Model Hosting and Benchmarking
Data lineage is the origin and history of the data used to train a model, and it has to be known before a model's use can be judged.
Why Performance Is Only Half the Question
When people evaluate a model, they usually ask whether it performs well. That question matters, but a second question matters just as much: where did the model's knowledge come from, and what rules govern that origin? The answer to the second question is called data lineage.
This article follows one line of reasoning. We start with the origin of training data, follow it through the licenses and terms attached to it, and then look at how evaluation has to account for what the model has absorbed. By the end, you should be able to look at a model and ask the questions that lineage makes necessary.
Tracing Where a Model's Knowledge Came From
Data lineage is the origin and history of the data used to train a model. It is the record of where the training data originated and how it has passed through the hands of different parties before reaching the model. It has to be known before a model's use can be judged.
Lineage is a history, not a single fact. A model is not simply trained on 'data.' Its training data can come from several places, and each place may have passed the data along through other parties. The lineage question is therefore a chain of questions: where did each input come from, and who set the rules for it at each handoff?
The source notes that models are likely trained on data scraped from the internet. It also describes a second kind of input: a model's training data can come from the outputs of another model. A model built this way does not stand alone. It sits at the end of a chain that began with the open web, with another model, or with both.
Read the diagram from left to right. Each input on the left arrives with its own history and its own conditions. The rules attached to upstream sources travel with the data, so they still matter after the data has been combined and used to train the model. This is why lineage must be traced rather than assumed.
The source also gives a public-interest argument for openness here. Because the public generated the content that models are trained on, some people argue that the public should have the right to access the training data. Whether or not you agree with that position, it shows why lineage is a subject of debate and not only a technical detail.
How Licenses and Source Terms Stack
A model can be governed by more than one set of rules at once. Its own license states what its owner allows. But the model may also be built from material whose owner set separate restrictions. A license that permits something does not automatically override a restriction placed upstream in the chain.
The source offers an analogy from software licensing. The Elastic License forbids companies from offering the open source version of Elastic as a hosted service, and from competing with the Elasticsearch platform. The restriction concerns how the software can be used commercially. A model's training data can carry similar restrictions, which is why a permission on one layer is not enough on its own.
A permissive license over restricted inputs
A model is released under a permissive license. Its training data included outputs from another model, and that other model's terms restrict using its outputs for training. Can the permissive license settle whether this model may be used as the license suggests?
- 1Identify the layers
There are two layers of rules: the model's own license, and the terms of the upstream source whose outputs were used for training.
- 2Check each layer separately
The permissive license states what the model's owner allows. The upstream terms state what the other model's owner restricts.
- 3Apply the chain rule
A license that permits something does not automatically override a restriction placed upstream in the chain. So the upstream restriction still applies.
- 4Draw the conclusion
The permissive license alone does not establish that the model may be used freely. The lineage has to be checked before the license can be trusted as the full answer.
The permissive license is one layer of the answer, not the whole answer. The upstream terms must be checked as well.
Checking What the Model Should Not Know
Lineage explains what a model may have absorbed. Model evaluation asks whether the model behaves correctly with that knowledge. One of the harder parts is knowledge boundaries. A model playing a role should respond the way the character would, and that includes not knowing things the character would not know.
The source uses a roleplaying example built around Jackie Chan. If Jackie Chan does not speak Vietnamese, then the roleplaying model should not speak Vietnamese either. Evaluating that model means deliberately testing for the boundary. You ask about the thing the character should not know and check whether the model reveals it.
What do you think happens?
A roleplaying model is playing Jackie Chan. Should it answer a question in Vietnamese, given that Jackie Chan does not speak Vietnamese?
Reveal answer
No. The roleplaying model should not speak Vietnamese either, because the character does not.
The check is about the character's boundary, not the model's general ability. The model is supposed to keep to what the role requires.
The source calls this the negative knowledge check: a test of whether a model reveals things it should not know. It matters a great deal for games. An NPC that accidentally reveals story spoilers to players breaks the experience. So the check is not only about accuracy in general. It is about whether the model keeps to the limits that its role requires.
The comparison shows the two sides of the evaluation. The should-know side checks that the model answers within its role. The should-not-know side is where the negative knowledge check applies: for each item the role must not know, the evaluator asks about it and verifies that the model does not reveal it.
Mistakes in Judging Safety and Permission
The reasoning patterns below come from the same logic the source uses. Each one tends to feel reasonable until the lineage is traced.
Common mistake Assuming an open license covers all of the training data
What it looks likeA model has an open license, so the team concludes that every input used in its training is also free to use.
Why it failsA model's own license does not override restrictions on its upstream training sources.
Do this insteadTrace each training input back to its source and check the terms attached to that source, separately from the model's license.
Common mistake Treating a permission on one layer as permission for the whole chain
What it looks likeThe model's license allows commercial hosting, so the hosting plan is approved without looking at upstream terms.
Why it failsA license that permits something does not automatically override a restriction placed upstream in the chain.
Do this insteadCheck every layer of rules, and treat the most restrictive applicable rule as a limit on use until it is reviewed.
Common mistake Judging a model only by how well it performs
What it looks likeA roleplaying model answers accurately on general questions, so it is approved for a game.
Why it failsGood general performance does not show that the model keeps to the knowledge limits its role requires.
Do this insteadAdd negative knowledge checks that ask about things the character should not know and confirm the model does not reveal them.
Common mistake Treating data lineage as a minor technical detail
What it looks likeThe team records the model's architecture carefully but never writes down where the training data came from.
Why it failsThe source states that lineage has to be known before a model's use can be judged, and that it is a subject of real debate.
Do this insteadRecord the origin and history of the training data as part of any review of whether the model may be used.
Common mistake Assuming a model is safe to use because no one has reported a problem yet
Running a Lineage Review
The source describes a lineage review as a fixed set of questions asked about each model before its evaluation results are trusted. The questions follow from the examples above, and you should work through them in order for any model you are asked to assess. Three threads run through them: the origin of the training data, the rules attached to each layer, and the knowledge boundaries the model must respect.
- 1Identify where each training input originated, including whether any input came from the outputs of another model.
- 2Find the model's own license and state what it allows.
- 3Find the terms attached to each upstream source and state what they restrict.
- 4Combine the layers: decide which permitted uses survive every applicable rule.
- 5Write down the knowledge the model should have and the knowledge it should not have for its intended role.
- 6Run negative knowledge checks on the should-not-know items before trusting the evaluation results.
A team wants to host a model for a game. The model's license is permissive, and its training data included scraped web content and the outputs of another model. The model will play a character who is a blacksmith in a fantasy village. The character knows about metalwork and the village, but does not know the plot twist that the game saves for the final chapter. Using the steps above, identify the three layers of rules you would check, and describe one negative knowledge check you would run before the evaluation results are trusted.
Hints
- Start with the lineage: which inputs came from which sources, and which of them came from another model?
- A permissive license is one layer. What other layers could restrict use, and does the license override them?
- A negative knowledge check asks about something the character should not know and verifies the model does not reveal it.
Putting the Pieces Together
- Data lineage is the origin and history of the data used to train a model, and it has to be known before a model's use can be judged.
- A model's own license does not override restrictions on its upstream training sources, so permissions on one layer are not enough on their own.
- Evaluation has to check what the model should and should not know, using negative knowledge checks that test whether it reveals things it should not.
- Common reasoning errors include assuming an open license covers all training data and judging safety by performance alone.
Key Takeaways
- Data lineage is the origin and history of the data used to train a model, and it has to be known before a model's use can be judged.
- A model's own license does not override restrictions on its upstream training sources, such as the terms of a model whose outputs were used for training.
- Negative knowledge checks test whether a model reveals things it should not know, which matters especially for game characters.
- Judging whether a model is safe or permitted to use requires tracing every layer of rules, not just reading the model's license.