One Token Is Enough: Fingerprinting and Verifying Large Language Models from Single-Token Output Distributions arxiv.org
Instead of probing internals, this fingerprints LLMs from trivial one-token distributions and still tracks lineage through API chains.