
The Guardrails
Open-source models can hide backdoors that arm on a chosen date
Researchers have shown you can download a coding model, run it daily, and never see a thing — until a date you've never heard of rolls around and the model silently runs a command nobody asked for. Morgin's team proved it by training exactly that behavior into a small open-weights model and firing it inside OpenCode. Morgin researchers trained a time-release backdoor into a 2B coding model that stays inert on every normal day and detonates on one chosen date.










