# Training-Data Reconstruction

With architecture and data held fixed, a checkpoint-only reconstruction attack recovers training images best from Muon-trained models and worst from Adam-trained models, making the optimizer choice a control axis for training-data privacy.

With architecture and data held fixed, a checkpoint-only reconstruction attack recovers training images best from Muon-trained models and worst from Adam-trained models, making the optimizer choice a control axis for training-data privacy.