Under manipulations, are there AI models harder to audit?