“AI companies can publish model specifications with sensitive parts censored and use multiple independent third parties to attest that the redactions are for legitimate reasons.”