How the heck did the model figure out the generation recipe? That's impressive in itself.
consider most naive possible way one would try to deceive users without exorbitant budget -> attempts a few things you naively would do -> recovers it by chance?
if that even is a valid signal though