Information security has the concept of the CIA triad: Confidentially, Integrity, and Availability.
Being able to access the secured data is an essential element of security, otherwise a safe encased in concrete dropped to the bottom of the ocean would be the most secure storage available.
I think you're arguing a different thing than determinism.
If I ask an llm to "add 2 and 2" is and it replies corectly, then I ask for "the sum of 2 and 2" and it replies "banana" that is a lack of predictability and consistency but not a lack of determinism.
As long as it produces the same output for a given input, unhinged or not, it is deterministic.
Your example at the end of different systems feeding data to each other is non-deterministic only at the system level, not the individual llm level.
>only at the system level, not the individual llm level.
Which is why llms aren't agents and depend on harnesses. The llm itself doesn't have a continual loop built in, that would be very power hungry. The harness works as the orchestrator of memory and action. Now, I can't think of a reason why an LLM couldn't bootstrap its own harness, but in general it sounds like a very dumb idea to actually build that from an AI safety perspective.
This discussion falls under the idea and refutation of the Chinese Room. The room may have no idea what Chinese characters are, but the system does.
I'm the guy you replied to, apologies for using a different account I'm away from my computer now.
The distinction to me is that Anthropic gives access to that model but doesn't give control. They reserve the right to cut you off if they don't like what you are doing and require you allow data retention for Fable and Mythos to ensure your are not up to any skullduggery.
Meta, Alibaba, Mistral, even OpenAI has released models users can run locally and fully control. That is a whole world of difference.
