% Ablation results: top-k, windowing, equal-N
\begin{tabular}{lcccc}
\toprule
\textbf{Configuration} & \textbf{AUC} & \textbf{TPR@1\%} & \textbf{TPR@5\%} & \textbf{TPR@10\%} \\
\midrule
\multicolumn{5}{l}{\emph{Top-k Sweep (all debiased)}} \\
\quad $k=32$ & 0.768 & 2.2\% & 16.1\% & 32.8\% \\
\quad $k=64$ & 0.780 & 2.5\% & 18.2\% & 35.8\% \\
\quad $k=96$ & 0.775 & 2.3\% & 17.5\% & 34.2\% \\
\quad $k=128$ & 0.770 & 2.1\% & 16.8\% & 33.5\% \\
\midrule
\multicolumn{5}{l}{\emph{Windowed Extremes}} \\
\quad Win-p95 only ($W=256$) & 0.705 & 1.8\% & 13.1\% & 27.3\% \\
\quad Top-64 + Win-p95 & 0.792 & 2.7\% & 19.0\% & 37.1\% \\
\midrule
\multicolumn{5}{l}{\emph{Equal-N Robustness}} \\
\quad Variable-N (default) & 0.780 & 2.5\% & 18.2\% & 35.8\% \\
\quad Equal-N ($N=8$) & 0.778 & 2.4\% & 18.0\% & 35.5\% \\
\quad Equal-N ($N=12$) & 0.779 & 2.6\% & 18.3\% & 35.9\% \\
\midrule
\multicolumn{5}{l}{\emph{Negative Results}} \\
\quad Note-only attack & 0.32 & 0.0\% & 0.7\% & 3.2\% \\
\quad EVT tail modeling & 0.66 & 1.2\% & 9.8\% & 21.4\% \\
\bottomrule
\end{tabular}

% Notes:
% - All metrics debiased (length-matched + calibrated) except where noted.
% - 95% CIs: AUC $\pm 0.02$--0.03; TPR $\pm 0.5$--1.0pp.
% - Negative results demonstrate failure modes.

