Imagine two handwriting experts in a courtroom. One has spent years studying only forged documents; the other, only authentic ones. You hand them a questioned letter and ask each to score every stroke independently. Where their confidence diverges sharply — the forger-expert says 'definitely mine' while the authentic-expert says 'never seen this before' — you have your evidence. That per-stroke disagreement is exactly the mechanism this paper uses to detect AI-generated code, except the 'strokes' are tokens and the 'experts' are LoRA adapters fine-tuned on machine-written vs. human-written code. The committed claim: a framework that detects AI involvement in code files at the token, line, block, and file levels simultaneously, using per-token log-likelihood ratios from dual low-rank adapters over a frozen code language model. This is not the first AI code detector, but it is — the authors argue — the first to provide multi-granularity localization from a single unified architecture rather than compressing a file into a single score. The existing paradigm has a fatal averaging problem. Prior detectors compute a global feature vector or a single classifier score over an entire file. If an engineer writes 200 lines and Copilot fills in 15, the AI signal gets diluted into noise. This paper's insight is that authorship evidence is local: it lives at the token level and should be aggregated upward, not averaged away. A frozen code LM provides the backbone. Two LoRA adapters — one trained on machine-written files, one on human-written files — produce competing per-token log-likelihoods. The ratio between them gives a local authorship signal at every position. Lightweight classification heads then aggregate these ratios within lines and blocks, using surrounding context, before rolling up to a file-level decision. The ladder positioning is honest and interesting. On their internal benchmark of 11,773 AI-involved files across six generation regimes (continuation, fill-in-the-middle, full generation) against 2,541 human files, the method hits 72.4 macro F1 at a strict 1% false-positive operating point. That FPR constraint matters enormously — in any real deployment, false accusations of AI use are career-damaging. On the external HybridCodeAuthorship benchmark, with zero adaptation, they reach 62.5 line-level F1, beating the 56 F1 that benchmark's own authors reported as best. The false-positive rate on 19,445 pre-2022 human-written files stays between 0.55% and 0.81%, meaning the operating point transports to unseen real-world code. The integrity picture is mixed but better than average for this subfield. The internal test set is large and covers multiple generation regimes, which guards against cherry-picking a single easy scenario. The external benchmark transfer is genuine zero-shot — no training split was available — which is the strongest form of generalization evidence short of independent replication. But the internal benchmark is constructed by the authors, the code and data availability aren't stated, and there's no pre-registration. The 1% FPR threshold was presumably tuned on the internal validation set, so how well it generalizes beyond these specific repos is an open question. The milestone trajectory for AI code detection is concretely about false-positive rate under adversarial conditions. Today's 72.4 F1 at 1% FPR is viable for low-stakes screening but not for academic integrity enforcement or legal proceedings, where you need sub-0.1% FPR with robust adversarial resistance. The obvious next experiment is adversarial evasion: what happens when users deliberately rephrase or obfuscate AI-generated code? The authors don't test this, and the honest read is a mix of (a) and (b) — adversarial robustness testing is compute-expensive and would likely degrade the numbers significantly, which is uncomfortable for a first paper establishing the approach. The dual-adapter mechanism, which relies on stylistic log-likelihood patterns, is exactly the kind of signal that targeted paraphrasing would attack.
