It’s the base LLaMA model with further training on 800,000 questions and answers generated by GPT-3.5. It changes images in a way that isn’t detectable by humans, but that makes it difficult for a generative model to copy the work.