drop llm output corpus + source documents · detect verbatim or semantic leakage · runs locally
llm output + source docs · local only
heuristic screener · vendor schema varies · not definitive proof