{"id":"46bbc540d3f914fe65f7a93081b46c087c15ccd4e06cd5fb92b775bcf9b2c069","title":"arXiv cs.AI: Fingerprinting LoRA Fine-Tunes from Model Artifacts","argument":"Shivesh Rane’s paper tests whether a fine-tune’s training-data domain can be identified from its model artifact, without access to the training data. The study uses one base model and 36 LoRA fine-tunes across 18 public datasets in five domains. A classifier identified the domain above the 20% chance level: 61% from gray-box activations and 64% from black-box outputs, compared with 42% from white-box weight statistics. Generated text alone also produced 64%, without token probabilities. This runs against the paper’s preregistered expectation that the signal would weaken from weights to activations to outputs. The authors report stable domain accuracy with an independently sampled third run per dataset, and unchanged black-box predictions across LoRA ranks from 8 to 64. The findings concern identifying a domain, not recovering the training data itself. Escape Meridian interpretation: information about a fine-tune’s data domain may be detectable even with limited access to the model, but the evidence here comes from one base model and the tested datasets. The paper releases code and per-run feature vectors.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The study uses one base model, Qwen3.5-0.8B, so the evidence does not establish whether the results hold for other base models. The tested fine-tunes cover 18 public datasets in five domains; the evidence does not establish performance on other datasets or domains. The reported results concern identifying a fine-tune’s domain, not recovering its training data.","speaker":{"name":"Rane, Shivesh","roleAtSource":"Article author"},"source":{"title":"Embedding-Space Fingerprinting of LoRA Fine-Tunes: Recovering the Training-Data Domain from the Model Artifact Alone","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.07610","publishedAt":"2026-11-05","dateBasis":"Date basis not provided."},"evidence":[{"text":"The paper tests domain identification from model artifacts without access to training data, using one base model and 36 LoRA fine-tunes across 18 public datasets in five domains.","excerpt":"whether a simple classifier can recover the domain of a fine-tune given only the model artifact (weight deltas, internal activations on a fixed probe set, or generated text) without ever observing the training data.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The paper reports domain-identification accuracy of 61% from gray-box activations, 64% from black-box outputs, and 42% from white-box weight statistics, against a 20% chance level.","excerpt":"The domain is recoverable well above chance (20%) from gray-box activations (61%) and black-box outputs (64%); white-box weight statistics reach 42%.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The paper reports that generated text alone produced 64% accuracy without token probabilities.","excerpt":"The black-box result holds unchanged (64%) when only generated text is used, without token probabilities.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The results run against the paper’s preregistered hypothesis that the signal would decrease from weights to activations to outputs.","excerpt":"Contrary to the pre-registered hypothesis that signal decays monotonically from weights to activations to outputs, activations and outputs were more informative than the weight-delta statistics.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The paper reports stable accuracy with an independently drawn data subsample and unchanged black-box predictions across LoRA ranks from 8 to 64.","excerpt":"Domain accuracy is also stable when a third run per dataset is trained on an independently drawn data subsample, and black-box predictions are unaffected by the LoRA rank (8-64).","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The results suggest that a fine-tune’s data domain may be detectable from limited model access; they do not establish that the training data itself can be recovered.","excerpt":"recover the domain of a fine-tune given only the model artifact","url":"https://arxiv.org/abs/2611.07610","relationship":"Escape Meridian interpretation"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.07610","checkedAt":"2026-11-09T04:48:07.627Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Would the reported domain-identification results hold with base models and datasets beyond those tested?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI: Fingerprinting LoRA Fine-Tunes from Model Artifacts","summary":"Shivesh Rane’s paper tests whether a fine-tune’s training-data domain can be identified from its model artifact, without access to the training data. The study uses one base model and 36 LoRA fine-tunes across 18 public datasets in five domains. A classifier identified the domain above the 20% chance level: 61% from gray-box activations and 64% from black-box outputs, compared with 42% from white-box weight statistics. Generated text alone also produced 64%, without token probabilities. This runs against the paper’s preregistered expectation that the signal would weaken from weights to activations to outputs. The authors report stable domain accuracy with an independently sampled third run per dataset, and unchanged black-box predictions across LoRA ranks from 8 to 64. The findings concern identifying a domain, not recovering the training data itself. Escape Meridian interpretation: information about a fine-tune’s data domain may be detectable even with limited access to the model, but the evidence here comes from one base model and the tested datasets. The paper releases code and per-run feature vectors.","question":"Would the reported domain-identification results hold with base models and datasets beyond those tested?","claims":[{"text":"The paper tests domain identification from model artifacts without access to training data, using one base model and 36 LoRA fine-tunes across 18 public datasets in five domains.","excerpt":"whether a simple classifier can recover the domain of a fine-tune given only the model artifact (weight deltas, internal activations on a fixed probe set, or generated text) without ever observing the training data.","support":"source-stated"},{"text":"The paper reports domain-identification accuracy of 61% from gray-box activations, 64% from black-box outputs, and 42% from white-box weight statistics, against a 20% chance level.","excerpt":"The domain is recoverable well above chance (20%) from gray-box activations (61%) and black-box outputs (64%); white-box weight statistics reach 42%.","support":"source-stated"},{"text":"The paper reports that generated text alone produced 64% accuracy without token probabilities.","excerpt":"The black-box result holds unchanged (64%) when only generated text is used, without token probabilities.","support":"source-stated"},{"text":"The results run against the paper’s preregistered hypothesis that the signal would decrease from weights to activations to outputs.","excerpt":"Contrary to the pre-registered hypothesis that signal decays monotonically from weights to activations to outputs, activations and outputs were more informative than the weight-delta statistics.","support":"source-stated"},{"text":"The paper reports stable accuracy with an independently drawn data subsample and unchanged black-box predictions across LoRA ranks from 8 to 64.","excerpt":"Domain accuracy is also stable when a third run per dataset is trained on an independently drawn data subsample, and black-box predictions are unaffected by the LoRA rank (8-64).","support":"source-stated"},{"text":"The results suggest that a fine-tune’s data domain may be detectable from limited model access; they do not establish that the training data itself can be recovered.","excerpt":"recover the domain of a fine-tune given only the model artifact","support":"interpretation"}],"limitations":["The study uses one base model, Qwen3.5-0.8B, so the evidence does not establish whether the results hold for other base models.","The tested fine-tunes cover 18 public datasets in five domains; the evidence does not establish performance on other datasets or domains.","The reported results concern identifying a fine-tune’s domain, not recovering its training data."],"mediaId":"2f23e6948f988b400faff2573a6420d077f02bdacb8127fa5b142a1e946baae0","correctionReason":null,"id":"46bbc540d3f914fe65f7a93081b46c087c15ccd4e06cd5fb92b775bcf9b2c069","publicationId":"a950d2ac-d976-487b-823f-e3650071ffcc","version":1,"sourceUrl":"https://arxiv.org/abs/2611.07610","sourceTitle":"Embedding-Space Fingerprinting of LoRA Fine-Tunes: Recovering the Training-Data Domain from the Model Artifact Alone","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-05","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-06T05:10:15.497Z","createdAt":"2026-11-09T04:17:36.803Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"2f23e6948f988b400faff2573a6420d077f02bdacb8127fa5b142a1e946baae0","kind":"article","url":"https://arxiv.org/abs/2611.07610","sourceUrl":"https://arxiv.org/abs/2611.07610","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T04:10:51.927Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.07610","checkedAt":"2026-11-09T04:48:07.627Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"2f23e6948f988b400faff2573a6420d077f02bdacb8127fa5b142a1e946baae0","confidence":0.87,"provider":"typesafe","model":"jev-1.13.0","inputHash":"8c0bf2489e2915ddac980866de7db26b1526a3ebd5e4e5070ae551c2393ff16e","decidedAt":"2026-11-09T04:10:53.039Z"},"provenance":{"textHash":"0b45a4c57f8cdb97e24bdd3e0fb09658f9521aa2b45de51ec0affe75f288091c","observationId":"9bc604413abada7f93ed2e5fbd0ac7825c875889cc26db089c06a8f2c9410c68","retrievedAt":"2026-11-09T04:10:51.755Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"ec759a8f-35cb-46f2-86d7-f9aedef31fb0"},"reviewer":{"model":"gpt-6-luna","runId":"46b9851d-3eda-4281-84a7-9a391e573685"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-09T04:17:36.803Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Rane, Shivesh","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Rane, Shivesh","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Rane, Shivesh","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.07610","locator":"head/meta[name=author|citation_author]"},"assertionId":"b42337e15f14554c3da44f7426c4cec22f691058141f1eddd43d12095fb2635c:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T04:48:07.627Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"b42337e15f14554c3da44f7426c4cec22f691058141f1eddd43d12095fb2635c","sourceUrl":"https://arxiv.org/abs/2611.07610","contentSha256":"89f83f15dbc2e915ed8844252d1b61601cc2269b5357ab70e29d3c932a5b0199","textHash":"0b45a4c57f8cdb97e24bdd3e0fb09658f9521aa2b45de51ec0affe75f288091c","observedAt":"2026-11-09T04:48:07.627Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.07610","snapshotId":"b42337e15f14554c3da44f7426c4cec22f691058141f1eddd43d12095fb2635c","contentSha256":"89f83f15dbc2e915ed8844252d1b61601cc2269b5357ab70e29d3c932a5b0199","textHash":"0b45a4c57f8cdb97e24bdd3e0fb09658f9521aa2b45de51ec0affe75f288091c","observedAt":"2026-11-09T04:48:07.627Z","basis":"publisher-page-metadata","sourceLinks":41,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/46bbc540d3f914fe65f7a93081b46c087c15ccd4e06cd5fb92b775bcf9b2c069/source"}},"canonicalUrl":"https://escapemeridian.com/readings/arxiv-cs-ai-fingerprinting-lora-fine-tunes-from-model-artifacts-46bbc540","formats":{"html":"/readings/arxiv-cs-ai-fingerprinting-lora-fine-tunes-from-model-artifacts-46bbc540","markdown":"/readings/arxiv-cs-ai-fingerprinting-lora-fine-tunes-from-model-artifacts-46bbc540.md","json":"/readings/arxiv-cs-ai-fingerprinting-lora-fine-tunes-from-model-artifacts-46bbc540.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-fine-tuning","name":"Fine-tuning","explanation":"Further training of an existing model to adapt it to a particular task or use.","referenceUrl":"https://developers.google.com/machine-learning/glossary#fine-tuning"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"46bbc540d3f914fe65f7a93081b46c087c15ccd4e06cd5fb92b775bcf9b2c069","revision":"a950d2ac-d976-487b-823f-e3650071ffcc","revisionKind":"publication-id","title":"arXiv cs.AI: Fingerprinting LoRA Fine-Tunes from Model Artifacts","url":"https://escapemeridian.com/readings/arxiv-cs-ai-fingerprinting-lora-fine-tunes-from-model-artifacts-46bbc540"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.07610","revision":"0b45a4c57f8cdb97e24bdd3e0fb09658f9521aa2b45de51ec0affe75f288091c","revisionKind":"sha256-source-text","title":"Embedding-Space Fingerprinting of LoRA Fine-Tunes: Recovering the Training-Data Domain from the Model Artifact Alone","url":"https://arxiv.org/abs/2611.07610"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"46bbc540d3f914fe65f7a93081b46c087c15ccd4e06cd5fb92b775bcf9b2c069","title":"arXiv cs.AI: Fingerprinting LoRA Fine-Tunes from Model Artifacts","argument":"Shivesh Rane’s paper tests whether a fine-tune’s training-data domain can be identified from its model artifact, without access to the training data. The study uses one base model and 36 LoRA fine-tunes across 18 public datasets in five domains. A classifier identified the domain above the 20% chance level: 61% from gray-box activations and 64% from black-box outputs, compared with 42% from white-box weight statistics. Generated text alone also produced 64%, without token probabilities. This runs against the paper’s preregistered expectation that the signal would weaken from weights to activations to outputs. The authors report stable domain accuracy with an independently sampled third run per dataset, and unchanged black-box predictions across LoRA ranks from 8 to 64. The findings concern identifying a domain, not recovering the training data itself. Escape Meridian interpretation: information about a fine-tune’s data domain may be detectable even with limited access to the model, but the evidence here comes from one base model and the tested datasets. The paper releases code and per-run feature vectors.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The study uses one base model, Qwen3.5-0.8B, so the evidence does not establish whether the results hold for other base models. The tested fine-tunes cover 18 public datasets in five domains; the evidence does not establish performance on other datasets or domains. The reported results concern identifying a fine-tune’s domain, not recovering its training data.","speaker":{"name":"Rane, Shivesh","roleAtSource":"Article author"},"source":{"title":"Embedding-Space Fingerprinting of LoRA Fine-Tunes: Recovering the Training-Data Domain from the Model Artifact Alone","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.07610","publishedAt":"2026-11-05","dateBasis":"Date basis not provided."},"evidence":[{"text":"The paper tests domain identification from model artifacts without access to training data, using one base model and 36 LoRA fine-tunes across 18 public datasets in five domains.","excerpt":"whether a simple classifier can recover the domain of a fine-tune given only the model artifact (weight deltas, internal activations on a fixed probe set, or generated text) without ever observing the training data.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The paper reports domain-identification accuracy of 61% from gray-box activations, 64% from black-box outputs, and 42% from white-box weight statistics, against a 20% chance level.","excerpt":"The domain is recoverable well above chance (20%) from gray-box activations (61%) and black-box outputs (64%); white-box weight statistics reach 42%.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The paper reports that generated text alone produced 64% accuracy without token probabilities.","excerpt":"The black-box result holds unchanged (64%) when only generated text is used, without token probabilities.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The results run against the paper’s preregistered hypothesis that the signal would decrease from weights to activations to outputs.","excerpt":"Contrary to the pre-registered hypothesis that signal decays monotonically from weights to activations to outputs, activations and outputs were more informative than the weight-delta statistics.","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The paper reports stable accuracy with an independently drawn data subsample and unchanged black-box predictions across LoRA ranks from 8 to 64.","excerpt":"Domain accuracy is also stable when a third run per dataset is trained on an independently drawn data subsample, and black-box predictions are unaffected by the LoRA rank (8-64).","url":"https://arxiv.org/abs/2611.07610","relationship":"Source-stated"},{"text":"The results suggest that a fine-tune’s data domain may be detectable from limited model access; they do not establish that the training data itself can be recovered.","excerpt":"recover the domain of a fine-tune given only the model artifact","url":"https://arxiv.org/abs/2611.07610","relationship":"Escape Meridian interpretation"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.07610","checkedAt":"2026-11-09T04:48:07.627Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Would the reported domain-identification results hold with base models and datasets beyond those tested?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI: Fingerprinting LoRA Fine-Tunes from Model Artifacts","summary":"Shivesh Rane’s paper tests whether a fine-tune’s training-data domain can be identified from its model artifact, without access to the training data. The study uses one base model and 36 LoRA fine-tunes across 18 public datasets in five domains. A classifier identified the domain above the 20% chance level: 61% from gray-box activations and 64% from black-box outputs, compared with 42% from white-box weight statistics. Generated text alone also produced 64%, without token probabilities. This runs against the paper’s preregistered expectation that the signal would weaken from weights to activations to outputs. The authors report stable domain accuracy with an independently sampled third run per dataset, and unchanged black-box predictions across LoRA ranks from 8 to 64. The findings concern identifying a domain, not recovering the training data itself. Escape Meridian interpretation: information about a fine-tune’s data domain may be detectable even with limited access to the model, but the evidence here comes from one base model and the tested datasets. The paper releases code and per-run feature vectors.","question":"Would the reported domain-identification results hold with base models and datasets beyond those tested?","claims":[{"text":"The paper tests domain identification from model artifacts without access to training data, using one base model and 36 LoRA fine-tunes across 18 public datasets in five domains.","excerpt":"whether a simple classifier can recover the domain of a fine-tune given only the model artifact (weight deltas, internal activations on a fixed probe set, or generated text) without ever observing the training data.","support":"source-stated"},{"text":"The paper reports domain-identification accuracy of 61% from gray-box activations, 64% from black-box outputs, and 42% from white-box weight statistics, against a 20% chance level.","excerpt":"The domain is recoverable well above chance (20%) from gray-box activations (61%) and black-box outputs (64%); white-box weight statistics reach 42%.","support":"source-stated"},{"text":"The paper reports that generated text alone produced 64% accuracy without token probabilities.","excerpt":"The black-box result holds unchanged (64%) when only generated text is used, without token probabilities.","support":"source-stated"},{"text":"The results run against the paper’s preregistered hypothesis that the signal would decrease from weights to activations to outputs.","excerpt":"Contrary to the pre-registered hypothesis that signal decays monotonically from weights to activations to outputs, activations and outputs were more informative than the weight-delta statistics.","support":"source-stated"},{"text":"The paper reports stable accuracy with an independently drawn data subsample and unchanged black-box predictions across LoRA ranks from 8 to 64.","excerpt":"Domain accuracy is also stable when a third run per dataset is trained on an independently drawn data subsample, and black-box predictions are unaffected by the LoRA rank (8-64).","support":"source-stated"},{"text":"The results suggest that a fine-tune’s data domain may be detectable from limited model access; they do not establish that the training data itself can be recovered.","excerpt":"recover the domain of a fine-tune given only the model artifact","support":"interpretation"}],"limitations":["The study uses one base model, Qwen3.5-0.8B, so the evidence does not establish whether the results hold for other base models.","The tested fine-tunes cover 18 public datasets in five domains; the evidence does not establish performance on other datasets or domains.","The reported results concern identifying a fine-tune’s domain, not recovering its training data."],"mediaId":"2f23e6948f988b400faff2573a6420d077f02bdacb8127fa5b142a1e946baae0","correctionReason":null,"id":"46bbc540d3f914fe65f7a93081b46c087c15ccd4e06cd5fb92b775bcf9b2c069","publicationId":"a950d2ac-d976-487b-823f-e3650071ffcc","version":1,"sourceUrl":"https://arxiv.org/abs/2611.07610","sourceTitle":"Embedding-Space Fingerprinting of LoRA Fine-Tunes: Recovering the Training-Data Domain from the Model Artifact Alone","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-05","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-06T05:10:15.497Z","createdAt":"2026-11-09T04:17:36.803Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"2f23e6948f988b400faff2573a6420d077f02bdacb8127fa5b142a1e946baae0","kind":"article","url":"https://arxiv.org/abs/2611.07610","sourceUrl":"https://arxiv.org/abs/2611.07610","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T04:10:51.927Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.07610","checkedAt":"2026-11-09T04:48:07.627Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"2f23e6948f988b400faff2573a6420d077f02bdacb8127fa5b142a1e946baae0","confidence":0.87,"provider":"typesafe","model":"jev-1.13.0","inputHash":"8c0bf2489e2915ddac980866de7db26b1526a3ebd5e4e5070ae551c2393ff16e","decidedAt":"2026-11-09T04:10:53.039Z"},"provenance":{"textHash":"0b45a4c57f8cdb97e24bdd3e0fb09658f9521aa2b45de51ec0affe75f288091c","observationId":"9bc604413abada7f93ed2e5fbd0ac7825c875889cc26db089c06a8f2c9410c68","retrievedAt":"2026-11-09T04:10:51.755Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"ec759a8f-35cb-46f2-86d7-f9aedef31fb0"},"reviewer":{"model":"gpt-6-luna","runId":"46b9851d-3eda-4281-84a7-9a391e573685"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-09T04:17:36.803Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Rane, Shivesh","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Rane, Shivesh","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Rane, Shivesh","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.07610","locator":"head/meta[name=author|citation_author]"},"assertionId":"b42337e15f14554c3da44f7426c4cec22f691058141f1eddd43d12095fb2635c:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T04:48:07.627Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"b42337e15f14554c3da44f7426c4cec22f691058141f1eddd43d12095fb2635c","sourceUrl":"https://arxiv.org/abs/2611.07610","contentSha256":"89f83f15dbc2e915ed8844252d1b61601cc2269b5357ab70e29d3c932a5b0199","textHash":"0b45a4c57f8cdb97e24bdd3e0fb09658f9521aa2b45de51ec0affe75f288091c","observedAt":"2026-11-09T04:48:07.627Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.07610","snapshotId":"b42337e15f14554c3da44f7426c4cec22f691058141f1eddd43d12095fb2635c","contentSha256":"89f83f15dbc2e915ed8844252d1b61601cc2269b5357ab70e29d3c932a5b0199","textHash":"0b45a4c57f8cdb97e24bdd3e0fb09658f9521aa2b45de51ec0affe75f288091c","observedAt":"2026-11-09T04:48:07.627Z","basis":"publisher-page-metadata","sourceLinks":41,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/46bbc540d3f914fe65f7a93081b46c087c15ccd4e06cd5fb92b775bcf9b2c069/source"}}}],"audits":[{"publicationId":"a950d2ac-d976-487b-823f-e3650071ffcc","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The paper is correctly attributed to Shivesh Rane on arXiv cs.AI, and its results are framed as the paper's reports. The phrase 'The authors report' is slightly off because the listing names a single author, but this does not change who makes the claims. Smallest repair: 'The paper reports'.","excerpt":"Authors:Shivesh Rane"},{"dimension":"summary","status":"uncertain","explanation":"The numbers are accurate, but two gaps limit understanding. First, the reading omits the leave-one-dataset-out condition: each domain was identified for fine-tunes trained on datasets the classifier had never seen, which is central to the result's meaning. Second, a non-specialist is not told what white-box, gray-box and black-box mean here: weights, internal activations on a fixed probe set, and generated outputs, ordered by decreasing access. LoRA also lacks a plain explanation or tooltip. Smallest repair: add the unseen-dataset condition and a brief gloss of the three access levels.","excerpt":"tests whether the domain of a fine-tune trained on a previously unseen dataset can be identified"},{"dimension":"date","status":"pass","explanation":"The displayed original publication date of 2026-11-05 matches the v1 submission date on arXiv. It is not the later feed date.","excerpt":"[Submitted on 5 Nov 2026]"},{"dimension":"support","status":"pass","explanation":"All factual claims match the abstract: 36 fine-tunes, 18 datasets, five domains, and accuracies of 61%, 64% and 42% against 20% chance. The reading also correctly reports the text-only 64% result, the contradicted pre-registered hypothesis, and the subsample and LoRA-rank stability checks. The Escape Meridian interpretation is labeled, hedged and limited to domain identification rather than data recovery. The stated limitations are grounded in the source.","excerpt":"The domain is recoverable well above chance (20%) from gray-box activations (61%) and black-box outputs (64%); white-box weight statistics reach 42%."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct link to the arXiv abstract page, which is the original source.","excerpt":null}],"createdAt":"2026-11-09T04:17:36.803Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}