Part of setting up these sleeper agents will likely be identifying parts of the input space that seem natural but are sparse enough in training data to make thi

Part of setting up these sleeper agents will likely be identifying parts of the input space that seem natural but are sparse enough in training data to make this attack possible.