Research questionHow can attackers evade black-box AIGC detectors using a frozen diffusion model without source images or detector-aware retraining?AIGC detectors must identify synthetic images even when generation can be adjusted to reduce detectable signals. This is difficult when the attacker can observe only detector responses and cannot alter the generator or rely on source images.