Comment by sega_sai

I think a much more interesting question is: If your LLM hides some sort of message/identifier, and you don't know the encoding, what is the conversion process that you should do that would erase that information. Presumably small perturbations of positions and colours erase a lot of it, but maybe there are encodings that are robust to that...