Hitting a Moving Target: Test-Time Adaptation for AI Text Detection under Continual Distribution Shift
cs.CL, cs.AI
Submitted: 2026-06-23
Updated: 2026-10-14
Comments: NeurIPS 2026. We release our code at: https://github.com/kkr36/llm_detection
Code: https://github.com/kkr36/llm_detection
License: http://creativecommons.org/licenses/by/4.0/
The gist: Deployed AI text detection approaches are supervised, relying on training-time access to labeled datasets of both human-written and AI-generated text.
Terminology
Abstract
Deployed AI text detection approaches are supervised, relying on training-time access to labeled datasets of both human-written and AI-generated text. This approach is vulnerable to three types of distribution shifts that occur continually post-deployment, and for which labeled data is often unavailable: adversarial humanization, new LLMs being released, and unidentifiable temporal drift in human writing after widespread LLM usage. Simultaneously, existing approaches do not leverage a key signal of LLM usage: inference-time homogeneity. We propose a test-time adaptation (TTA) approach that adapts to distribution shifts by leveraging homogeneity among unlabeled samples observed at inference time. Empirically, we find that state-of-the-art supervised detectors systematically fail when they encounter distribution shifts in AI-generated and human writing, both adversarial and natural, while TTA with semi-supervised learning is largely robust; e.g., the commercial model Pangram detects just 27.0% of our adversarial AI-generated text, compared to 93.3% for our test-time approach. We establish that TTA is a promising framework for AI text detection in the wild.
Sources
- gpt-oss-120b & gpt-oss-20b Model Card
- Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvature
- ConDA: Contrastive Domain Adaptation for AI-generated Text Detection
- Readers Prefer Outputs of AI Trained on Copyrighted Books over Expert Human Writers
- AI-Slop to AI-Polish? Aligning Language Models through Edit-Based Writing Rewards and Test-time Computation
- Introducing AI to an Online Petition Platform Changed Outputs but not Outcomes
- When Detection Fails: The Power of Fine-Tuned Models to Generate Human-Like Social Media Text
- LLM-Generated or Human-Written? Comparing Review and Non-Review Papers on ArXiv
- Technical Report on the Pangram AI-Generated Text Classifier
- Unsupervised and Distributional Detection of Machine-Generated Text
- GLTR: Statistical Detection and Visualization of Generated Text
- The Llama 3 Herd of Models
- Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Text
- DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learning
- The Subjectivity of Monoculture
- DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelines
- A Survey of AI-generated Text Forensic Systems: Detection, Attribution, and Characterization
- Is Contrasting All You Need? Contrastive Learning for the Detection and Attribution of AI-generated Text
- Who's Your Judge? On the Detectability of LLM-Generated Judgments
- Mapping the Increasing Use of LLMs in Scientific Papers
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering