CDD recovers finetuning data from logits alone

CDD extracts verbatim text from narrowly fine-tuned LLMs using only black-box logit access, without weights or activations. The method builds on prior work showing fine-tuning leaves readable traces in activation differences.