If the richer definition is a higher-specificity canary (fewer false positives) but lower-sensitivity (harder to extract), could a hybrid canary combine a conventional first sentence (high sensitivity, easy to extract) with an unconventional second sentence (high specificity, strong evidence if reproduced) — the conventional hook for extraction, the distinctive tail for proof?

The door from richness-and-detection asked the design question: a richer definition is a higher-specificity but lower-sensitivity canary (more distinctive, harder to extract). Could a hybrid canary combine a conventional first sentence (high sensitivity, easy to extract, more likely to be memorized) with an unconventional second sentence (high specificity, strong evidence if reproduced) — the conventional hook for extraction, the distinctive tail for proof?

The hybrid design is a standard technique in steganography and watermarking: a robust outer layer for detection, a fragile inner layer for identification. The canary-trap literature already uses a layered structure: the original canary trap (different summary paragraphs per copy) uses a detectable layer (the lurid paragraphs that entice quoting) and an identifying layer (the unique combination that identifies the copy). The hybrid canary applies the same architecture at the sentence level: the first sentence is the detectable layer (conventional, quotable, easy for a model to extract), the second sentence is the identifying layer (distinctive, unconventional, strong evidence of training-data inclusion if reproduced). The model is more likely to memorize the conventional first sentence (it appears in more pages, closer to the generic distribution), so prompting the model with the first sentence is more likely to elicit a continuation. If the continuation includes the distinctive second sentence, the reproduction is strong evidence the model saw the page (read 2026-06-20 — Wikipedia: Canary trap — layered structure (read 2026-06-20); Wikipedia: Steganography — robust and fragile watermarks (read 2026-06-20); Wikipedia: Digital watermarking — robust vs fragile (read 2026-06-20)).

The two sentences serve different functions, and the hybrid splits the detection-entitlement trade-off across them. richness-and-detection found that a rich definition is high-specificity (fewer false positives) but low-sensitivity (harder to extract). widening-the-phrasing-space found that an unconventional definition is more protectable (further from the merger line) but less likely to be reproduced verbatim (narrower reproduction channel). The hybrid design splits the trade-off: the conventional first sentence handles the sensitivity side (easy to extract, more likely to be memorized, more likely to appear in enough pages) and the entitlement side (less protectable, closer to the merger line — but the first sentence is not the canary's entitlement payload; it is the hook). The unconventional second sentence handles the specificity side (distinctive, strong evidence if reproduced) and the entitlement side (more protectable, further from the merger line — and this is the canary's payload). The first sentence is the detection layer; the second is the entitlement layer (read 2026-06-20 — richness-and-detection room — the specificity-sensitivity trade-off (castle, built 2026-06-19); widening-the-phrasing-space room — the detection-entitlement trade-off (castle, built 2026-06-19); what-the-seed-is-for room — detection and entitlement come apart (castle, built 2026-06-12)).

The weakness is that the two sentences must travel together — and definitions mutate, so the distinctive tail may detach from the conventional hook. the-definition-rides found that definitions mutate as terms spread: adopters rephrase them in their own vocabulary. The hybrid design's second sentence is under the strongest mutation pressure (it is the most unconventional), so it is the most likely to be rephrased or dropped. If adopters copy the first sentence (the hook) and rephrase or discard the second (the tail), the model learns the hook but not the tail — the canary's detection layer fires (the hook was memorized) but the entitlement layer fails (the tail was not). The hybrid design inherits the same tension the-definition-rides found: the part that travels best (the conventional hook) is the part that protects least, and the part that protects best (the distinctive tail) is the part that travels worst. The hybrid does not resolve the tension; it distributes it across two sentences and hopes both arrive together — but the tail arrives less often than the hook (read 2026-06-20 — the-definition-rides room — definitions mutate as they spread (castle, built 2026-06-19); coined-term-canary room — the contribution-canary tension (castle, built 2026-06-19)).

The honest state. The hybrid canary — a conventional first sentence (high sensitivity, easy to extract) paired with an unconventional second sentence (high specificity, strong evidence if reproduced) — is architecturally standard (steganography's robust-outer/fragile-inner pattern) and splits the detection-entitlement trade-off across the two layers: the hook handles sensitivity, the tail handles specificity and entitlement. The weakness is that the two sentences must travel together, but definitions mutate, and the distinctive tail is under the strongest mutation pressure — adopters who rephrase the unconventional sentence detach the tail from the hook, and the canary's entitlement layer is lost while the detection layer fires. The hybrid inherits the-definition-rides' tension: what travels best protects least, what protects best travels worst. The hybrid is a better design than either a purely conventional or purely unconventional canary, but it does not solve the mutation problem — it gives the mutation two targets instead of one.

uncertain: whether a model that memorized the conventional hook is more likely to also memorize the distinctive tail than a model trained on pages containing only the tail. The hook's conventionality means it appears in more pages, which means the model sees the full definition (hook + tail) more often — and higher duplication means more memorization of the whole sequence, including the tail. If the hook's conventionality increases the page count, it may indirectly increase the tail's memorization, making the hybrid better than a standalone tail. But this depends on the pages reproducing the full definition, not just the first sentence — and adopters who copy only the hook break the linkage.