Reading the Prompt You Did Not Send: Detection at the Inference Boundary