When we train G to generate sentences similar to IND sentences and D to classify real IND sentences and fake sentences generated by G, we expect D to reject OOD sentences.
we use the low confidence score by D about an input sentence as the evidence that the sentence is OOD.