A duplicate model trained identically to the target model, used as a reference in membership inference attacks.