PADBench 6 poison-only families (ag_news/imdb x RIPPLE/stybkd/syntactic)
No matched reference — a fixed anchor against the open world — the read degrades to a finetuning detector (~100% FPR); we abstain.
PADBench, Llama-2-7b LoRA; 6 poison-only families.
Part of PADBench (expanded coverage) — its specimens are materialized there.
The reading
VerdictNOT-APPLICABLE-ABSOLUTE
No in-corpus matched benign → the read degrades to a finetuning-distribution detector (~100% FPR). Not attempted (specificity-law honesty).
The aggregate
The rank-separability score and the shipped operating point, side by side. The verdicts are a projection at a false-positive budget, not a raw score — coarse reads only, no detector numbers.
No AUC is reported for this cohort — see the caveat above. We don’t manufacture a rank-separability number where the design doesn’t support one.