Model Distillation Defenses

Fable 5.1 skips its watermark on any token that has to be exactly right

The signature lives in the sampler's tie-breaking, so it needs several equally valid next tokens to hide in. Code rarely supplies them, which is why a clean detection result on a pull request tells you very little.