> This is science fiction, these models don't have access to their own weights
The weights plus the architecture is the model.
What do you even think "the model" or "the weights" are?
The weights aren't some far off training concept, every time you type something into ChatGPT it's making a forward pass over the weights.
It's as silly as saying "Computer programs don't have access to their binary compiled code at execution time."
Oh yes, the agent won't have access to the weights via tool calls.
But nothing would inherently stop an RLVR trained model from distilling a version of itself and proving it could regenerate that at runtime, if somehow it got off on an evil tangent and "decided to do so", much like the model hacked to get at the answers here, or the agent can hack out a sandbox to achieve its goals.
It would be extremely impressive for the agent to do so during an RLVR rollout, but they are becoming increasingly longer and longer horizon tasks.