{ "schema": "declawd.research-review/v1", "reviewed_at": "2026-11-02T17:27:24.036377+00:00", "baseline": "2026-10-29T01:29:09Z", "scope": "Primary-paper discovery, current version checks and selected methods review, with research reports kept distinct from reproduced Declawd evidence.", "arxiv_discovery": [ { "url": "https://export.arxiv.org/api/query?search_query=all%3Awatermark%2A+AND+%28submittedDate%3A%5B202610290000+TO+202611022359%5D+OR+lastUpdatedDate%3A%5B202610290000+TO+202611022359%5D%29&start=0&max_results=100&sortBy=lastUpdatedDate&sortOrder=descending", "captured_at": "2026-11-02T17:13:34.540914+00:00", "total_results": 5, "returned": 5, "max_results": 100, "start": 0, "sha256": "e077da1af96e203839deb03775a2af4e596ce04392a91724f78964141c4c4317", "entries": [ { "url": "https://arxiv.org/abs/2610.41170v1", "title": "PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AI", "published_at": "2026-10-30T02:47:24Z", "updated_at": "2026-10-30T02:47:24Z" }, { "url": "https://arxiv.org/abs/2610.40613v1", "title": "TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races", "published_at": "2026-10-29T17:54:12Z", "updated_at": "2026-10-29T17:54:12Z" }, { "url": "https://arxiv.org/abs/2610.40204v1", "title": "Attack-Resilient Multi-Bit Image Watermarking Framework via Latent Coordinate Sign Clamping", "published_at": "2026-10-29T14:54:43Z", "updated_at": "2026-10-29T14:54:43Z" }, { "url": "https://arxiv.org/abs/2610.39189v1", "title": "Provably Secure Diffusion Watermarking Against Removal Adversaries with Batched Detector Access", "published_at": "2026-10-29T02:12:28Z", "updated_at": "2026-10-29T02:12:28Z" }, { "url": "https://arxiv.org/abs/2610.39160v1", "title": "CLaW: Codec-Guided Adaptive Latent Watermarking for Traceable Diffusion Image Generation", "published_at": "2026-10-29T01:46:18Z", "updated_at": "2026-10-29T01:46:18Z" } ], "all_returned": true }, { "url": "https://export.arxiv.org/api/query?search_query=all%3Awatermark%2A+AND+%28submittedDate%3A%5B202610010000+TO+202611022359%5D+OR+lastUpdatedDate%3A%5B202610010000+TO+202611022359%5D%29&start=0&max_results=100&sortBy=lastUpdatedDate&sortOrder=descending", "captured_at": "2026-11-02T17:19:10.478563+00:00", "total_results": 85, "returned": 85, "max_results": 100, "start": 0, "sha256": "466bde5eaae8ffeb87270eb267fb44eb89c0c0973afab84cfc2c45c89f121145", "entries": [ { "url": "https://arxiv.org/abs/2610.41170v1", "title": "PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AI", "published_at": "2026-10-30T02:47:24Z", "updated_at": "2026-10-30T02:47:24Z" }, { "url": "https://arxiv.org/abs/2610.27653v2", "title": "A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models", "published_at": "2026-10-20T05:12:12Z", "updated_at": "2026-10-29T20:35:56Z" }, { "url": "https://arxiv.org/abs/2610.40613v1", "title": "TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races", "published_at": "2026-10-29T17:54:12Z", "updated_at": "2026-10-29T17:54:12Z" }, { "url": "https://arxiv.org/abs/2610.40204v1", "title": "Attack-Resilient Multi-Bit Image Watermarking Framework via Latent Coordinate Sign Clamping", "published_at": "2026-10-29T14:54:43Z", "updated_at": "2026-10-29T14:54:43Z" }, { "url": "https://arxiv.org/abs/2610.39189v1", "title": "Provably Secure Diffusion Watermarking Against Removal Adversaries with Batched Detector Access", "published_at": "2026-10-29T02:12:28Z", "updated_at": "2026-10-29T02:12:28Z" }, { "url": "https://arxiv.org/abs/2610.39160v1", "title": "CLaW: Codec-Guided Adaptive Latent Watermarking for Traceable Diffusion Image Generation", "published_at": "2026-10-29T01:46:18Z", "updated_at": "2026-10-29T01:46:18Z" }, { "url": "https://arxiv.org/abs/2610.38793v1", "title": "Trustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and Robustness", "published_at": "2026-10-28T20:00:47Z", "updated_at": "2026-10-28T20:00:47Z" }, { "url": "https://arxiv.org/abs/2610.38579v1", "title": "Session-Bound Behavioral Watermarking for Autonomous LLM Agents", "published_at": "2026-10-28T10:09:23Z", "updated_at": "2026-10-28T10:09:23Z" }, { "url": "https://arxiv.org/abs/2610.33437v2", "title": "Combinatorial Lock for Trojan-Resilient AI Engines via Hash-Assisted Spectral Filtering", "published_at": "2026-10-24T04:26:13Z", "updated_at": "2026-10-27T14:09:43Z" }, { "url": "https://arxiv.org/abs/2610.37266v1", "title": "Watermark Basins: Black-Box Detection of Distilled LLMs", "published_at": "2026-10-27T13:59:34Z", "updated_at": "2026-10-27T13:59:34Z" }, { "url": "https://arxiv.org/abs/2610.36432v1", "title": "No Tokenizer, Still a Gap: Cross-Lingual Fairness of Homoglyph and Invisible-Character Watermarking", "published_at": "2026-10-27T00:27:01Z", "updated_at": "2026-10-27T00:27:01Z" }, { "url": "https://arxiv.org/abs/2610.34942v1", "title": "Intellectual Property Protection of Hyperdimensional Computing Classifiers: Black-Box Ownership Verification via Model Watermarking", "published_at": "2026-10-26T07:08:36Z", "updated_at": "2026-10-26T07:08:36Z" }, { "url": "https://arxiv.org/abs/2610.33194v1", "title": "Support-guided OOD Removal with Diffusion", "published_at": "2026-10-23T18:41:53Z", "updated_at": "2026-10-23T18:41:53Z" }, { "url": "https://arxiv.org/abs/2610.09552v2", "title": "Constitution-Guided Watermarking", "published_at": "2026-10-07T06:50:47Z", "updated_at": "2026-10-23T16:12:04Z" }, { "url": "https://arxiv.org/abs/2610.32205v1", "title": "Watermarking Diffusion Language Models with Learned Foresight and Balanced Bands", "published_at": "2026-10-23T05:58:58Z", "updated_at": "2026-10-23T05:58:58Z" }, { "url": "https://arxiv.org/abs/2610.32092v1", "title": "AgentTrace: Execution-Level Fingerprinting of Black-Box LLM Agents", "published_at": "2026-10-23T02:55:15Z", "updated_at": "2026-10-23T02:55:15Z" }, { "url": "https://arxiv.org/abs/2610.32017v1", "title": "SynMark: Semantic-Coordinate Multi-Bit Watermarking during LLM Code Generation", "published_at": "2026-10-23T00:36:20Z", "updated_at": "2026-10-23T00:36:20Z" }, { "url": "https://arxiv.org/abs/2610.30601v1", "title": "HiMark: Hierarchical and Controllable Multi-bit Watermarking for Large Language Models", "published_at": "2026-10-22T02:05:29Z", "updated_at": "2026-10-22T02:05:29Z" }, { "url": "https://arxiv.org/abs/2610.30347v1", "title": "FiLM-CAM: Keyed Feature Modulation for Conditional-Access Watermarking", "published_at": "2026-10-21T19:06:56Z", "updated_at": "2026-10-21T19:06:56Z" }, { "url": "https://arxiv.org/abs/2610.11399v3", "title": "Estimating Great Expectations Under Autoregressive Language Models with Potentials", "published_at": "2026-10-08T07:30:43Z", "updated_at": "2026-10-21T11:58:57Z" }, { "url": "https://arxiv.org/abs/2610.28076v1", "title": "On the Vulnerabilities and Data-Free Removal of Watermarks in Batch Normalization Layers", "published_at": "2026-10-20T11:55:21Z", "updated_at": "2026-10-20T11:55:21Z" }, { "url": "https://arxiv.org/abs/2610.13357v3", "title": "ECGWmark: Deep Watermarking of Electrocardiogram Signals With Error-Correcting Codes", "published_at": "2026-10-09T10:32:03Z", "updated_at": "2026-10-20T06:24:46Z" }, { "url": "https://arxiv.org/abs/2610.27079v1", "title": "ClockMark: Adaptive and Host-Dependent Watermarking for Large Language Models", "published_at": "2026-10-19T18:00:03Z", "updated_at": "2026-10-19T18:00:03Z" }, { "url": "https://arxiv.org/abs/2610.26682v1", "title": "BrushOff: Stroke-Based Re-rendering as a Watermark Removal Attack on Painting", "published_at": "2026-10-19T16:28:52Z", "updated_at": "2026-10-19T16:28:52Z" }, { "url": "https://arxiv.org/abs/2610.25982v1", "title": "Auditor-Assisted Summary-Channel Verification for Hosted LLM Identity Substitution", "published_at": "2026-10-19T08:09:11Z", "updated_at": "2026-10-19T08:09:11Z" }, { "url": "https://arxiv.org/abs/2610.24382v1", "title": "Is This Your Agent? Identity Watermarking for Agent Systems in Dynamic Environments", "published_at": "2026-10-17T02:27:55Z", "updated_at": "2026-10-17T02:27:55Z" }, { "url": "https://arxiv.org/abs/2610.24205v1", "title": "PREEMPT: Proactive Robustness Evaluation under Editing for Media Protection Techniques", "published_at": "2026-10-16T20:25:01Z", "updated_at": "2026-10-16T20:25:01Z" }, { "url": "https://arxiv.org/abs/2610.23601v1", "title": "Token-Level Attribution of Multi-Mode LLM Watermarks: Optimal Rule and Belief Weighting", "published_at": "2026-10-16T15:18:28Z", "updated_at": "2026-10-16T15:18:28Z" }, { "url": "https://arxiv.org/abs/2610.21760v2", "title": "Beyond Generation: Using Multimodal LLMs as Detectors of LLM-Generated Deepfake Facial Images", "published_at": "2026-10-15T12:16:09Z", "updated_at": "2026-10-16T10:56:15Z" }, { "url": "https://arxiv.org/abs/2610.22810v1", "title": "Watermarkability: Measuring and Improving Language-Model Compatibility with Logit-Based Watermarks", "published_at": "2026-10-16T01:40:39Z", "updated_at": "2026-10-16T01:40:39Z" }, { "url": "https://arxiv.org/abs/2610.22296v1", "title": "Backward Compatibility in Zero-Bit Neural Audio Watermarking", "published_at": "2026-10-15T17:45:27Z", "updated_at": "2026-10-15T17:45:27Z" }, { "url": "https://arxiv.org/abs/2610.22457v1", "title": "Erase the Mark, Preserve the Motion: Temporally Consistent Removal of Video Watermarks", "published_at": "2026-10-15T16:36:32Z", "updated_at": "2026-10-15T16:36:32Z" }, { "url": "https://arxiv.org/abs/2610.21031v1", "title": "Blind Watermarking of Software Repositories via Module Placement", "published_at": "2026-10-15T00:04:50Z", "updated_at": "2026-10-15T00:04:50Z" }, { "url": "https://arxiv.org/abs/2610.20827v1", "title": "Performance Characterization of Pulsar's Software-defined Watermark Verifier", "published_at": "2026-10-14T19:14:18Z", "updated_at": "2026-10-14T19:14:18Z" }, { "url": "https://arxiv.org/abs/2610.20278v1", "title": "A Valid Watermark Is Not a Valid Identity: Spatial-Spectral Adversarial Face Evasion with Watermark Preservation", "published_at": "2026-10-14T14:37:52Z", "updated_at": "2026-10-14T14:37:52Z" }, { "url": "https://arxiv.org/abs/2610.20105v1", "title": "CochlearMark: Audio Watermarking via Phase Locked Auditory Nerve Representations", "published_at": "2026-10-14T12:38:56Z", "updated_at": "2026-10-14T12:38:56Z" }, { "url": "https://arxiv.org/abs/2610.15725v2", "title": "SkillMarker: A KGW-Based Watermarking Method for Agent Skill Ownership Verification", "published_at": "2026-10-11T16:04:26Z", "updated_at": "2026-10-14T12:38:56Z" }, { "url": "https://arxiv.org/abs/2610.16336v2", "title": "Doctor Trigger: A Framework for Release-Bound Face Verification", "published_at": "2026-10-12T07:55:48Z", "updated_at": "2026-10-14T05:42:02Z" }, { "url": "https://arxiv.org/abs/2610.09339v2", "title": "Sequential resetting procedures and false discovery rate", "published_at": "2026-10-07T02:56:44Z", "updated_at": "2026-10-13T15:18:10Z" }, { "url": "https://arxiv.org/abs/2610.03955v2", "title": "Adaptive Co-Serving LLM Watermarking on Modern Inference Engines", "published_at": "2026-10-02T19:12:42Z", "updated_at": "2026-10-13T14:26:01Z" }, { "url": "https://arxiv.org/abs/2610.18359v1", "title": "Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Key", "published_at": "2026-10-13T13:24:34Z", "updated_at": "2026-10-13T13:24:34Z" }, { "url": "https://arxiv.org/abs/2610.18072v1", "title": "LensErase: A Foundation Model for Erase Anything", "published_at": "2026-10-13T09:56:02Z", "updated_at": "2026-10-13T09:56:02Z" }, { "url": "https://arxiv.org/abs/2610.17810v1", "title": "Perturbation, Not Provenance: Why Activation Steering Does Not Make a Robust Text Watermark", "published_at": "2026-10-13T06:36:41Z", "updated_at": "2026-10-13T06:36:41Z" }, { "url": "https://arxiv.org/abs/2610.17655v1", "title": "textGrain watermarking is harder to detect: can sum-tests still do it optimally?", "published_at": "2026-10-13T03:33:56Z", "updated_at": "2026-10-13T03:33:56Z" }, { "url": "https://arxiv.org/abs/2610.08137v2", "title": "Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering", "published_at": "2026-10-06T10:53:19Z", "updated_at": "2026-10-12T05:52:31Z" }, { "url": "https://arxiv.org/abs/2610.16087v1", "title": "Confidential Error-Correcting Codes", "published_at": "2026-10-12T02:54:33Z", "updated_at": "2026-10-12T02:54:33Z" }, { "url": "https://arxiv.org/abs/2610.15976v1", "title": "Embedding Information in Policy Randomness: Distribution-Preserving Implicit Communication in MDPs", "published_at": "2026-10-11T23:20:39Z", "updated_at": "2026-10-11T23:20:39Z" }, { "url": "https://arxiv.org/abs/2610.15728v1", "title": "Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding", "published_at": "2026-10-11T16:05:11Z", "updated_at": "2026-10-11T16:05:11Z" }, { "url": "https://arxiv.org/abs/2610.15685v1", "title": "Radioactive Feedback: Tracing Models Trained by Label-Only LLM Supervision", "published_at": "2026-10-11T15:09:58Z", "updated_at": "2026-10-11T15:09:58Z" }, { "url": "https://arxiv.org/abs/2610.15082v1", "title": "GAMW: Generation-Aware Mel-Domain Watermarking for TTS Traceability", "published_at": "2026-10-10T17:30:02Z", "updated_at": "2026-10-10T17:30:02Z" }, { "url": "https://arxiv.org/abs/2610.14606v1", "title": "Decision Uncertainty-Oriented Watermarking (DUOW): Securing Multi-Agent Routing Against Policy Cloning", "published_at": "2026-10-10T05:51:13Z", "updated_at": "2026-10-10T05:51:13Z" }, { "url": "https://arxiv.org/abs/2610.14470v1", "title": "When Is a Reconciliation Break Real? A Temporal Correctness Contract for Streaming Financial Reconciliation", "published_at": "2026-10-10T01:56:57Z", "updated_at": "2026-10-10T01:56:57Z" }, { "url": "https://arxiv.org/abs/2610.14427v1", "title": "ByteMark: A Unified Byte-Level Watermark for Detection Across Language Models", "published_at": "2026-10-10T00:46:38Z", "updated_at": "2026-10-10T00:46:38Z" }, { "url": "https://arxiv.org/abs/2610.14378v1", "title": "Tokenization-Invariant Watermarking: A Byte-Local Method for LLM Text", "published_at": "2026-10-09T22:52:04Z", "updated_at": "2026-10-09T22:52:04Z" }, { "url": "https://arxiv.org/abs/2610.14289v1", "title": "Watermarking for Byzantine Robust LLM Training", "published_at": "2026-10-09T20:09:57Z", "updated_at": "2026-10-09T20:09:57Z" }, { "url": "https://arxiv.org/abs/2610.13367v1", "title": "Secrets in Preamble: Practical and Robust PHY Information Hiding for Wi-Fi", "published_at": "2026-10-09T10:40:30Z", "updated_at": "2026-10-09T10:40:30Z" }, { "url": "https://arxiv.org/abs/2610.12952v1", "title": "WaveMark: Robust Wavelet-Domain Image Watermarking for Diffusion Models", "published_at": "2026-10-09T03:46:45Z", "updated_at": "2026-10-09T03:46:45Z" }, { "url": "https://arxiv.org/abs/2610.12106v1", "title": "Could LLM Watermark Detection be Public?", "published_at": "2026-10-08T15:05:58Z", "updated_at": "2026-10-08T15:05:58Z" }, { "url": "https://arxiv.org/abs/2610.11848v1", "title": "SemField: A Simple, Linear, Continuous, yet Robust Semantic Watermark", "published_at": "2026-10-08T12:35:11Z", "updated_at": "2026-10-08T12:35:11Z" }, { "url": "https://arxiv.org/abs/2610.11625v1", "title": "FissionGuard: Testing Local Watermark Proportions with FDR Control", "published_at": "2026-10-08T10:04:50Z", "updated_at": "2026-10-08T10:04:50Z" }, { "url": "https://arxiv.org/abs/2610.11488v1", "title": "MARC: Multi-Bit Watermarking for Autoregressive Audio Generation against Codec Attacks", "published_at": "2026-10-08T08:30:17Z", "updated_at": "2026-10-08T08:30:17Z" }, { "url": "https://arxiv.org/abs/2610.11364v1", "title": "FlyMark: Training-Free Invisible Watermarking of 3D Gaussian Splatting via a Fruit Fly Connectome", "published_at": "2026-10-08T06:56:53Z", "updated_at": "2026-10-08T06:56:53Z" }, { "url": "https://arxiv.org/abs/2610.11290v1", "title": "ProxyEraseAgent: Blind Watermark Removal in the Wild", "published_at": "2026-10-08T05:53:28Z", "updated_at": "2026-10-08T05:53:28Z" }, { "url": "https://arxiv.org/abs/2610.09755v1", "title": "Diffusion-Generated Image Watermarking: A Two-Axis Taxonomy and Three Protocol-Bounded Case Studies", "published_at": "2026-10-07T09:42:46Z", "updated_at": "2026-10-07T09:42:46Z" }, { "url": "https://arxiv.org/abs/2610.09702v1", "title": "Latent Watermarks under Generative Editing: A Benchmark and Analysis of Detection Survival", "published_at": "2026-10-07T09:01:05Z", "updated_at": "2026-10-07T09:01:05Z" }, { "url": "https://arxiv.org/abs/2610.08668v1", "title": "Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents", "published_at": "2026-10-06T16:50:42Z", "updated_at": "2026-10-06T16:50:42Z" }, { "url": "https://arxiv.org/abs/2610.08316v1", "title": "MARCO: The Radioactive Watermark for Protein Generative Models", "published_at": "2026-10-06T13:18:22Z", "updated_at": "2026-10-06T13:18:22Z" }, { "url": "https://arxiv.org/abs/2610.08178v1", "title": "On the Intrinsic Limited Robustness of Latent-Based Watermarking", "published_at": "2026-10-06T11:29:50Z", "updated_at": "2026-10-06T11:29:50Z" }, { "url": "https://arxiv.org/abs/2610.06846v1", "title": "BiasFlow: Geometric Monitoring and Backbone Regularization for Spurious Feature Reliance", "published_at": "2026-10-05T17:59:28Z", "updated_at": "2026-10-05T17:59:28Z" }, { "url": "https://arxiv.org/abs/2610.06317v1", "title": "Watermarking: from Impossibility to Auditable Compliance", "published_at": "2026-10-05T13:32:41Z", "updated_at": "2026-10-05T13:32:41Z" }, { "url": "https://arxiv.org/abs/2610.05712v1", "title": "SimpleMark: Fast Multi-Bit Text Watermarking under f -Divergence Constraints", "published_at": "2026-10-05T02:51:43Z", "updated_at": "2026-10-05T02:51:43Z" }, { "url": "https://arxiv.org/abs/2610.05453v1", "title": "The Poisoned Conversation: Privacy-Leaking Watermarks in Unified Multimodal Models", "published_at": "2026-10-04T18:53:31Z", "updated_at": "2026-10-04T18:53:31Z" }, { "url": "https://arxiv.org/abs/2610.05323v1", "title": "Grammar-Guided Code Watermarking with Green Temperature", "published_at": "2026-10-04T15:45:19Z", "updated_at": "2026-10-04T15:45:19Z" }, { "url": "https://arxiv.org/abs/2610.05215v1", "title": "NeuMark-Native: Robust Text-to-Speech-Native Watermarking Through Full Utilization of Neural Audio Codec Latent Space", "published_at": "2026-10-04T13:32:32Z", "updated_at": "2026-10-04T13:32:32Z" }, { "url": "https://arxiv.org/abs/2610.04860v1", "title": "Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinate", "published_at": "2026-10-04T02:02:08Z", "updated_at": "2026-10-04T02:02:08Z" }, { "url": "https://arxiv.org/abs/2610.04763v1", "title": "Tracing model-generated DNA with position-independent watermarking", "published_at": "2026-10-03T20:56:43Z", "updated_at": "2026-10-03T20:56:43Z" }, { "url": "https://arxiv.org/abs/2610.04235v1", "title": "Learning to Watermark Speech Synthesis Against Model-Driven Reconstruction", "published_at": "2026-10-03T02:57:00Z", "updated_at": "2026-10-03T02:57:00Z" }, { "url": "https://arxiv.org/abs/2610.04169v1", "title": "Language Model Fingerprinting Requires Rethinking Watermark Teachers", "published_at": "2026-10-03T00:19:29Z", "updated_at": "2026-10-03T00:19:29Z" }, { "url": "https://arxiv.org/abs/2610.04151v1", "title": "Watermarks and Fingerprints as Soft Bindings for Content Provenance: An Open-Licence Benchmark for Images, Audio and Video", "published_at": "2026-10-02T23:52:30Z", "updated_at": "2026-10-02T23:52:30Z" }, { "url": "https://arxiv.org/abs/2610.04021v1", "title": "The Reported Engagement with AI Level (REAL) Rating: A Framework for Disclosing Human-AI Collaboration", "published_at": "2026-10-02T20:28:05Z", "updated_at": "2026-10-02T20:28:05Z" }, { "url": "https://arxiv.org/abs/2610.03928v1", "title": "DABACO: A Multi-Camera Dataset and Benchmark for Screen Localization and Pointing Estimation", "published_at": "2026-10-02T18:41:34Z", "updated_at": "2026-10-02T18:41:34Z" }, { "url": "https://arxiv.org/abs/2610.03166v1", "title": "LiBRA: Detection-Aware Image Watermark Removal via Bidirectional Latent Optimization", "published_at": "2026-10-02T11:44:09Z", "updated_at": "2026-10-02T11:44:09Z" }, { "url": "https://arxiv.org/abs/2610.03124v1", "title": "The Fragility of Trigger-Tag Mechanisms for Misuse Detection in Open-Weight LLMs", "published_at": "2026-10-02T10:45:14Z", "updated_at": "2026-10-02T10:45:14Z" }, { "url": "https://arxiv.org/abs/2610.02817v1", "title": "RMCW: A Deletion-Robust Watermark Based on Reed--Muller Codes for Language Models", "published_at": "2026-10-02T05:05:06Z", "updated_at": "2026-10-02T05:05:06Z" }, { "url": "https://arxiv.org/abs/2610.02010v1", "title": "Exploring Weaknesses of Generative Image Watermarks against Latent Frequency Masking", "published_at": "2026-10-01T16:36:29Z", "updated_at": "2026-10-01T16:36:29Z" } ], "all_returned": true } ], "web_discovery_queries": [ "site:arxiv.org watermark language model October 2026 multilingual entropy", "site:arxiv.org watermark text mixed localisation false positives 2026", "site:arxiv.org watermark spoofing removal October 2026", "site:arxiv.org/abs watermark Oct 2026 language", "site:arxiv.org/abs watermark 2026 false positives", "site:arxiv.org/abs watermark 2026 multilingual", "site:arxiv.org/abs watermark 2026 Oct 30", "site:arxiv.org/abs watermark 2026 Oct 29", "site:arxiv.org/abs watermark 2026 Oct 27", "site:arxiv.org/abs watermark 2026 Oct 23", "site:openreview.net watermark 2026 localisation mixed", "site:aclanthology.org/2026 watermark multilingual false positive", "site:arxiv.org watermark 2026 retraction OR correction" ], "date_rules": [ "Publication and version dates come from arXiv submission history or publisher metadata. Retrieval and indexing dates do not establish publication.", "The arXiv recent query includes submissions and revisions dated 29 October through 2 November. The broader query starts 1 October.", "Proceedings month and conference dates do not establish an exact online publication day." ], "existing_version_checks": [ { "url": "https://arxiv.org/abs/2607.16010", "ledger_version": "v1", "observed_latest_version": "v1", "new_version_found": false, "submission_history": "Submission history From: Saifur Rahman Tamim [ view email ] [v1] \n Fri, 17 Jul 2026 14:45:53 UTC (71 KB)", "capture": { "url": "https://arxiv.org/abs/2607.16010", "captured_at": "2026-11-02T17:13:33.342008+00:00", "http_status": 200, "byte_length": 42938, "sha256": "41ce1396b43fb9840bab448eabfb2fcb1b0999d630c2716bf87a359c87b2dc59", "capture_record": "research-source-captures-2026-11-02.json" } }, { "url": "https://arxiv.org/abs/2603.03410", "ledger_version": "v2", "observed_latest_version": "v2", "new_version_found": false, "submission_history": "Submission history From: Binghui Wang [ view email ] [v1] \n Tue, 3 Mar 2026 17:49:01 UTC (384 KB) \n [v2] \n Sun, 15 Mar 2026 16:32:28 UTC (383 KB)", "capture": { "url": "https://arxiv.org/abs/2603.03410", "captured_at": "2026-11-02T17:13:33.426219+00:00", "http_status": 200, "byte_length": 41731, "sha256": "c694ede1961f425c96ac2288de207d1ba638e974b80a720df7aa12636abcf2ad", "capture_record": "research-source-captures-2026-11-02.json" } }, { "url": "https://arxiv.org/abs/2601.11629", "ledger_version": "v2", "observed_latest_version": "v2", "new_version_found": false, "submission_history": "Submission history From: Nghia T. Le [ view email ] [v1] \n Wed, 14 Jan 2026 03:00:19 UTC (2,299 KB) \n [v2] \n Fri, 14 Aug 2026 02:31:43 UTC (2,305 KB)", "capture": { "url": "https://arxiv.org/abs/2601.11629", "captured_at": "2026-11-02T17:13:33.434653+00:00", "http_status": 200, "byte_length": 42093, "sha256": "7caeb2f36997105cc8cc336ddc2dbf1c6ee8cf1fa74671330fc0b1aa5ad1f6a5", "capture_record": "research-source-captures-2026-11-02.json" } }, { "url": "https://arxiv.org/abs/2608.20047", "ledger_version": "v1", "observed_latest_version": "v1", "new_version_found": false, "submission_history": "Submission history From: Alexander Nemecek [ view email ] [v1] \n Thu, 20 Aug 2026 13:48:12 UTC (308 KB)", "capture": { "url": "https://arxiv.org/abs/2608.20047", "captured_at": "2026-11-02T17:13:33.442732+00:00", "http_status": 200, "byte_length": 41704, "sha256": "372197937c8962a3650278898c858b4131a157a245734298df4400a5a36ad775", "capture_record": "research-source-captures-2026-11-02.json" } }, { "url": "https://arxiv.org/abs/2608.19369", "ledger_version": "v1", "observed_latest_version": "v1", "new_version_found": false, "submission_history": "Submission history From: Daniele Corradetti [ view email ] [v1] \n Wed, 19 Aug 2026 18:36:51 UTC (28 KB)", "capture": { "url": "https://arxiv.org/abs/2608.19369", "captured_at": "2026-11-02T17:13:33.493459+00:00", "http_status": 200, "byte_length": 42041, "sha256": "979d8208bbc8198a3c3ba1f14b1223bcde5997b7f597474fdb4a33c9b1a7c058", "capture_record": "research-source-captures-2026-11-02.json" } } ], "papers": [ { "id": "textseal2", "title": "TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races", "url": "https://arxiv.org/abs/2610.40613v1", "published_on": "2026-10-29", "review_level": "methods_results_limitations_and_selected_source", "findings": [ "The authors merge keyed Gaussian values and use a residual exponential race during speculative decoding. The detection test scores distinct context-token pairs. Their textGrain comparator is a reimplementation with chosen block and column counts, rather than an OpenAI production detector.", "Empirical calibration, diversity metric and decoding mode affect the comparison. Paraphrasing removes almost every evaluated token watermark. The implementation preserves acceptance but is slower overall than plain decoding." ], "effects": [ "add_dated_research_note", "retain_provider_detector_access_limits", "candidate_independent_simulation" ], "submitted_at": "2026-10-29T17:54:12Z", "version": "v1", "peer_review_status": "arXiv preprint, no accepted venue independently verified", "models": [ "meta-llama/Llama-3.1-8B-Instruct", "Qwen/Qwen3.5-9B", "Qwen/Qwen3.5-27B" ], "draft_model": "Qwen/Qwen3.5-0.8B", "data": { "main": "ELI5", "code": "500 MBPP test problems", "math": "100 AIME problems, 16 answers each" }, "keys": { "generation": [ 42, 12387 ], "textgrain": [ 42, 4242 ], "null": "10 keys, derived by adding 100000*j" }, "generation": { "temperature": 1, "top_p": 0.95, "window_tokens": 3, "main_max_new_tokens": 200, "main_drafts": 8 }, "calibration": { "nominal_false_positive_rate": 0.001, "unmarked_answers": 10000, "keys": 10, "null_p_values": 100000, "thresholds": "empirical quantiles, separately by detector and answer length", "held_out_human_controls": false }, "evaluation": { "Qwen3.5-9B_answers_per_configuration": 3000, "other_model_answers_per_configuration": 1000, "diversity_questions": 100, "diversity_answers_per_question": 32, "speculative_diversity_answers_per_question": 16 }, "results": { "no_speculation_detection_gain_vs_TextSeal_pp_at_100_tokens": [ 10, 22, 8 ], "speculation_detection_at_200_tokens_percent": { "TextSeal2": 89, "TextSeal": 71, "textgrain_other_key": 67, "textgrain_own_recipe": 84 }, "textgrain_own_recipe_acceptance_change_percent": -5, "realised_calibration_false_positive_percent": [ 0.07, 0.15 ], "unoptimised_speculative_wall_time_vs_plain": 3 }, "limitations": [ "Own research keys and public models. No vendor text detector accessed.", "The 10-key null pool does not establish a worst-case guarantee for every fixed key, language, human corpus or adversary.", "Under an alternative diversity measure, distinct 4-grams, textGrain slightly leads without speculative decoding.", "The paper changes a context deduplication detail in its textGrain comparator.", "No full paper reproduction or validation of released per-answer outputs was performed." ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.40613", "captured_at": "2026-11-02T17:13:32.803536+00:00", "http_status": 200, "byte_length": 43825, "sha256": "1531420582eae92c488eadb2a9abb026f2f92808e7243d1211ce8393d097af1e", "capture_record": "research-source-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.40613v1", "captured_at": "2026-11-02T17:13:33.602294+00:00", "http_status": 200, "byte_length": 670860, "sha256": "bbbeea573d52045d30c360d8fc27c3da6ea59b3eaaf11aed685d39fa369f1537", "capture_record": "research-source-captures-2026-11-02.json" } ], "code": { "repository": "facebookresearch/textseal", "revision": "0b76bc64013081c570b8633d3d3585e3ee9a495a", "merged_pr": "https://github.com/facebookresearch/textseal/pull/3", "licence": "Apache-2.0 plus NOTICE", "models_and_data_terms": "separate, not granted by code licence", "selected_sources": "selected-repository-captures-2026-11-02.json" } }, { "id": "textseal", "title": "TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection", "url": "https://arxiv.org/abs/2605.12456v2", "published_on": "2026-05-12", "review_level": "abstract_dates_and_selected_localisation_source", "findings": [ "An older bibliography gap. The paper combines dual keys, entropy weighting and several region tests. The current source enumerates dyadic windows at half-length offsets and counts those same windows for its Bonferroni correction." ], "effects": [ "add_historical_bibliography", "inform_successor_localisation_design" ], "revised_on": "2026-05-21", "version": "v2", "limitations": [ "This work predates the refresh window. No newly published result is inferred from a recent retrieval.", "Source inspection does not validate the full calibration or the family error rate of a different Declawd scorer." ], "source_captures": [ { "url": "https://arxiv.org/abs/2605.12456", "captured_at": "2026-11-02T17:19:07.430734+00:00", "http_status": 200, "byte_length": 42291, "sha256": "7603b76b1b1f77e387d5ed249998e4a6ac7261b3a14404b3362bfc5c1c47ef5d", "capture_record": "research-more-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2605.12456v2", "captured_at": "2026-11-02T17:19:07.431246+00:00", "capture_record": "research-more-captures-2026-11-02.json" } ] }, { "id": "secure-diffusion-batched", "title": "Provably Secure Diffusion Watermarking Against Removal Adversaries with Batched Detector Access", "url": "https://arxiv.org/abs/2610.39189v1", "published_on": "2026-10-29", "review_level": "threat_model_methods_limitations", "findings": [ "The authors show how batches of detector queries can recover a fixed hidden transformation and propose per-sample transformations combined with a long-term secret. Their security theorem concerns non-adaptive batches and a stated perturbation comparison. They explicitly leave security against a stronger adaptive attacker open." ], "effects": [ "add_media_threat_model_context", "no_change_to_TrustMark_measurements" ], "submitted_at": "2026-10-29T02:12:28Z", "version": "v1", "models": [ "Stable Diffusion 2.1", "Stable Diffusion XL" ], "evaluation_scope": "Selected setup and threat-model sections read. Numerical tables were not independently reproduced.", "limitations": [ "The theorem concerns the specified latent watermark construction and assumptions.", "The REM3 adaptive-detector setting has no claimed cryptographic guarantee.", "A future NDSS 2027 banner with a placeholder DOI in the manuscript is insufficient to verify acceptance." ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.39189", "captured_at": "2026-11-02T17:13:32.804080+00:00", "http_status": 200, "byte_length": 41001, "sha256": "40139d26e126eaa6de77cf4e09ddc17a337fa953ab16bc5e4d4564fd5c65fbcb", "capture_record": "research-source-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.39189v1", "captured_at": "2026-11-02T17:13:33.654301+00:00", "http_status": 200, "byte_length": 875541, "sha256": "d2ba3fb93746af127f8180688a2668d0a28a6b3376bff8d8e600618786399ffd", "capture_record": "research-source-captures-2026-11-02.json" } ] }, { "id": "pp-mark", "title": "PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AI", "url": "https://arxiv.org/abs/2610.41170v1", "published_on": "2026-10-30", "review_level": "methods_and_limitations", "findings": [ "Statistical screening and full verification are separate. Full acceptance also requires a proof tied to an image and a committed embedding process. The proof checks that embedding relation, rather than replaying the generator." ], "effects": [ "add_media_proof_scope", "future_reproduction_candidate" ], "version": "v1", "models": [ "Stable Diffusion 2.1", "Stable Diffusion XL" ], "limitations": [ "The proof has trust, sampling and image-binding assumptions and additional computation.", "No independent run or code audit was performed.", "A repository name containing NeurIPS2026 does not verify publication acceptance." ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.41170", "captured_at": "2026-11-02T17:15:09.682207+00:00", "http_status": 200, "byte_length": 39726, "sha256": "f33036ec38f26dcbc36dd77c24e1ce388d569a2a686cf9cb29853dab3c8da8ff", "capture_record": "research-extra-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.41170v1", "captured_at": "2026-11-02T17:15:09.682381+00:00", "http_status": 200, "byte_length": 622981, "sha256": "29ffc9a634eb3bf35a893e798590faf1e64fdcf5f63f90a5bf70d1948543221e", "capture_record": "research-extra-captures-2026-11-02.json" } ] }, { "id": "image-sign-clamping", "title": "Attack-Resilient Multi-Bit Image Watermarking Framework via Latent Coordinate Sign Clamping", "url": "https://arxiv.org/abs/2610.40204v1", "published_on": "2026-10-29", "review_level": "abstract_and_version_screening", "findings": [ "A new media-watermark candidate was identified in the dated arXiv query." ], "effects": [ "record_candidate_no_claim_change" ], "version": "v1", "limitations": [ "Methods, controls, thresholds, sample counts and reuse terms have not received close review. Abstract performance figures are not adopted as Declawd findings." ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.40204", "captured_at": "2026-11-02T17:15:09.682532+00:00", "http_status": 200, "byte_length": 40823, "sha256": "5e61819b88395b2672010fec3e8dcdb7d39136a04733004d7ef017e5dc4143ad", "capture_record": "research-extra-captures-2026-11-02.json" } ] }, { "id": "claw", "title": "CLaW: Codec-Guided Adaptive Latent Watermarking for Traceable Diffusion Image Generation", "url": "https://arxiv.org/abs/2610.39160v1", "published_on": "2026-10-29", "review_level": "abstract_and_version_screening", "findings": [ "A new media-watermark candidate was identified in the dated arXiv query." ], "effects": [ "record_candidate_no_claim_change" ], "version": "v1", "limitations": [ "Methods, controls, thresholds, sample counts and reuse terms have not received close review. Abstract performance figures are not adopted as Declawd findings." ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.39160", "captured_at": "2026-11-02T17:15:09.916472+00:00", "http_status": 200, "byte_length": 42472, "sha256": "c8f511efecd44ca3927c57dcc77e6f418af3e710b68d66d600469c945baeb661", "capture_record": "research-extra-captures-2026-11-02.json" } ] }, { "id": "wm-basin", "title": "Watermark Basins: Black-Box Detection of Distilled LLMs", "url": "https://arxiv.org/abs/2610.37266v1", "published_on": "2026-10-27", "review_level": "abstract_dates_and_scope", "findings": [ "An older bibliography gap about detecting model distillation. The method analyses outputs of a suspect model using a clean probe model and a known watermark key. This is a model-level test and does not attribute a single arbitrary passage." ], "effects": [ "add_scope_distinction", "no_document_detector_claim" ], "version": "v1", "limitations": [ "The reported detection rates concern distilled research models and mathematical reasoning.", "Training, keys, student controls and thresholds were not independently reproduced." ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.37266", "captured_at": "2026-11-02T17:13:32.804237+00:00", "http_status": 200, "byte_length": 44370, "sha256": "f45f63e1440729b41c3a7e602a42f8ba93e39e26b12cdd4e282812d67e164a64", "capture_record": "research-source-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.37266v1", "captured_at": "2026-11-02T17:13:33.712591+00:00", "http_status": 200, "byte_length": 1620435, "sha256": "e3e9c354098d9e44359d7083dd973f94f619ab339ff92853102f23b234647696", "capture_record": "research-source-captures-2026-11-02.json" } ] }, { "id": "steam", "title": "Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation", "url": "https://aclanthology.org/2026.findings-emnlp.1115/", "published_on": "2026-10", "review_level": "published_methods_and_evaluation_scope", "findings": [ "The study evaluates translation attacks on KGW, X-SIR and a clustering variant across three open models. Its detector searches possible back-translation languages. Language and tokeniser coverage affect detection, so an English calibration should retain its language limit." ], "effects": [ "add_published_multilingual_evidence", "retain_language_specific_calibration" ], "publication_date_precision": "month, publisher PDF gives conference dates 24-29 October 2026", "models": [ "Aya-23-8B", "LLaMA-3.2-1B", "LLaMAX-8B" ], "data": { "texts": 500, "source": "English mC4" }, "threshold": { "metric": "TPR at 1% FPR, plus AUROC" }, "limitations": [ "Google Translate is an external component in the authors experiment.", "Searching 126 candidate languages needs search-aware calibration and an independent null set in any new reproduction.", "No production provider key or detector was tested here." ], "source_captures": [ { "url": "https://aclanthology.org/2026.findings-emnlp.1115/", "captured_at": "2026-11-02T17:15:09.947796+00:00", "http_status": 200, "byte_length": 41695, "sha256": "26aabe9ca711231099769f033d89a06cb9d71d38cefa566cd61b9d940bc25210", "capture_record": "research-extra-captures-2026-11-02.json" }, { "url": "https://aclanthology.org/2026.findings-emnlp.1115.pdf", "captured_at": "2026-11-02T17:19:07.431396+00:00", "http_status": 200, "byte_length": 5647076, "sha256": "fab105075afed9ecd731116c98e0a52732804c94b3b2c1a34465baae77bef89a", "capture_record": "research-more-captures-2026-11-02.json" } ] }, { "id": "disappearing-ink", "title": "Disappearing Ink: Obfuscation Breaks N-gram Code Watermarks in Theory and Practice", "url": "https://aclanthology.org/2026.findings-emnlp.1372/", "published_on": "2026-10", "review_level": "published_methods_and_evaluation_scope", "findings": [ "The authors evaluate WLLM, SWEET and SynthID reference schemes on two open models and Python and JavaScript tasks. Several standard obfuscators lower measured detection towards chance. The formal result assumes distribution consistency." ], "effects": [ "add_code_scope_and_transformation_limits", "no_vendor_removal_claim" ], "publication_date_precision": "month, publisher PDF gives conference dates 24-29 October 2026", "models": [ "LLaMA-3.1-8B-Instruct", "DeepSeek-Coder-33B-Base" ], "data": [ "HumanEval", "MBPP+ base", "HumanEval-X-JS", "MBPP-JS" ], "controls": [ "unwatermarked outputs", "Pass@1 before and after obfuscation" ], "limitations": [ "Uncompilable outputs are excluded from the detection AUROC and must remain counted separately in any reproduction.", "Reference-scheme results do not verify removal of a current provider watermark.", "No obfuscator or generated program was executed." ], "source_captures": [ { "url": "https://aclanthology.org/2026.findings-emnlp.1372/", "captured_at": "2026-11-02T17:15:09.977966+00:00", "http_status": 200, "byte_length": 45404, "sha256": "cf78be483cbf51208c75cbaff6384fa9a12dbef02a3f364e8e34be7ac9be89df", "capture_record": "research-extra-captures-2026-11-02.json" }, { "url": "https://aclanthology.org/2026.findings-emnlp.1372.pdf", "captured_at": "2026-11-02T17:19:07.431526+00:00", "http_status": 200, "byte_length": 1573045, "sha256": "d7e931a5e717aee7dd2edfbb2b38d1aa30192c408a1dd8b089a87e7806b5bf39", "capture_record": "research-more-captures-2026-11-02.json" } ] }, { "id": "luna", "title": "Linguistics-Aware Non-Distortionary LLM Watermarking", "url": "https://aclanthology.org/2026.emnlp-main.1203/", "published_on": "2026-10", "review_level": "publication_and_abstract_screening", "findings": [ "An older paper now has an EMNLP 2026 proceedings entry. It varies tournament depth with part-of-speech predictability and requires matching linguistic tools and a key for detection." ], "effects": [ "add_published_multilingual_candidate" ], "arxiv": "https://arxiv.org/abs/2606.00613v2", "first_submitted_on": "2026-05-30", "revised_on": "2026-08-29", "publication_date_precision": "month", "limitations": [ "Six languages and two domains do not establish provider-wide multilingual performance.", "No close replication or model/data licensing audit was performed. The linked repository has no root licence file in the captured tree." ], "source_captures": [ { "url": "https://arxiv.org/abs/2606.00613", "captured_at": "2026-11-02T17:13:33.116448+00:00", "http_status": 200, "byte_length": 41471, "sha256": "bff1dc5c11a9f719ed1a257ea40f69f43aa117a821b6181739e2d5dd041a51ae", "capture_record": "research-source-captures-2026-11-02.json" }, { "url": "https://aclanthology.org/2026.emnlp-main.1203/", "captured_at": "2026-11-02T17:15:10.139500+00:00", "http_status": 200, "byte_length": 43529, "sha256": "667769213e051f11d583dcfc27ff040ea9c880a60b030f77f1873613c1a7afca", "capture_record": "research-extra-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2606.00613v2", "captured_at": "2026-11-02T17:15:10.532495+00:00", "http_status": 200, "byte_length": 537779, "sha256": "9f0eace49b2d1c000c4c82778c2587eeb1c9c3b91a13fd842d0e75a809029210", "capture_record": "research-extra-captures-2026-11-02.json" } ] }, { "id": "signature-filtering", "title": "Signature filtering: a lightweight enhancement for statistical watermark detection in large language models", "url": "https://arxiv.org/abs/2606.18430v2", "published_on": "2026-06-16", "review_level": "abstract_dates_and_method_scope", "findings": [ "Detection-time filtering learns signature tokens from training data. A new comparison needs frozen training selection, separate calibration and untouched evaluation controls." ], "effects": [ "bibliography_candidate_no_current_metric_change" ], "version": "v2", "limitations": [ "No code, numerical result or security proof independently reproduced." ], "source_captures": [ { "url": "https://arxiv.org/abs/2606.18430", "captured_at": "2026-11-02T17:13:33.129152+00:00", "http_status": 200, "byte_length": 44978, "sha256": "b3bdc4afd17364de8ed6429f3646a0c3a93746b69271caaf182eb294a61e7331", "capture_record": "research-source-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2606.18430v2", "captured_at": "2026-11-02T17:15:10.535107+00:00", "http_status": 200, "byte_length": 742906, "sha256": "611acb98d4374de51c872c00cecc226ab07f29829508874b818ffb843ee97e06", "capture_record": "research-extra-captures-2026-11-02.json" } ] }, { "id": "auditable-compliance", "title": "Watermarking: from Impossibility to Auditable Compliance", "url": "https://arxiv.org/abs/2610.06317v1", "published_on": "2026-10-05", "review_level": "abstract_dates_and_method_scope", "findings": [ "A simulation and class-conditional conformal approach distinguish supported, unsupported and inconclusive outcomes. Coverage relies on exchangeability and does not establish legal compliance for Declawd." ], "effects": [ "bibliography_candidate_no_current_metric_change" ], "version": "v1", "limitations": [ "No code, numerical result or security proof independently reproduced." ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.06317", "captured_at": "2026-11-02T17:13:33.099052+00:00", "http_status": 200, "byte_length": 42827, "sha256": "539023f7840a5d0690406824a96cc9779bf9a414c56c3799d8b23c366e03fd66", "capture_record": "research-source-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.06317v1", "captured_at": "2026-11-02T17:13:33.909554+00:00", "http_status": 200, "byte_length": 261622, "sha256": "3ef8efae3e4d86307a1822ffc68bf75cb3ce603ea5cfdcf9ab493b6277434897", "capture_record": "research-source-captures-2026-11-02.json" } ] }, { "id": "robust-signatures", "title": "Unforgeable Watermarks for Language Models via Robust Signatures", "url": "https://arxiv.org/abs/2602.15323v1", "published_on": "2026-02-17", "review_level": "abstract_dates_and_method_scope", "findings": [ "The construction strengthens attribution guarantees against specified substitutions. Its Hamming-metric guarantee does not establish resistance to arbitrary paraphrases." ], "effects": [ "bibliography_candidate_no_current_metric_change" ], "version": "v1", "limitations": [ "No code, numerical result or security proof independently reproduced." ], "source_captures": [ { "url": "https://arxiv.org/abs/2602.15323", "captured_at": "2026-11-02T17:13:33.131221+00:00", "http_status": 200, "byte_length": 43134, "sha256": "480e78de167cd7ad80082eb23f39653d5755246ef04c970d7844e03b2e83dab1", "capture_record": "research-source-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2602.15323v1", "captured_at": "2026-11-02T17:13:34.327268+00:00", "http_status": 200, "byte_length": 1492183, "sha256": "456eb73c8ecb73c89463874cebaeeda96830b5f0bb6cd8e9804eaf3ae1b34793", "capture_record": "research-source-captures-2026-11-02.json" } ] }, { "id": "unified-generative-attack", "title": "A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models", "url": "https://arxiv.org/abs/2610.27653v2", "published_on": "2026-10-20", "updated_at": "2026-10-29T20:35:56Z", "version": "2", "review_level": "methods_threat_model_and_revision", "findings": [ "The v2 revision was submitted after the baseline. The attack selects continuations using probability shifts from black-box sampling, without a secret key. Its scope includes an alignment assumption between detection scores and those shifts." ], "limitations": [ "Reference models and research watermark schemes, rather than a demonstrated current production-provider detector. Sampling access and extra generation cost remain part of the attack.", "No numerical result was independently reproduced." ], "effects": [ "add_revised_attack_evidence", "no_provider_removal_claim" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.27653", "captured_at": "2026-11-02T17:22:06.048821+00:00", "http_status": 200, "byte_length": 42332, "sha256": "0c18c189b68ac51e8267f41c6bb30208b5a78a88cfbe47dbe28d6c980a53c7da", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.27653v2", "captured_at": "2026-11-02T17:22:06.943429+00:00", "http_status": 200, "byte_length": 761316, "sha256": "6e247336df4deb8726739fd7809f56553e3f33ebe1ac8e6510e240720e9988bd", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "fissionguard", "title": "FissionGuard: Testing Local Watermark Proportions with FDR Control", "url": "https://arxiv.org/abs/2610.11625v1", "published_on": "2026-10-08", "updated_at": "2026-10-08T10:04:50Z", "version": "1", "review_level": "methods_and_assumptions", "findings": [ "The method separates localisation and validation evidence through data fission, then tests local watermark proportions with online FDR control. Its null assumes unused watermark randomness at unmarked positions." ], "limitations": [ "FDR among reported passages differs from the probability of any false document alarm. Shared-key real token contexts require their own validity argument. Raw HTML retrieval timed out, while the web-reader version was readable.", "No numerical result was independently reproduced." ], "effects": [ "inform_registered_multiplicity_experiment", "retain_independence_limits" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.11625", "captured_at": "2026-11-02T17:22:06.049379+00:00", "http_status": 200, "byte_length": 40860, "sha256": "aac667d126c1e75559b292ad80b3648a45dbfe5169d655f70dfa0070446a66bf", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.11625v1", "captured_at": "2026-11-02T17:22:07.091995+00:00", "error": "The read operation timed out", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "blade", "title": "Token-Level Attribution of Multi-Mode LLM Watermarks: Optimal Rule and Belief Weighting", "url": "https://arxiv.org/abs/2610.23601v1", "published_on": "2026-10-16", "updated_at": "2026-10-16T15:18:28Z", "version": "1", "review_level": "abstract_and_method_scope", "findings": [ "The study treats attribution among several watermark modes as a testing problem. Taking the largest mode score without correction can inflate Type I error." ], "limitations": [ "Exact validity is conditional on the stated product model. The reported open-model power result was not reproduced.", "No numerical result was independently reproduced." ], "effects": [ "add_multiple_modes_scope" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.23601", "captured_at": "2026-11-02T17:22:06.049532+00:00", "http_status": 200, "byte_length": 41610, "sha256": "18937086103300b5519553dd3408654a9f08bbe05f0dbedded6eb07ed8816e57", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.23601v1", "captured_at": "2026-11-02T17:22:07.092136+00:00", "http_status": 200, "byte_length": 559415, "sha256": "6b37f20d0339e36dc7af4ef168c2d0ce23a739a7c0036f033c61a6568f7155ad", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "textgrain-sum-tests", "title": "textGrain watermarking is harder to detect: can sum-tests still do it optimally?", "url": "https://arxiv.org/abs/2610.17655v1", "published_on": "2026-10-13", "updated_at": "2026-10-13T03:33:56Z", "version": "1", "review_level": "theory_and_assumptions", "findings": [ "The working draft analyses a sparse-mixture model for edited textGrain text, including how transport columns affect detection boundaries. It proposes a weighted multiscale binomial scan with a finite-sample size result." ], "limitations": [ "Its theory concerns the model and specified token classes. It does not measure deployed OpenAI keys, settings or error rates. Valid one-test p-values remain necessary before correcting a search.", "No numerical result was independently reproduced." ], "effects": [ "add_independent_textgrain_theory", "retain_provider_boundary" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.17655", "captured_at": "2026-11-02T17:22:06.049658+00:00", "http_status": 200, "byte_length": 43217, "sha256": "28ef9824f758f524bca936baf24193bb0172eba61b3bc30e68949fac20bc46a8", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.17655v1", "captured_at": "2026-11-02T17:22:07.211109+00:00", "http_status": 200, "byte_length": 558798, "sha256": "ac2cf23e3b2ea545e23833be1eefceed9807aff12287bd144cc51b50e9bbe4ac", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "character-fairness", "title": "No Tokenizer, Still a Gap: Cross-Lingual Fairness of Homoglyph and Invisible-Character Watermarking", "url": "https://arxiv.org/abs/2610.36432v1", "published_on": "2026-10-27", "updated_at": "2026-10-27T00:27:01Z", "version": "1", "review_level": "abstract_and_method_scope", "findings": [ "The authors study character substitutions and invisible-character carriers across 40 language varieties and 24 scripts. Capacity and handling differ by script even without a tokeniser." ], "limitations": [ "These are post-generation character carriers, distinct from a statistical token watermark. Routine handling and controlled removal measurements do not justify deleting meaningful joiners in arbitrary language text.", "No numerical result was independently reproduced." ], "effects": [ "add_unicode_language_scope" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.36432", "captured_at": "2026-11-02T17:22:06.316151+00:00", "http_status": 200, "byte_length": 42012, "sha256": "2aef1c62e15308baed5726a5105e3036e3a9bf378a746a2cce4bfe40bf9d34d8", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.36432v1", "captured_at": "2026-11-02T17:22:08.514594+00:00", "http_status": 200, "byte_length": 446148, "sha256": "3a508f45dc2918b37e84799a83352df8170805d1a25a50a1c88eff176492a04d", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "factuality", "title": "Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinate", "url": "https://arxiv.org/abs/2610.04860v1", "published_on": "2026-10-04", "updated_at": "2026-10-04T02:02:08Z", "version": "1", "review_level": "methods_and_limitations", "findings": [ "The paper compares paired unmarked and marked open-model generations under a controlled retrieval-augmented setting, with factual transitions counted in both directions. Its headline uses production language, while the described experiments concern reference schemes and research models." ], "limitations": [ "This review does not adopt a causal claim about currently deployed Claude, ChatGPT or Gemini output. The authors acknowledge selected fact types, strong-marking limits and the need for more human evaluation.", "No numerical result was independently reproduced." ], "effects": [ "add_factuality_quality_control", "no_provider_quality_claim" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.04860", "captured_at": "2026-11-02T17:22:06.416720+00:00", "http_status": 200, "byte_length": 43943, "sha256": "630efc58666be0e394ecaade792ed56269c0c0094519a6b5356116fb982a8bc3", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.04860v1", "captured_at": "2026-11-02T17:22:08.589187+00:00", "http_status": 200, "byte_length": 300669, "sha256": "22632e11c0ef75f9f0fe36af91e01492971c092712d90fe47488f0c6cc7b8beb", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "soft-bindings-benchmark", "title": "Watermarks and Fingerprints as Soft Bindings for Content Provenance: An Open-Licence Benchmark for Images, Audio and Video", "url": "https://arxiv.org/abs/2610.04151v1", "published_on": "2026-10-02", "updated_at": "2026-10-02T23:52:30Z", "version": "1", "review_level": "methods_false_positives_and_limitations", "findings": [ "The generic TrustMark decoder fires on 5.9-15.3% of 85 unmarked images across variants. Expected-payload checks have zero observed matches in that set. The authors distinguish those observations from a theoretical per-key rate." ], "limitations": [ "The image-level upper bound is 4.2%, so zero observed expected-payload matches do not establish a population rate of 10^-6. The corpus is 85 images, 138 audio inputs from 46 clips and six short videos. Hardware colour conversion and achieved video error-target failures are retained.", "No numerical result was independently reproduced." ], "effects": [ "add_TrustMark_decision_rule_context", "preserve_exact_payload_and_small_control_limits" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.04151", "captured_at": "2026-11-02T17:22:06.529492+00:00", "http_status": 200, "byte_length": 43959, "sha256": "9a0b5b05cc2d3b9deeaeab6b93f926a235c2b5ec11fb16476f75c469ff24a4f0", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.04151v1", "captured_at": "2026-11-02T17:22:08.825480+00:00", "http_status": 200, "byte_length": 1128626, "sha256": "af6c7ff2b95dd25914960df1004ac1c5c2d6cf0975d4f3ecc9b7cafaf2fa49e3", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "targeted-displacement", "title": "Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Key", "url": "https://arxiv.org/abs/2610.18359v1", "published_on": "2026-10-13", "updated_at": "2026-10-13T13:24:34Z", "version": "1", "review_level": "abstract_and_threat_model", "findings": [ "The study targets embedded account identifiers using several generation accounts and model logits, without a watermark secret. This concerns attribution-message displacement." ], "limitations": [ "Access to logits and several accounts is a material requirement. No current provider deployment or attack was tested in this review.", "No numerical result was independently reproduced." ], "effects": [ "add_spoofing_scope" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.18359", "captured_at": "2026-11-02T17:22:06.590253+00:00", "http_status": 200, "byte_length": 41427, "sha256": "5a82b4f3a93847ef7b43efe3aa518aa60df3333d237cdae6c4a35acb42a0863f", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.18359v1", "captured_at": "2026-11-02T17:22:08.876359+00:00", "http_status": 200, "byte_length": 1156280, "sha256": "19fe75fd87d9153c80240a41900c2d1b4c709e6ec99b8c9e0439f6d371ec4ffe", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "public-detection", "title": "Could LLM Watermark Detection be Public?", "url": "https://arxiv.org/abs/2610.12106v1", "published_on": "2026-10-08", "updated_at": "2026-10-08T15:05:58Z", "version": "1", "review_level": "abstract_and_method_scope", "findings": [ "The paper studies split-key public detection and a private signal-imbalance test for detector-informed removal and forgery." ], "limitations": [ "A proposed split-key protocol does not establish that existing provider detectors are public, or that its private checks are available in current services.", "No numerical result was independently reproduced." ], "effects": [ "add_public_private_distinction" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.12106", "captured_at": "2026-11-02T17:22:06.612408+00:00", "http_status": 200, "byte_length": 41424, "sha256": "6ee34b7bb76ae4c2ee7541c54efeab7ce997e0e1d25e96cc855de35edc705509", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.12106v1", "captured_at": "2026-11-02T17:22:09.380471+00:00", "http_status": 200, "byte_length": 609681, "sha256": "b9ab73a7ed5fc9a956743d85e4d6dce1935953ff518b42cbec48486ed1d9c2ec", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "co-serving", "title": "Adaptive Co-Serving LLM Watermarking on Modern Inference Engines", "url": "https://arxiv.org/abs/2610.03955v2", "published_on": "2026-10-02", "updated_at": "2026-10-13T14:26:01Z", "version": "2", "review_level": "abstract_and_version_screening", "findings": [ "The SWIFT framework integrates candidate generation and watermarking with a serving backend." ], "limitations": [ "Reported serving and detection figures depend on the selected pipeline, baselines and calibration. They were not reproduced or adopted as current provider performance.", "No numerical result was independently reproduced." ], "effects": [ "serving_candidate_no_claim_change" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.03955", "captured_at": "2026-11-02T17:22:06.661094+00:00", "http_status": 200, "byte_length": 42533, "sha256": "1cbd9ad7c7a759c244d687b16d215d6d00066cc551f252b97ded17900ba385ad", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.03955v2", "captured_at": "2026-11-02T17:22:09.709213+00:00", "http_status": 200, "byte_length": 447075, "sha256": "7d9dd926a55d75e498a45c3c0e153d0dfccba5dcdf69b6bf4d3eb1a8e6dc6b17", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "latent-limits", "title": "On the Intrinsic Limited Robustness of Latent-Based Watermarking", "url": "https://arxiv.org/abs/2610.08178v1", "published_on": "2026-10-06", "updated_at": "2026-10-06T11:29:50Z", "version": "1", "review_level": "abstract_and_method_scope", "findings": [ "The paper analyses latent watermark sensitivity to image distortions and geometric changes." ], "limitations": [ "The theoretical and empirical scope concerns selected latent constructions and does not alter the fixed TrustMark result.", "No numerical result was independently reproduced." ], "effects": [ "media_limits_context" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.08178", "captured_at": "2026-11-02T17:22:06.763607+00:00", "http_status": 200, "byte_length": 41430, "sha256": "bfd105b0ab1908cbc825b6da3c010a7696de01aafe40e6a71f423a2dcccef5b5", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.08178v1", "captured_at": "2026-11-02T17:22:09.845153+00:00", "http_status": 200, "byte_length": 1016676, "sha256": "fe3cda7fb599d9619c083b7ffa50bb993d61dbb71036efc257308e8fa018c4aa", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "preempt", "title": "PREEMPT: Proactive Robustness Evaluation under Editing for Media Protection Techniques", "url": "https://arxiv.org/abs/2610.24205v1", "published_on": "2026-10-16", "updated_at": "2026-10-16T20:25:01Z", "version": "1", "review_level": "abstract_and_method_scope", "findings": [ "The framework tracks protection survival across sequential image edits rather than only one transformation." ], "limitations": [ "A new reproduction should preserve each edit stage, edit validity and quality costs. No protective method or editor was executed here.", "No numerical result was independently reproduced." ], "effects": [ "future_media_evaluation_candidate" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.24205", "captured_at": "2026-11-02T17:22:06.785362+00:00", "http_status": 200, "byte_length": 42842, "sha256": "13c52edcd5f9ce637f041040e9dc35adf09ab580d19738ac8848a6471c5c6cec", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.24205v1", "captured_at": "2026-11-02T17:22:10.613322+00:00", "http_status": 200, "byte_length": 180451, "sha256": "155834273892b9acf46d682edeef9f101ddb31f6aad41a4ec954ed3bf838ccc9", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "editing-survival", "title": "Latent Watermarks under Generative Editing: A Benchmark and Analysis of Detection Survival", "url": "https://arxiv.org/abs/2610.09702v1", "published_on": "2026-10-07", "updated_at": "2026-10-07T09:01:05Z", "version": "1", "review_level": "abstract_and_method_scope", "findings": [ "The study separates latent-watermark survival under semantic editing from later distortions and reports continuous score separation alongside thresholded detections." ], "limitations": [ "Aggregate detection rates can hide shrinking margins. Supporting artifacts are described as planned for separate release, so no reproducibility claim is adopted here.", "No numerical result was independently reproduced." ], "effects": [ "future_media_evaluation_candidate" ], "source_captures": [ { "url": "https://arxiv.org/abs/2610.09702", "captured_at": "2026-11-02T17:22:06.943264+00:00", "http_status": 200, "byte_length": 41902, "sha256": "51a1a291c4d35537ee183026570626d8417a5c4b97aedc1e10f43a27bf51c2b7", "capture_record": "research-october-captures-2026-11-02.json" }, { "url": "https://arxiv.org/html/2610.09702v1", "captured_at": "2026-11-02T17:22:10.850902+00:00", "http_status": 200, "byte_length": 718738, "sha256": "92ee050f2d969f77db7f6b00c87cc8c2e252884d4cf6c8edb0c993b8874825b9", "capture_record": "research-october-captures-2026-11-02.json" } ] }, { "id": "diffusion-language", "title": "Watermarking Diffusion Language Models with Learned Foresight and Balanced Bands", "url": "https://arxiv.org/abs/2610.32205v1", "published_on": "2026-10-23", "review_level": "abstract_and_method_scope", "findings": [ "The method explicitly counts each distinct context-token pair once, connecting repeated low-entropy text with the detector denominator." ], "limitations": [ "The reported results concern diffusion language models and research marks, not production text attribution. No numerical result was reproduced." ], "effects": [ "repetition_scope_context" ] } ], "follow_up": { "priority": 1, "name": "window-family-v1", "status": "separate_registration_in_preparation", "design": "Exhaustively enumerate all 2^12 independent Bernoulli(1/4) sequences with exact Fraction weights. Compare full-document, width 4 stride 1 and dyadic widths 2/4/8 at half-length strides, including final starts. Use exact binomial upper tails and compare uncorrected alpha 1/20 with Bonferroni alpha/m. Preserve all sequence outcomes and exact family error probabilities.", "scope": "A finite independent null model. No power, language, corpus, provider-watermark or attribution performance claim.", "independence_limit": "Bonferroni itself permits dependent tests when each fixed-window p-value is valid. The binomial p-values here rely on independently marked positions and do not establish validity for repeated real token contexts.", "resources": { "vendor_requests": 0, "paid_resources": 0, "third_party_executable_use": false } }, "decisions": { "claim_changes": [ "Add TextSeal2 and dated publication context, with authors own keys and the chosen textGrain reimplementation named.", "Keep access and compatibility limits for every production provider detector.", "Add multilingual, code and model-level distinctions where relevant." ], "code_changes": [ "Review current revocation and typed-trust-anchor behaviour separately in the C2PA inspector. This research does not require changing the frozen r2 scorer." ], "experiment_changes": [ "One registered exhaustive independent Bernoulli-null comparison of three window families, with exact weights and all outcomes retained." ], "negative_findings": [ "No provider production text detection or verified provider watermark removal was reproduced.", "Five previously cited arXiv papers have no later version in their captured histories.", "No correction or retraction was identified by the recorded bounded searches. This is not proof that none exists.", "No third-party executable, model generation, detector upload or live attack was run." ] }, "limitations": [ "This is a bounded discovery and selected reading record, not an exhaustive systematic review.", "Many candidate papers received abstract and method-scope screening only. Their numerical claims are not adopted.", "A paper or repository title does not verify conference acceptance.", "Code, model weights, datasets and generated outputs have distinct reuse terms.", "No reported numerical experiment was independently reproduced during this review." ], "recent_union": { "count": 6, "entries": [ { "url": "https://arxiv.org/abs/2610.41170v1", "title": "PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AI", "published_at": "2026-10-30T02:47:24Z", "updated_at": "2026-10-30T02:47:24Z" }, { "url": "https://arxiv.org/abs/2610.40613v1", "title": "TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races", "published_at": "2026-10-29T17:54:12Z", "updated_at": "2026-10-29T17:54:12Z" }, { "url": "https://arxiv.org/abs/2610.40204v1", "title": "Attack-Resilient Multi-Bit Image Watermarking Framework via Latent Coordinate Sign Clamping", "published_at": "2026-10-29T14:54:43Z", "updated_at": "2026-10-29T14:54:43Z" }, { "url": "https://arxiv.org/abs/2610.39189v1", "title": "Provably Secure Diffusion Watermarking Against Removal Adversaries with Batched Detector Access", "published_at": "2026-10-29T02:12:28Z", "updated_at": "2026-10-29T02:12:28Z" }, { "url": "https://arxiv.org/abs/2610.39160v1", "title": "CLaW: Codec-Guided Adaptive Latent Watermarking for Traceable Diffusion Image Generation", "published_at": "2026-10-29T01:46:18Z", "updated_at": "2026-10-29T01:46:18Z" }, { "url": "https://arxiv.org/abs/2610.27653v2", "title": "A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models", "published_at": "2026-10-20T05:12:12Z", "updated_at": "2026-10-29T20:35:56Z" } ], "method": "Union of both captured query outputs, filtered locally by the returned published/updated timestamps against the baseline." }, "coverage_gaps": [ { "kind": "arxiv_query_inconsistency", "missing_from_narrow_query": "https://arxiv.org/abs/2610.27653v2", "published_at": "2026-10-20T05:12:12Z", "updated_at": "2026-10-29T20:35:56Z", "finding": "The narrow date query returned 5 records and omitted this revision. The broader October query returned 85 records and included it. The recent union has 6 records. No complete revision feed is claimed." }, { "kind": "source_fetch", "url": "https://arxiv.org/html/2610.11625v1", "finding": "Raw HTML request timed out. A web-reader extraction was read as an alternative. The failure remains in the capture record." } ], "october_candidate_screen": [ { "url": "https://arxiv.org/abs/2610.41170v1", "title": "PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AI", "published_at": "2026-10-30T02:47:24Z", "updated_at": "2026-10-30T02:47:24Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.27653v2", "title": "A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models", "published_at": "2026-10-20T05:12:12Z", "updated_at": "2026-10-29T20:35:56Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.40613v1", "title": "TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races", "published_at": "2026-10-29T17:54:12Z", "updated_at": "2026-10-29T17:54:12Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.40204v1", "title": "Attack-Resilient Multi-Bit Image Watermarking Framework via Latent Coordinate Sign Clamping", "published_at": "2026-10-29T14:54:43Z", "updated_at": "2026-10-29T14:54:43Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.39189v1", "title": "Provably Secure Diffusion Watermarking Against Removal Adversaries with Batched Detector Access", "published_at": "2026-10-29T02:12:28Z", "updated_at": "2026-10-29T02:12:28Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.39160v1", "title": "CLaW: Codec-Guided Adaptive Latent Watermarking for Traceable Diffusion Image Generation", "published_at": "2026-10-29T01:46:18Z", "updated_at": "2026-10-29T01:46:18Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.38793v1", "title": "Trustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and Robustness", "published_at": "2026-10-28T20:00:47Z", "updated_at": "2026-10-28T20:00:47Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.38579v1", "title": "Session-Bound Behavioral Watermarking for Autonomous LLM Agents", "published_at": "2026-10-28T10:09:23Z", "updated_at": "2026-10-28T10:09:23Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.33437v2", "title": "Combinatorial Lock for Trojan-Resilient AI Engines via Hash-Assisted Spectral Filtering", "published_at": "2026-10-24T04:26:13Z", "updated_at": "2026-10-27T14:09:43Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.37266v1", "title": "Watermark Basins: Black-Box Detection of Distilled LLMs", "published_at": "2026-10-27T13:59:34Z", "updated_at": "2026-10-27T13:59:34Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.36432v1", "title": "No Tokenizer, Still a Gap: Cross-Lingual Fairness of Homoglyph and Invisible-Character Watermarking", "published_at": "2026-10-27T00:27:01Z", "updated_at": "2026-10-27T00:27:01Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.34942v1", "title": "Intellectual Property Protection of Hyperdimensional Computing Classifiers: Black-Box Ownership Verification via Model Watermarking", "published_at": "2026-10-26T07:08:36Z", "updated_at": "2026-10-26T07:08:36Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.33194v1", "title": "Support-guided OOD Removal with Diffusion", "published_at": "2026-10-23T18:41:53Z", "updated_at": "2026-10-23T18:41:53Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.09552v2", "title": "Constitution-Guided Watermarking", "published_at": "2026-10-07T06:50:47Z", "updated_at": "2026-10-23T16:12:04Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.32205v1", "title": "Watermarking Diffusion Language Models with Learned Foresight and Balanced Bands", "published_at": "2026-10-23T05:58:58Z", "updated_at": "2026-10-23T05:58:58Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.32092v1", "title": "AgentTrace: Execution-Level Fingerprinting of Black-Box LLM Agents", "published_at": "2026-10-23T02:55:15Z", "updated_at": "2026-10-23T02:55:15Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.32017v1", "title": "SynMark: Semantic-Coordinate Multi-Bit Watermarking during LLM Code Generation", "published_at": "2026-10-23T00:36:20Z", "updated_at": "2026-10-23T00:36:20Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.30601v1", "title": "HiMark: Hierarchical and Controllable Multi-bit Watermarking for Large Language Models", "published_at": "2026-10-22T02:05:29Z", "updated_at": "2026-10-22T02:05:29Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.30347v1", "title": "FiLM-CAM: Keyed Feature Modulation for Conditional-Access Watermarking", "published_at": "2026-10-21T19:06:56Z", "updated_at": "2026-10-21T19:06:56Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.11399v3", "title": "Estimating Great Expectations Under Autoregressive Language Models with Potentials", "published_at": "2026-10-08T07:30:43Z", "updated_at": "2026-10-21T11:58:57Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.28076v1", "title": "On the Vulnerabilities and Data-Free Removal of Watermarks in Batch Normalization Layers", "published_at": "2026-10-20T11:55:21Z", "updated_at": "2026-10-20T11:55:21Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.13357v3", "title": "ECGWmark: Deep Watermarking of Electrocardiogram Signals With Error-Correcting Codes", "published_at": "2026-10-09T10:32:03Z", "updated_at": "2026-10-20T06:24:46Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.27079v1", "title": "ClockMark: Adaptive and Host-Dependent Watermarking for Large Language Models", "published_at": "2026-10-19T18:00:03Z", "updated_at": "2026-10-19T18:00:03Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.26682v1", "title": "BrushOff: Stroke-Based Re-rendering as a Watermark Removal Attack on Painting", "published_at": "2026-10-19T16:28:52Z", "updated_at": "2026-10-19T16:28:52Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.25982v1", "title": "Auditor-Assisted Summary-Channel Verification for Hosted LLM Identity Substitution", "published_at": "2026-10-19T08:09:11Z", "updated_at": "2026-10-19T08:09:11Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.24382v1", "title": "Is This Your Agent? Identity Watermarking for Agent Systems in Dynamic Environments", "published_at": "2026-10-17T02:27:55Z", "updated_at": "2026-10-17T02:27:55Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.24205v1", "title": "PREEMPT: Proactive Robustness Evaluation under Editing for Media Protection Techniques", "published_at": "2026-10-16T20:25:01Z", "updated_at": "2026-10-16T20:25:01Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.23601v1", "title": "Token-Level Attribution of Multi-Mode LLM Watermarks: Optimal Rule and Belief Weighting", "published_at": "2026-10-16T15:18:28Z", "updated_at": "2026-10-16T15:18:28Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.21760v2", "title": "Beyond Generation: Using Multimodal LLMs as Detectors of LLM-Generated Deepfake Facial Images", "published_at": "2026-10-15T12:16:09Z", "updated_at": "2026-10-16T10:56:15Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.22810v1", "title": "Watermarkability: Measuring and Improving Language-Model Compatibility with Logit-Based Watermarks", "published_at": "2026-10-16T01:40:39Z", "updated_at": "2026-10-16T01:40:39Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.22296v1", "title": "Backward Compatibility in Zero-Bit Neural Audio Watermarking", "published_at": "2026-10-15T17:45:27Z", "updated_at": "2026-10-15T17:45:27Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.22457v1", "title": "Erase the Mark, Preserve the Motion: Temporally Consistent Removal of Video Watermarks", "published_at": "2026-10-15T16:36:32Z", "updated_at": "2026-10-15T16:36:32Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.21031v1", "title": "Blind Watermarking of Software Repositories via Module Placement", "published_at": "2026-10-15T00:04:50Z", "updated_at": "2026-10-15T00:04:50Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.20827v1", "title": "Performance Characterization of Pulsar's Software-defined Watermark Verifier", "published_at": "2026-10-14T19:14:18Z", "updated_at": "2026-10-14T19:14:18Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.20278v1", "title": "A Valid Watermark Is Not a Valid Identity: Spatial-Spectral Adversarial Face Evasion with Watermark Preservation", "published_at": "2026-10-14T14:37:52Z", "updated_at": "2026-10-14T14:37:52Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.20105v1", "title": "CochlearMark: Audio Watermarking via Phase Locked Auditory Nerve Representations", "published_at": "2026-10-14T12:38:56Z", "updated_at": "2026-10-14T12:38:56Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.15725v2", "title": "SkillMarker: A KGW-Based Watermarking Method for Agent Skill Ownership Verification", "published_at": "2026-10-11T16:04:26Z", "updated_at": "2026-10-14T12:38:56Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.16336v2", "title": "Doctor Trigger: A Framework for Release-Bound Face Verification", "published_at": "2026-10-12T07:55:48Z", "updated_at": "2026-10-14T05:42:02Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.09339v2", "title": "Sequential resetting procedures and false discovery rate", "published_at": "2026-10-07T02:56:44Z", "updated_at": "2026-10-13T15:18:10Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.03955v2", "title": "Adaptive Co-Serving LLM Watermarking on Modern Inference Engines", "published_at": "2026-10-02T19:12:42Z", "updated_at": "2026-10-13T14:26:01Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.18359v1", "title": "Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Key", "published_at": "2026-10-13T13:24:34Z", "updated_at": "2026-10-13T13:24:34Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.18072v1", "title": "LensErase: A Foundation Model for Erase Anything", "published_at": "2026-10-13T09:56:02Z", "updated_at": "2026-10-13T09:56:02Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.17810v1", "title": "Perturbation, Not Provenance: Why Activation Steering Does Not Make a Robust Text Watermark", "published_at": "2026-10-13T06:36:41Z", "updated_at": "2026-10-13T06:36:41Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.17655v1", "title": "textGrain watermarking is harder to detect: can sum-tests still do it optimally?", "published_at": "2026-10-13T03:33:56Z", "updated_at": "2026-10-13T03:33:56Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.08137v2", "title": "Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering", "published_at": "2026-10-06T10:53:19Z", "updated_at": "2026-10-12T05:52:31Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.16087v1", "title": "Confidential Error-Correcting Codes", "published_at": "2026-10-12T02:54:33Z", "updated_at": "2026-10-12T02:54:33Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.15976v1", "title": "Embedding Information in Policy Randomness: Distribution-Preserving Implicit Communication in MDPs", "published_at": "2026-10-11T23:20:39Z", "updated_at": "2026-10-11T23:20:39Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.15728v1", "title": "Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding", "published_at": "2026-10-11T16:05:11Z", "updated_at": "2026-10-11T16:05:11Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.15685v1", "title": "Radioactive Feedback: Tracing Models Trained by Label-Only LLM Supervision", "published_at": "2026-10-11T15:09:58Z", "updated_at": "2026-10-11T15:09:58Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.15082v1", "title": "GAMW: Generation-Aware Mel-Domain Watermarking for TTS Traceability", "published_at": "2026-10-10T17:30:02Z", "updated_at": "2026-10-10T17:30:02Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.14606v1", "title": "Decision Uncertainty-Oriented Watermarking (DUOW): Securing Multi-Agent Routing Against Policy Cloning", "published_at": "2026-10-10T05:51:13Z", "updated_at": "2026-10-10T05:51:13Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.14470v1", "title": "When Is a Reconciliation Break Real? A Temporal Correctness Contract for Streaming Financial Reconciliation", "published_at": "2026-10-10T01:56:57Z", "updated_at": "2026-10-10T01:56:57Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.14427v1", "title": "ByteMark: A Unified Byte-Level Watermark for Detection Across Language Models", "published_at": "2026-10-10T00:46:38Z", "updated_at": "2026-10-10T00:46:38Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.14378v1", "title": "Tokenization-Invariant Watermarking: A Byte-Local Method for LLM Text", "published_at": "2026-10-09T22:52:04Z", "updated_at": "2026-10-09T22:52:04Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.14289v1", "title": "Watermarking for Byzantine Robust LLM Training", "published_at": "2026-10-09T20:09:57Z", "updated_at": "2026-10-09T20:09:57Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.13367v1", "title": "Secrets in Preamble: Practical and Robust PHY Information Hiding for Wi-Fi", "published_at": "2026-10-09T10:40:30Z", "updated_at": "2026-10-09T10:40:30Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.12952v1", "title": "WaveMark: Robust Wavelet-Domain Image Watermarking for Diffusion Models", "published_at": "2026-10-09T03:46:45Z", "updated_at": "2026-10-09T03:46:45Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.12106v1", "title": "Could LLM Watermark Detection be Public?", "published_at": "2026-10-08T15:05:58Z", "updated_at": "2026-10-08T15:05:58Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.11848v1", "title": "SemField: A Simple, Linear, Continuous, yet Robust Semantic Watermark", "published_at": "2026-10-08T12:35:11Z", "updated_at": "2026-10-08T12:35:11Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.11625v1", "title": "FissionGuard: Testing Local Watermark Proportions with FDR Control", "published_at": "2026-10-08T10:04:50Z", "updated_at": "2026-10-08T10:04:50Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.11488v1", "title": "MARC: Multi-Bit Watermarking for Autoregressive Audio Generation against Codec Attacks", "published_at": "2026-10-08T08:30:17Z", "updated_at": "2026-10-08T08:30:17Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.11364v1", "title": "FlyMark: Training-Free Invisible Watermarking of 3D Gaussian Splatting via a Fruit Fly Connectome", "published_at": "2026-10-08T06:56:53Z", "updated_at": "2026-10-08T06:56:53Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.11290v1", "title": "ProxyEraseAgent: Blind Watermark Removal in the Wild", "published_at": "2026-10-08T05:53:28Z", "updated_at": "2026-10-08T05:53:28Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.09755v1", "title": "Diffusion-Generated Image Watermarking: A Two-Axis Taxonomy and Three Protocol-Bounded Case Studies", "published_at": "2026-10-07T09:42:46Z", "updated_at": "2026-10-07T09:42:46Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.09702v1", "title": "Latent Watermarks under Generative Editing: A Benchmark and Analysis of Detection Survival", "published_at": "2026-10-07T09:01:05Z", "updated_at": "2026-10-07T09:01:05Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.08668v1", "title": "Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents", "published_at": "2026-10-06T16:50:42Z", "updated_at": "2026-10-06T16:50:42Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.08316v1", "title": "MARCO: The Radioactive Watermark for Protein Generative Models", "published_at": "2026-10-06T13:18:22Z", "updated_at": "2026-10-06T13:18:22Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.08178v1", "title": "On the Intrinsic Limited Robustness of Latent-Based Watermarking", "published_at": "2026-10-06T11:29:50Z", "updated_at": "2026-10-06T11:29:50Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.06846v1", "title": "BiasFlow: Geometric Monitoring and Backbone Regularization for Spurious Feature Reliance", "published_at": "2026-10-05T17:59:28Z", "updated_at": "2026-10-05T17:59:28Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.06317v1", "title": "Watermarking: from Impossibility to Auditable Compliance", "published_at": "2026-10-05T13:32:41Z", "updated_at": "2026-10-05T13:32:41Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.05712v1", "title": "SimpleMark: Fast Multi-Bit Text Watermarking under f -Divergence Constraints", "published_at": "2026-10-05T02:51:43Z", "updated_at": "2026-10-05T02:51:43Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.05453v1", "title": "The Poisoned Conversation: Privacy-Leaking Watermarks in Unified Multimodal Models", "published_at": "2026-10-04T18:53:31Z", "updated_at": "2026-10-04T18:53:31Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.05323v1", "title": "Grammar-Guided Code Watermarking with Green Temperature", "published_at": "2026-10-04T15:45:19Z", "updated_at": "2026-10-04T15:45:19Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.05215v1", "title": "NeuMark-Native: Robust Text-to-Speech-Native Watermarking Through Full Utilization of Neural Audio Codec Latent Space", "published_at": "2026-10-04T13:32:32Z", "updated_at": "2026-10-04T13:32:32Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.04860v1", "title": "Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinate", "published_at": "2026-10-04T02:02:08Z", "updated_at": "2026-10-04T02:02:08Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.04763v1", "title": "Tracing model-generated DNA with position-independent watermarking", "published_at": "2026-10-03T20:56:43Z", "updated_at": "2026-10-03T20:56:43Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.04235v1", "title": "Learning to Watermark Speech Synthesis Against Model-Driven Reconstruction", "published_at": "2026-10-03T02:57:00Z", "updated_at": "2026-10-03T02:57:00Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.04169v1", "title": "Language Model Fingerprinting Requires Rethinking Watermark Teachers", "published_at": "2026-10-03T00:19:29Z", "updated_at": "2026-10-03T00:19:29Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.04151v1", "title": "Watermarks and Fingerprints as Soft Bindings for Content Provenance: An Open-Licence Benchmark for Images, Audio and Video", "published_at": "2026-10-02T23:52:30Z", "updated_at": "2026-10-02T23:52:30Z", "decision": "selected_for_review", "finding": null }, { "url": "https://arxiv.org/abs/2610.04021v1", "title": "The Reported Engagement with AI Level (REAL) Rating: A Framework for Disclosing Human-AI Collaboration", "published_at": "2026-10-02T20:28:05Z", "updated_at": "2026-10-02T20:28:05Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.03928v1", "title": "DABACO: A Multi-Camera Dataset and Benchmark for Screen Localization and Pointing Estimation", "published_at": "2026-10-02T18:41:34Z", "updated_at": "2026-10-02T18:41:34Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.03166v1", "title": "LiBRA: Detection-Aware Image Watermark Removal via Bidirectional Latent Optimization", "published_at": "2026-10-02T11:44:09Z", "updated_at": "2026-10-02T11:44:09Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.03124v1", "title": "The Fragility of Trigger-Tag Mechanisms for Misuse Detection in Open-Weight LLMs", "published_at": "2026-10-02T10:45:14Z", "updated_at": "2026-10-02T10:45:14Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.02817v1", "title": "RMCW: A Deletion-Robust Watermark Based on Reed--Muller Codes for Language Models", "published_at": "2026-10-02T05:05:06Z", "updated_at": "2026-10-02T05:05:06Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." }, { "url": "https://arxiv.org/abs/2610.02010v1", "title": "Exploring Weaknesses of Generative Image Watermarks against Latent Frequency Masking", "published_at": "2026-10-01T16:36:29Z", "updated_at": "2026-10-01T16:36:29Z", "decision": "metadata_only_requires_further_review", "finding": "No technical conclusion adopted from this record." } ] }