safetyfactneutralA greedy scan algorithm can compute exact finite-sample worst-case movement for data-poisoning attacks at every append budgetMachine Learning (Statistics)28 Jul 2026http://arxiv.org/abs/2607.19689v1