Abstract
Readout-side residual hybrids concatenate raw inputs with measured quantum features. Under single-example gradient sharing, a biased first linear layer admits standard analytic recovery of its input, so the bypass exposes raw coordinates without requiring inversion of the quantum circuit. We audit this mechanism using two tabular datasets, four architectures, and metrics conditioned on feature visibility. Iterative gradient matching gives median full-record PSNR of 73-96 dB for residual and input-only heads. Quantum-only heads score 8-11 dB on the full record but 54-96 dB on the six input coordinates they actually encode. These are reconstruction results for the tested six-input, six-observable circuits, not a general statement about quantum encodings. A loss-threshold membership attack remains near chance. The contribution is a visibility-conditioned privacy audit: omitted coordinates must not be credited as protection supplied by quantum processing, and near-exact PSNR differences must not be interpreted as meaningful privacy rankings. Our findings concern individual gradients and do not establish leakage under aggregation or multiple local training steps.
Keywords
Subject
Publication details
- Journal
- Not available
- Open access
- Green open access
Cite this article
APA 7
Zhang, G., Zhao, K., Cui, X., Heng, H., Chu, X., & Blanken, A. J. (2026). Does the Readout Bypass Leak the Input? A Feature-Visibility Audit of Hybrid Quantum-Classical Models. https://omanscience.com/en/articles/does-the-readout-bypass-leak-the-input-a-feature-visibility-audit-of-hybrid-quantum-classical-models
MLA 9
Zhang, Guilin, et al. "Does the Readout Bypass Leak the Input? A Feature-Visibility Audit of Hybrid Quantum-Classical Models." https://omanscience.com/en/articles/does-the-readout-bypass-leak-the-input-a-feature-visibility-audit-of-hybrid-quantum-classical-models.
Chicago (author–date)
Zhang, Guilin, Kai Zhao, Xiquan Cui, Henry Heng, Xu Chu, and Aletta Johanna Blanken. 2026. "Does the Readout Bypass Leak the Input? A Feature-Visibility Audit of Hybrid Quantum-Classical Models." https://omanscience.com/en/articles/does-the-readout-bypass-leak-the-input-a-feature-visibility-audit-of-hybrid-quantum-classical-models.
Harvard
Zhang, G., Zhao, K., Cui, X., Heng, H., Chu, X. and Blanken, A. J. (2026) 'Does the Readout Bypass Leak the Input? A Feature-Visibility Audit of Hybrid Quantum-Classical Models', Available at: https://omanscience.com/en/articles/does-the-readout-bypass-leak-the-input-a-feature-visibility-audit-of-hybrid-quantum-classical-models.
Vancouver
Zhang G, Zhao K, Cui X, Heng H, Chu X, Blanken AJ. Does the Readout Bypass Leak the Input? A Feature-Visibility Audit of Hybrid Quantum-Classical Models. https://omanscience.com/en/articles/does-the-readout-bypass-leak-the-input-a-feature-visibility-audit-of-hybrid-quantum-classical-models
IEEE
G. Zhang, K. Zhao, X. Cui, H. Heng, X. Chu, and A. J. Blanken, "Does the Readout Bypass Leak the Input? A Feature-Visibility Audit of Hybrid Quantum-Classical Models," https://omanscience.com/en/articles/does-the-readout-bypass-leak-the-input-a-feature-visibility-audit-of-hybrid-quantum-classical-models.