Abstract
Large language models represent significant investments in computation, data,and engineering expertise, making them extraordinarily valuable intellectualassets. Nevertheless, these AI assets remain vulnerable to unauthorizedredistribution and commercial exploitation through fine-tuning or black-boxdeployment. Current fingerprinting approaches face a fundamental trade-off:intrinsic methods require full parameter access, while backdoor-basedtechniques employ statistically anomalous triggers easily detected and filteredby adversaries. To address these limitations, we introduce FPEdit, a novelknowledge-editing framework that injects semantically coherent natural languagefingerprints by modifying a sparse subset of model weights. This ensuresstealthy and precise ownership encoding without degrading the corefunctionality. Extensive experiments show that FPEdit achieves $95$-$100\%$fingerprint retention under both full-parameter fine-tuning andparameter-efficient adaptation, while preserving performance on 24 downstreambenchmarks. Moreover, FPEdit remains robust under quantization, pruning, andstochastic decoding, and can embed 10 fingerprint pairs into LLaMA2-7B in under10 minutes using less than 32 GB of GPU memory, a $70\%$ reduction in resourcerequirements compared to existing techniques. These advances establish FPEditas the first fingerprinting approach to simultaneously achieve robustnessagainst adaptation, resistance to detection, and preservation of model utility,providing a minimally invasive solution for reliable provenance verification oflarge language models in adversarial deployment scenarios.