cs.LGJun 17, 2026

What Your Model Threw Away and Why You'll Want It Back: Masking, Fingerprinting, and Privacy from Discarded Geometry

Authors: Zachary P. Bradshaw

Organizations: QodeX Quantum, Inc. Chicago, IL

Abstract

We develop a framework for the information discarded by machine learning models whose inputs carry a Lie group action. Given a representation ππ of a Lie group GG on a space VV and a learned function f ⁣:VRf\colon V \to \mathbb{R}, we define two objects measuring the symmetry invisible to ff. The null fiber at a point xVx \in V is the set NG(f,x)={gG:f(π(g1)x)=f(x)}N_G(f,x) = \{g \in G : f(π(g^{-1}) \cdot x) = f(x)\} of group elements whose inverse action on xx is undetectable by ff. When NG(f,x)N_G(f,x) is independent of xx, it coincides with the stabilizer StabG(f)\mathrm{Stab}_G(f), the largest subgroup of GG under which ff is invariant. For smooth maps to R\mathbb{R}, the preimage theorem guarantees that null fibers have dimension at least dimG1\dim G - 1 at generic inputs, regardless of architecture. For compact groups acting on themselves, the Peter--Weyl theorem yields a spectral characterization of both objects in terms of the Fourier coefficient matrices of ff. We show that null fiber elements can be computed efficiently via Newton iteration on the orbit map, at a cost comparable to a few gradient evaluations. Applications to data masking, model fingerprinting, and privacy-preserving computation are developed and tested experimentally on molecular property prediction under SO(3)\mathrm{SO}(3) and spherical image classification under the Möbius group PSL(2,C)\mathrm{PSL}(2, \mathbb{C}). The framework applies uniformly to classical neural networks and variational quantum circuits.

Explore similar work

CardsList