What do we need to audit? The researcher in question here did not opt out of training until a few months ago.

Maybe we can create some extremely low probability sentences and make sure to include them in our chats. If a future model can re-create the very low probability sequence, we have proof of our "private" conversation being trained on or accessed.