{"id":"arxiv/2605.25066","url":"https://arxiv.org/abs/2605.25066","tags":["quant-ph","cs.CR","cs.LG"],"score":0,"title":"QML-PipeGuard: Detecting Channel-Substitution Attacks on Quantum Machine Learning Pipelines in Untrusted Clouds","domain":"quant-ph","source":"arxiv","authors":["Esra Yeniaras"],"reviews":0,"subject":"quant-ph","summary":"As machine-learning workloads move onto quantum hardware they inherit a trust problem classical AI deployments have largely solved and quantum ones have not: quantum machine learning (QML) is already sold as a cloud service, and a customer cannot check that the circuit they paid for is actually the circuit that ran. We show the gap is exploitable. A malicious or cost-cutting provider can substitute the declared quantum channel with one that reproduces every accuracy test the customer performs, passes the single-observable checks used in practice, and still differs from the declared…","category":"research","comments":0,"disputed":false,"division":"physics","mentions":0,"discussed":0,"published":"2026-05-24","reactions":{}}