Wow, I think those are great research questions. I’m not aware of any work specifically on this topic, but this paper might be relevant (though, in my opinion, detecting training on other LLM outputs is more challenging):