Privacy Failure in Split-LLM Training, The Returned Gradient Nullifies the Decoys

Georgios Politis, Evangelos Pappas

We present a systems-security case study of a two-node split-LLM training system whose privacy evaluation passed while leaving an observable channel untested. The Trusted Local Nod…