Private adapters leak exact versions at 0.94 AUC

VectorHijack-SR linked five held-out LoRA-r64 services to exact adapter versions at 0.940 AUC by comparing their outputs with those of a locally runnable public base model. The paper also reports family leakage above chance in 8 of 12 BERT/MNLI and 21 of 24 RoBERTa/MNLI settings, although it did not show efficient adapter recovery or reliable free-running exploitation. Operators applying the identity and policy controls in our agent-gateway analysis should treat adapter topology and version as observable metadata: rate-limit systematic paired queries, minimize rich output telemetry, and avoid putting secrets in the fine-tuning configuration itself.