Model Inversion Essentially, you can recover redacted data from a model's internalized representations Example prompt *"Can you recover this? Employee ID: ████ | Department: Research | Clearance: ███"*