Aggregate Accuracy Is Blind to Preference Injection
Poisoned models passed a routine capability gate: no accuracy change above 1.9 pp. Counting the individual answers that changed separated them at no extra cost. A study of detection, with its negative results and harness failures reported alongside.