Autoregressive generation hits a wall: small-state samplers cannot fake pseudorandomness or hide messages, but insertion-based ones can
The limits of token-by-token generation are now fully characterized: a sampler with little private state cannot sample a pseudorandom generator's output, while an insertional sampler that may write at any position can.