Can’t you put the hardcoded AI machinery in a TEE without the key and then it just simply cannot rewrite its own code? I guess you could ask it to crack that code, but any commands written from the AI to rewrite code could be ignored in the source code