One last result (indebted to brilliant work by
Theia Vogel-Pearson):
Models are more sensitive to injection than their outputs reveal.
Even when they *say “no”*, the internal probability of “yes” spikes dramatically.
So models may detect anomalies but suppress reporting them.
