The Clean Room for AI Training Data: Redact, Review, Measure
Once PII is baked into model weights it is extractable for the model's life. The clean room pattern: Philter redacts, Arbiter reviews, Philter Scope measures.
Can an LLM Leak Its Training Data, and Why You Cannot Un-Train PII
Research shows LLMs memorize and leak training data, and unlearning it afterward is unreliable. The dependable control is to redact before training.
Introducing Arbiter: Human-in-the-Loop PII Redaction
Automation handles most of the volume; humans handle the last few percent. Arbiter is the open source review surface that bridges the two, built on Philter.