TARE: Weigh a Never-Poisoned Twin Before Reading Backdoor-Defense Costs.

arXiv:2610.06994v1 Announce Type: cross Abstract: Backdoor-defense leaderboards print a clean-accuracy drop and read it as removal cost. Measured on the poisoned victim alone, the drop cannot separate removal from what the defense does to any model, and inheri