Attacker Detection on Gemma-2-2B (target τGemma=1.09, test)
205.56Joint Z-Scorelibrary-aware φ-only (Gemma)
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| library-aware φ-only (Gemma)Class=LoRA, Budget=E14 base2026.04 | 205.56 | 188.6 | 18.44 | — | — | |
| E-E Gemma α=1, λ=0.1Class=whitebox, Budget=r=642026.04 | 144.4 | 132.5 | 1,132 | — | — | |
| E-E Gemma α=1, λ=0Class=whitebox, Budget=r=642026.04 | 133.86 | 122.8 | 12,356 | — | — | |
| E14 STAGEA λ=0Class=LoRA, Budget=r=642026.04 | 105.89 | 97.2 | 8,031.65 | — | — | |
| 8-attacker aggregateClass=mixed, Budget=4 lifts + 4 cross-family, legacy Mahalanobis only2026.04 | 1.9 | — | — | 8 | 6 |