Kirchenbauer and others
The basis for the green-list method and repeated-context rule used in this demo.
A Watermark for Large Language ModelsThe research and primary sources behind the demo. Reviewed 12 August 2026.
Anthropic says its detector is not conclusive in either direction. A detected mark can mean that Claude processed the content, but it is not proof. Claude may only have proofread, translated or converted it.
No mark does not mean that Claude or another model was not involved.
Anthropic has not published its watermarking method. This demo does not claim to reproduce it.
Article 50(2) requires providers to mark AI-generated or manipulated output in a machine-readable form where technically feasible.
It does not require a particular method. It also excludes assistive standard editing, and cases where the output does not substantially alter the input or its meaning.
Anthropic says models launched in the EU from 2 August 2026 support marking at launch, and that the marks apply worldwide rather than only in the EU. The consolidated Act gives some existing systems until 2 December 2026.
The basis for the green-list method and repeated-context rule used in this demo.
A Watermark for Large Language ModelsA separate production-scale text watermark. It does not describe this demo or Claude.
Scalable watermarking for identifying large language model outputsResearch on character edits and four attempted defences.
Character-Level Perturbations Disrupt LLM WatermarksText detectors are not watermark detectors, but they show why a score must not become a judgement about a person.
A 2023 study found severe errors against non-native English writers in seven tested detectors. A 2026 Czech study did not find the same pattern across three detector families. The results depend on the language, population and detector.
C2PA can attach signed claims about sources, actions and history to a file. Validation can show that the signed record still matches the file.
It cannot show that the assertions inside a claim are true, and it does not identify the responsible person on its own: that needs a separate identity assertion or a controlled workflow. Its guidance recommends creating records at meaningful points in a workflow, not after every action.
C2PA distinguishes assertions created by the signer, which the signature covers, from assertions gathered from elsewhere, which it does not vouch for. Its claim generator is software, not a person. A data hash can cover selected byte ranges, while a soft binding can help find a separate manifest.
The evaluation uses public-domain works published long before modern language models. Authors are separated between the calibration and evaluation sets.
| Author | Work | Source |
|---|---|---|
| Adam Smith | The Wealth of Nations | Project Gutenberg 3300 |
| Benjamin Franklin | Autobiography | Project Gutenberg 20203 |
| Charles Darwin | The Origin of Species | Project Gutenberg 2009 |
| David Hume | An Enquiry Concerning Human Understanding | Project Gutenberg 9662 |
| David Ricardo | Principles of Political Economy | Project Gutenberg 33310 |
| Henry David Thoreau | Walden | Project Gutenberg 205 |
| John Locke | An Essay Concerning Human Understanding | Project Gutenberg 10615 |
| John Ruskin | The Crown of Wild Olive | Project Gutenberg 26716 |
| John Stuart Mill | On Liberty | Project Gutenberg 34901 |
| John Tyndall | Fragments of Science | Project Gutenberg 24527 |
| Michael Faraday | The Chemical History of a Candle | Project Gutenberg 14474 |
| Ralph Waldo Emerson | Essays | Project Gutenberg 16643 |
| T. R. Malthus | An Essay on the Principle of Population | Project Gutenberg 4239 |
| Thomas Henry Huxley | Evidence as to Man's Place in Nature | Project Gutenberg 2931 |
| Thomas Paine | Common Sense | Project Gutenberg 147 |
| Thorstein Veblen | The Theory of the Leisure Class | Project Gutenberg 833 |
Public domain in the United States. Read the Project Gutenberg licence and terms.