Third-party AI assessment needs enforceable contracts for independence, access, and disclosure, not a credibility label.
Evaluate AI model distillation defenses with three ledgers: capability leakage, legitimate-user friction, and false-positive harm.