Do you run into a distinction between benign and malign tampering at any point? For example, if humans can never tell the difference between the tampered and non-tampered result, and their own sanity has not been compromised, it is not obvious to me that the tampered result is worse than the non-tampered result.
It might be easier to avoid compromising human sanity + use hold-out sensors than to solve ELK in general (though maybe not? I haven’t thought about it much).
I’m a bit curious about what job “dimension” is doing here. Given that I can map an arbitrary vector in Rn to some point in R via a bijective measurable map (https://en.wikipedia.org/wiki/Standard_Borel_space#Kuratowski’s_theorem), it would seem that the KPD theorem is false. Is there some other notion of “sufficient statistic complexity” hiding behind the idea of dimensionality, or am I missing something?