WATERMARK SLAYER

How AI text watermarks and provenance differ

Hidden Unicode artifacts, statistical generation-time signals, and signed provenance are different mechanisms with different evidence and limits.

Last reviewed

Unicode artifacts

Format and control characters are literal code points in the text. They can be inspected deterministically, but their presence is never inherently malicious and does not identify an author or generator.

Generation-time statistical watermarking

Google describes SynthID Text as changing token probabilities during generation and later looking for a statistical signal. That is not a Unicode-character scheme, and it is not a universal authorship verdict.

Signed provenance

C2PA defines provenance structures, including wrapping for unstructured text. Recognizing candidate framing is not the same as validating signatures or trust chains; launch inspection reports structural candidates as detected but unverified.

Treat classifiers as limited evidence

Text classifiers can be unreliable and context-dependent. OpenAI retired its earlier classifier because of its low rate of accuracy. Watermark Slayer does not provide a detector score or classify a draft's author.

Evidence