Anytime-valid detection of LLM weight exfiltration
The e-process is a prompt-level detection mechanism that calibrates whole-response mismatch events against trusted benign traffic. It sequentially accumulates evidence under calibration transfer assumptions to detect LLM weight exfiltration anytime, offering explicit false-alarm control and rapid detection on resampled seed-blind streams.