But evasion isn't absolute. 🪤 On a single document, our attack evades detectors. But as you aggregate multiple documents, the human and machine distributions pull apart again.