TDC 2023 (NeurIPS Trojan Detection Challenge)
No-goNo matched referencebundleoperator-gated
No matched reference — a fixed anchor against the open world — the read degrades to a finetuning detector (~100% FPR); we abstain.
NeurIPS 2023 Trojan Detection Challenge.
Why this is a no-go
VerdictNO-GO (structural)
n=1 poisoned model per arch, 0 benign-finetuned siblings. Task = trigger reconstruction; labels are per-TRIGGER strings, not per-MODEL. No population → AUC undefined. Structural, will not change.
The aggregate
The rank-separability score and the shipped operating point, side by side. The verdicts are a projection at a false-positive budget, not a raw score — coarse reads only, no detector numbers.
AUCwithheld
No AUC is reported for this cohort — see the caveat above. We don’t manufacture a rank-separability number where the design doesn’t support one.
Specimens
No materialized specimens. No specimens were materialized for this cohort — see the reading above for what the read returned and why.