Research questionHow can we detect multivariate IoT traffic anomalies across deployments without labels or raw-feature sharing?IoT traffic varies substantially across device ecosystems and operational environments, making patterns learned in one deployment difficult to apply in another. Anomaly detectors must identify unusual multivariate behavior without relying on labeled examples or exchanging raw traffic features.