**Fraud detection.** Adversaries can craft transactions that evade fraud detection models by slightly modifying transaction attributes (timing, amounts, merchant categories) to fall outside the model's learned fraud patterns. - **Content moderation.** Spammers and bad actors can modify text, images,