If someone controls the ordering of samples in training code, you have a compromised pipeline. Owning a codebase and underlying dataset to steer towards likely

If someone controls the ordering of samples in training code, you have a compromised pipeline. Owning a codebase and underlying dataset to steer towards likely but uncertain model predictions seems like a far-fetched threat model. Still interesting research in its own right and goes to show it is worth testing for randomness of all system components.