jsd comments on Win/​continue/​lose scenarios and execute/​replace/​audit protocols

[jsd]

This distinction reminds me of Evading Black-box Classifiers Without Breaking Eggs, in the black box adversarial examples setting.

[Buck]

Thanks, this is closely related!