I don't know if inspection would be practical. How do you inspect the weights for an intentionally hidden trigger that writes malware?