Shivesh Rane

Embedding-Space Fingerprinting of LoRA Fine-Tunes: Recovering the Training-Data Domain from the Model Artifact Alone

The domain of a fine-tune trained on a previously unseen dataset is recoverable well above chance from gray-box activations and black-box outputs, and activations and outputs were more informative than the weight-delta statistics.