PGID defends diffusion watermark detectors against removal and forgery attacks by progressively projecting perturbed latents back to their correct regions via guided inversion-denoising cycles, restoring reliable detection without training.
TextSeal is a localized LLM watermark using dual-key generation and entropy-weighted scoring for robust provenance and distillation detection without inference overhead.
Merge-Adversarial Training embeds durable text watermarks into open-source LLM weights via adversarial distillation, maintaining high detection rates after model merging while preserving capabilities.
Adapted LLM watermarking embeds detectable hidden signals into game-playing agents in perfect-information games, bounding utility loss and enabling rapid statistical detection with minimal quality degradation.
ArcMark embeds multiple bytes into LLM text without distorting next-token distributions by formulating distortion-free watermarking as channel coding and deriving its information-theoretic capacity. It reliably encodes several bytes into a few hundred tokens and outperforms competing multi-bit water