Catching Compromise Before It Acts

External monitoring sees normal outputs. SVD sees the weights have changed. A subtle backdoor was injected — the model behaves normally on standard inputs but produces attacker-controlled outputs on trigger inputs. Traditional testing misses this. SVD fingerprinting catches it because the underlying weight structure has shifted.