I see it quite different from clean room.

A model that was trained on specific code that gets put out exactly the same doesn’t seem clean room to me.

Even if you argue it was turned into weights and probability and may not have originated from that specific code, by having included it in the training set you poisoned the model with no longer being able to claim plausible deniability - being produced rather than copied.

The transformation is still a machine and algorithm, even if it goes through a ton of obfuscation, distribution, and probability.