Token-Efficient Change Detection in LLM APIs
Not on the map. Why?
Abstract (arXiv)
Remote change detection in LLMs is a difficult problem. Existing methods are either too expensive for deployment at scale, or require initial white-box access to model weights or grey-box access to log probabilities. We aim to achieve both low cost and strict black-box operation, observing only output tokens. Our approach hinges on specific inputs we call Border Inputs, for which there exists more than one output top token. From a statistical perspective, optimal change detection depends on the model's Jacobian and the Fisher information of the output distribution. Analyzing these quantities in low-temperature regimes shows that border inputs enable powerful change detection tests. Building on this insight, we propose the Black-Box Border Input Tracking (B3IT) scheme. Extensive in-vivo and in-vitro experiments show that border inputs are easily found for non-reasoning tested endpoints, and achieve performance on par with the best available grey-box approaches. B3IT reduces costs by 30× compared to existing methods, while operating in a strict black-box setting.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 18 of its 39 references that are in the map. First posted on arXiv 11 Feb 2026.
Builds on
18 of 39 references.
References · 18
- 2023How is ChatGPT's behavior changing over time?cited by 265
- 2023Towards an Understanding of Large Language Models in Software Engineering Taskscited by 67
- 2016Discrete Distribution Estimation under Local Privacycited by 58
- 2024LLMmap: Fingerprinting For Large Language Modelscited by 56
- 2024Model Equality Testing: Which Model Is This API Serving?cited by 44
- 2025Are You Getting What You Pay For? Auditing Model Substitution in LLM APIscited by 35
- 2024TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identificationcited by 33
- 2017Differentially Private Testing of Identity and Closeness of Discrete Distributionscited by 25
- 2021Did the Model Change? Efficiently Assessing Machine Learning API Shiftscited by 13
- 2017Hypothesis Testing For Densities and High-Dimensional Multinomials: Sharp Local Minimax Ratescited by 11
- 2020Locally private non-asymptotic testing of discrete distributions is faster using interactive mechanismscited by 11
- 2025Log Probability Tracking of LLM APIscited by 8
6 more
- 2019Estimating Entropy of Distributions in Constant Spacecited by 7
- 2024Hardware and Software Platform Inferencecited by 6
- 2024Optimal Algorithms for Augmented Testing of Discrete Distributionscited by 2
- 2018Multinomial Goodness-of-Fit Based on U-Statistics: High-Dimensional Asymptotic and Minimax Optimalitycited by 1
- 2023Testing High-dimensional Multinomials with Applications to Text Analysiscited by 1
- 2025Estimation of discrete distributions with high probability under chi2-divergencecited by 1
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Behavioral Fingerprints for LLM Endpoint Stability and Identitycited by 4
- 2026KBF: Knowledge Boundary as Fingerprint for Language Model and Black-Box API Auditingcited by 3
- 2026Ventor-QTest: Threat-Model-Driven Verification of Vendor-Hosted LLM APIscited by 0
- 2026Strategic Self-Consistencycited by 0
- 2026Strategic Self-Consistency24 Sep 2026
- 2026Ventor-QTest: Threat-Model-Driven Verification of Vendor-Hosted LLM APIs17 Aug 2026
- 2026KBF: Knowledge Boundary as Fingerprint for Language Model and Black-Box API Auditing28 May 2026
- 2026Behavioral Fingerprints for LLM Endpoint Stability and Identity19 Mar 2026