Schematic distributions, not the paper's data. The outcomes are win/continue/lose for one attacked step. Raise k with c at 100%: innocent minima drift left (fewer wasted audits and deferrals) while the attacked step's minimum stays suspicious — the win:lose odds improve. Now lower c: attack steps mostly fizzle into "continue" (selection for benign actions), and every incomplete attack is one more chance to catch the model on a later step.