Standard disclosure rules should apply, give security stake holders 90-days of advance access, then release the model.

By that logic though the model would release 90 days from the last vulnerability it finds, so never.