Embedding-Space Fingerprinting of LoRA Fine-Tunes: Recovering the Training-Data Domain from the Model Artifact Alone
arXiv:2611.07610v1 Announce Type: new Abstract: When a base language model is fine-tuned with Low-Rank Adaptation (LoRA), how much of the training data domain leaks into the resulting artifact? This paper studies whether a simple classifier can recover the domain of a fine-tune given only the model artifact (weight deltas, internal activations on a fixed probe set, or generated text) without ever observing the training data. Using one base model (Qwen3.5-0.8B), 36 LoRA fine-tunes are produced ov
Read original source
Source record
Research analysis
Research claim
Paper identifier: 2611.07610. Source account: arXiv:2611.07610v1 Announce Type: new Abstract: When a base language model is fine-tuned with Low-Rank Adaptation (LoRA), how much of the training data domain leaks into the resulting artifact? This paper studies whether a simple classifier can recover the domain of a fine-tune given only the model artifact (weight deltas, internal activations on a fixed probe set, or generated text) without ever observing the training data. Using one base model (Qwen3.5-0.8B), 36 LoRA fine-tunes are produced ov
Evaluation record
Recent records to compare: “Memorilla: Latent Semantic Memory for LLMs” (Hacker News, Nov 6, 2026); “Show HN: Ru-Jev – an open model that scores caller-supplied options on CPU (MIT)” (Show HN, Nov 6, 2026). Shared themes are navigation hints; they have not been verified as the same need or independent corroboration.
What the result supports
Interpret results only for the reported model version, task, data and inference budget. Community votes, downloads or a benchmark position do not establish reliability in a different workflow.
Validity gaps
Check sample selection, baseline configuration, uncertainty, contamination risk, negative results and access to code or weights. No reproduction by WeWorkBuddy is recorded here.
Verification plan
Read the paper or model card and its evaluation appendix. Reproduce one bounded result against the stated baseline, then test a representative user task and record where the conclusion fails.