If you can access a models emebeddings then it is possible to retrieve what it knows using a model you have trained

https://arxiv.org/html/2505.12540v2