ML intellectual property

Caliber scales its extraction noise by each model's median top-two logit margin

An arXiv defense adds Gaussian noise to a served model's logits and solves for the scale that hits a chosen accuracy target, and it bounds how many repeated queries an attacker needs to average that noise away.