Encrypted capability backdoors WATCH
The paper proves a worst-case blind spot in elicitation-based audits, but its small synthetic construction does not show that deployed models are affected.
Next stepWait for independent reproduction at larger scale, and retain provenance checks, static anomaly detection and runtime monitoring when accepting external weights.