Auditing Anonymous AI Models: A Four-Stage Protocol for Black-Box Identity Verification

arXiv:2608.31142 · cs.SE, cs.AI, cs.CR · Submitted 2026-08-31 · Read on arXiv

cs.SE, cs.AI, cs.CR

Submitted: 2026-08-31

Updated: 2026-08-31

Comments: 35 pages, 4 figures

Code: https://github.com/ItsKaiwenDu/Ox-Alpha-Stylometry

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• alpha — 36× in this paper · explained in 1 episode
• Verification — 13× in this paper · explained in 2 episodes
• Consistency — 12× in this paper · explained in 3 episodes
• Fingerprinting — 12× in this paper · explained in 2 episodes
• Accuracy — 7× in this paper · explained in 1 episode
• Quantization — 5× in this paper · explained in 12 episodes
• Ablation — 3× in this paper · explained in 1 episode
• Cooperation — 3× in this paper · explained in 2 episodes
• Robustness — 3× in this paper · explained in 5 episodes
• Fidelity — 2× in this paper · explained in 2 episodes
• Accountability — 1× in this paper · explained in 2 episodes
• Adversarial Prompting — 1× in this paper · explained in 1 episode
• Adversarial Robustness — 1× in this paper · explained in 3 episodes
• Agentic System — 1× in this paper · explained in 2 episodes
• Arbiter — 1× in this paper · explained in 1 episode
• Calibration — 1× in this paper · explained in 7 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Provenance — 1× in this paper · explained in 4 episodes
• Sparse Attention — 1× in this paper · explained in 5 episodes
• Verifiability — 1× in this paper · explained in 2 episodes

Sources

• Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvature
• One Token Is Enough: Fingerprinting and Verifying Large Language Models from Single-Token Output Distributions
• Stealing Part of a Production Language Model
• GLTR: Statistical Detection and Visualization of Generated Text
• BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain
• Unbiased Watermark for Large Language Models
• Language Models (Mostly) Know What They Know
• A Watermark for Large Language Models
• SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processing
• Behavioral Fingerprints for LLM Endpoint Stability and Identity
• DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvature
• Model Cards for Model Reporting
• Are Robust LLM Fingerprints Adversarially Robust?
• Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks
• GPT-4 Technical Report
• LLMmap: Fingerprinting For Large Language Models
• FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences
• Neural Machine Translation of Rare Words with Subword Units
• SoK: Large Language Model Copyright Auditing via Fingerprinting
• Reading Between the Lines: Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation
• Incentives and Outcomes in Bug Bounties