Canary strings, n-gram overlap, perturbed questions and fresh held-out sets. How to tell real capability from a memorised test.