted.** Litigation is active in several countries and the reasoning has not converged. Some jurisdictions have statutory text-and-data-mining exceptions with opt-out mechanisms; others rely on fair-use-style doctrines assessed case by case; others have nothing on point. Outcomes so far have turned on narrow facts (how the material was obtained, whether it was retained, what the output competes with) rather than on a general principle. Nothing here is stable enough to plan around, and it differs by where you are and where your users are.\n\n**Whether model weights are copyrightable at all.** If weights are the output of an automated process rather than an authored work, the traditional basis for copyright is unclear, which unsettles the ground that model licences stand on. Some argue licences on weights operate as contracts rather than copyright licences, with different consequences for who is bound. This is unresolved.\n\n**What erasure means for a trained model.** If a person exercises a right to have their data deleted, removing the row from your dataset is straightforward. What that implies for a model already trained on it is not: retraining is sometimes impractical, machine unlearning is an active research area rather than a reliable tool, and regulators have not converged on what is required.\n\nThis course cannot resolve any of these, does not give legal advice, and would be lying if it pretended the position were clear. What it can do is tell you where the disagreement sits, so that you ask a lawyer a specific question rather than a general one.\n\n## What to do, which is cheap\n\nThe engineering practices that keep you able to answer questions later cost almost nothing at the time and are impossible to reconstruct afterwards.\n\nKeep a provenance record per dataset: source, date, licence or terms, and how it was obtained. Keep the base model's licence file with your weights. Record the base repository and commit. And write a short model card (half a page is enough) that states the base model, what the adapter was trained to do, what data it came from, the licence, the intended use, and the known failures you found during evaluation.\n\n```markdown\n# triage-adapter v3\nBase: Qwen/Qwen2.5-7B-Instruct @ <commit>  (Apache-2.0, licence file included)\nData: 1,840 internal support messages, consented under our privacy notice v4;\n      180 synthetic edge cases, generated locally with the same base model.\nTrained: LoRA r=16 alpha=32, 2 epochs. Eval: 0.91 exact match on held-out set.\nKnown failures: messages under five words; mixed-language messages.\nIntended use: internal triage only. Not for clinical decisions.\n```\n\nThat block is the difference between an artefact a colleague can safely adopt and one nobody can evaluate. It is also, if the legal questions above ever reach you, the only record of what you actually did.\n\n> Write the provenance while you still remember it. Nobody has ever successfully reconstructed where a dataset came from a year later."},"check":{"question":"Someone fine-tunes a permissively licensed base model on examples generated by a hosted commercial model, and plans to publish the adapter. Which assessment is accurate?","options":[{"text":"The permissive base licence governs the result, so the adapter can be published under that licence.","correct":false,"tempting":"Considers only one of the three sources of obligation; the base licence says nothing about terms attached to the data used."},{"text":"The provider’s terms on generated output apply independently of the base licence.","correct":true},{"text":"Model weights are unlikely to be copyrightable, so no licence meaningfully restricts publication.","correct":false,"tempting":"Takes one unsettled argument as settled, and ignores that such terms may bind as contract regardless of how copyright is resolved."},{"text":"Publishing is safe provided the adapter is released under a non-commercial licence.","correct":false,"tempting":"Changing the outbound licence does not discharge inbound obligations from the data provider's terms."}]},"prev":{"slug":"continued-pretraining","title":"When an adapter is not enough","url":"https://addaly.com/learn/running-models-yourself/continued-pretraining"},"next":null,"authorship":"Founder and series editor: Dr Mustafa Mun. Written by AI models to a written standard. Exam keys checked blind by a second model: 3,665 of 3,666 agreed. Academic review invited.","review":{"status":"Draft, open for academic review"},"cite":"Addaly (2026) 'What you may ship, and what nobody has settled', in Running Models Yourself. Edited by M. Mun. Addaly. Available at: https://addaly.com/learn/running-models-yourself/what-you-may-ship (Accessed: 13 October 2026).","licence":{"name":"CC BY-NC-SA 4.0","url":"https://creativecommons.org/licenses/by-nc-sa/4.0/"},"reader":{"schema":1,"title":"What you may ship, and what nobody has settled","courseTitle":"Running Models Yourself","module":{"index":9,"slug":"making-it-yours","title":"Making it yours: adapters and training"},"answer":null,"keyIdea":"A fine-tuned model inherits obligations from the base licence, the dataset’s terms and the terms of any model used to generate data, and because copyright in training and in weights themselves is unsettled and differs by country, the durable protection is a provenance record and a short model card written at the time.","hero":{"kind":"plate","image":null,"alt":null,"caption":null},"blocks":[{"t":"h2","id":"three-licences-stack-and-people-check-one","runs":[{"text":"Three licences stack, and people check one"}]},{"t":"p","runs":[{"text":"A model you fine-tuned carries obligations from at least three sources, and they are independent of each other."}]},{"t":"p","runs":[{"text":"The base weights’ licence.","b":true},{"text":" Apache-2.0 and MIT are permissive. Several widely used families are not, despite being called open: some carry an acceptable-use policy that travels with derivative works, some add a naming requirement, and at least one imposes conditions that only take effect above a monthly-active-user threshold. Read the licence file in the repository rather than the word on the model card."}]},{"t":"p","runs":[{"text":"The dataset’s licence or terms.","b":true},{"text":" A public dataset frequently carries a non-commercial or share-alike condition. Scraped content carries the source’s terms. Data your own users produced carries whatever your privacy notice promised them, which is a commitment you made and can be held to regardless of anything else."}]},{"t":"p","runs":[{"text":"The terms of any model used to generate data.","b":true},{"text":" If you produced training examples with a hosted model, that provider’s terms apply to the output. Several restrict using outputs to develop or improve a competing model. Whether a narrow task adapter is a competing model is contested, largely untested in court, and answered differently by different providers’ wording."}]},{"t":"h2","id":"naming-clauses-are-real-and-easy-to-breach","runs":[{"text":"Naming clauses are real and easy to breach"}]},{"t":"p","runs":[{"text":"Some base licences require derivative models to carry a prefix in their name and to state the base model they came from. This sounds trivial and it is the clause most often breached, because people name the artefact after their company and publish it without reading past the first paragraph."}]},{"t":"p","runs":[{"text":"It costs nothing to comply. Put the base model’s name and licence file alongside your weights, and follow any naming requirement literally."}]},{"t":"h2","id":"what-is-unsettled","runs":[{"text":"What is unsettled"}]},{"t":"p","runs":[{"text":"Three questions have no settled answer, and anyone who tells you otherwise is describing one jurisdiction’s current position as though it were universal."}]},{"t":"p","runs":[{"text":"Whether training on copyrighted material is permitted.","b":true},{"text":" Litigation is active in several countries and the reasoning has not converged. Some jurisdictions have statutory text-and-data-mining exceptions with opt-out mechanisms; others rely on fair-use-style doctrines assessed case by case; others have nothing on point. Outcomes so far have turned on narrow facts (how the material was obtained, whether it was retained, what the output competes with) rather than on a general principle. Nothing here is stable enough to plan around, and it differs by where you are and where your users are."}]},{"t":"p","runs":[{"text":"Whether model weights are copyrightable at all.","b":true},{"text":" If weights are the output of an automated process rather than an authored work, the traditional basis for copyright is unclear, which unsettles the ground that model licences stand on. Some argue licences on weights operate as contracts rather than copyright licences, with different consequences for who is bound. This is unresolved."}]},{"t":"p","runs":[{"text":"What erasure means for a trained model.","b":true},{"text":" If a person exercises a right to have their data deleted, removing the row from your dataset is straightforward. What that implies for a model already trained on it is not: retraining is sometimes impractical, machine unlearning is an active research area rather than a reliable tool, and regulators have not converged on what is required."}]},{"t":"p","runs":[{"text":"This course cannot resolve any of these, does not give legal advice, and would be lying if it pretended the position were clear. What it can do is tell you where the disagreement sits, so that you ask a lawyer a specific question rather than a general one."}]},{"t":"h2","id":"what-to-do-which-is-cheap","runs":[{"text":"What to do, which is cheap"}]},{"t":"p","runs":[{"text":"The engineering practices that keep you able to answer questions later cost almost nothing at the time and are impossible to reconstruct afterwards."}]},{"t":"p","runs":[{"text":"Keep a provenance record per dataset: source, date, licence or terms, and how it was obtained. Keep the base model’s licence file with your weights. Record the base repository and commit. And write a short model card (half a page is enough) that states the base model, what the adapter was trained to do, what data it came from, the licence, the intended use, and the known failures you found during evaluation."}]},{"t":"code","lang":"markdown","label":"Markdown","text":"# triage-adapter v3\nBase: Qwen/Qwen2.5-7B-Instruct @ <commit>  (Apache-2.0, licence file included)\nData: 1,840 internal support messages, consented under our privacy notice v4;\n      180 synthetic edge cases, generated locally with the same base model.\nTrained: LoRA r=16 alpha=32, 2 epochs. Eval: 0.91 exact match on held-out set.\nKnown failures: messages under five words; mixed-language messages.\nIntended use: internal triage only. Not for clinical decisions."},{"t":"p","runs":[{"text":"That block is the difference between an artefact a colleague can safely adopt and one nobody can evaluate. It is also, if the legal questions above ever reach you, the only record of what you actually did."}]},{"t":"quote","runs":[{"text":"Write the provenance while you still remember it. Nobody has ever successfully reconstructed where a dataset came from a year later."}]}],"check":{"question":[{"text":"Someone fine-tunes a permissively licensed base model on examples generated by a hosted commercial model, and plans to publish the adapter. Which assessment is accurate?"}],"options":[{"text":[{"text":"The permissive base licence governs the result, so the adapter can be published under that licence."}],"correct":false,"tempting":[{"text":"Considers only one of the three sources of obligation; the base licence says nothing about terms attached to the data used."}]},{"text":[{"text":"The provider’s terms on generated output apply independently of the base licence."}],"correct":true,"tempting":null},{"text":[{"text":"Model weights are unlikely to be copyrightable, so no licence meaningfully restricts publication."}],"correct":false,"tempting":[{"text":"Takes one unsettled argument as settled, and ignores that such terms may bind as contract regardless of how copyright is resolved."}]},{"text":[{"text":"Publishing is safe provided the adapter is released under a non-commercial licence."}],"correct":false,"tempting":[{"text":"Changing the outbound licence does not discharge inbound obligations from the data provider’s terms."}]}],"order":[3,1,2,0],"why":null},"prev":{"slug":"continued-pretraining","title":"When an adapter is not enough","minutes":9},"next":null}}