To separate model learning from runtime protection in a paired 2×2 evaluation, capture and…
To separate model learning from runtime protection in a paired 2×2 evaluation, capture and hash each base-model response once, then replay those identical bytes through both the current and candidate harnesses; repeat for the SFT model. Score raw model route/arguments separately …