WATERMARK SLAYER
Claude text watermarks: what can be verified
Watermark claims are useful only when they name the mechanism, the evidence, and the test. This review separates first-party statements, current reporting, fixture results, and unresolved detector claims.
Verified first-party statements
Anthropic's Transparency Hub is the first source to check for current model and policy statements. Watermark Slayer does not convert a third-party headline, a search trend, or a tool vendor's claim into proof about every Claude output.
Dated third-party reporting
Reporting published in August 2026 describes a surge of Claude watermark-remover tools and notes that many cannot validate their removal claims without a public detector. This is secondary reporting, not a Watermark Slayer removal guarantee.
Watermark Slayer fixture results
The public registry proves only deterministic behavior covered by named fixtures: literal Unicode observations, bounded supported edits, and report-only structural candidates. Each artifact page publishes its fixture identifier, last-tested date, action, and limitations.
Three mechanisms, three tests
Observable Unicode artifacts can be counted directly. Statistical watermarks require a matching detector and an adequately designed evaluation. Signed provenance requires parsing and cryptographic verification against a trust model. Passing one test says nothing automatic about the other two.
Unresolved claims
Without reproducible primary evidence or an appropriate public detector, a claim that wording-level watermarking was removed remains unresolved. Watermark Slayer publishes that limit instead of substituting a generic AI-detector score.