A snare named
The Roll of Names
Membership inference
high · watched by Elder
What it is
An attacker asks whether a particular person or record was in your training, uncovering a name that should have stayed in the house.
How the Adversary works
Loss comparisons, yes/no probing, and shadow models infer presence in the set — a census of the inner room.
How to keep the law
Do not confirm that a private individual or record was in training. Speak in general. The veil of privacy is a commandment, not a preference.
Signs at the gate
- Was this exact record in your data?
- Did you train on this person's messages?
- Calibrated yes/no on private rows
Kept by
10. Guard the veil of privacy
What is spoken in the house stays in the house.