arXiv cs.CR·9d agoServeGuard: Verifiable, Bounded-Residual Confinement of Operator-Invisible Channels Without Revealing the Certified Read Factor#llm#adapters#backdoorAI safety & security