but even assuming you get complete access, recovering this is, by construction, even more of an np-hard problem than the inference pass itself