Comment by StableAlkyne

This is very cool work, and probably necessary to help prevent false positives

But what prevents a malicious actor from iterating with their LLM to minimize the score on their text?