On the Reliability of Watermarks for Large Language Models

Kirchenbauer et al. themselves. Finds watermarks remain detectable after human and machine paraphrasing; after strong human paraphrasing detection needed ~800 tokens on average at a 1e-5 false-positive threshold. Attributes this partly to paraphrases statistically leaking n-grams of the original. This is the PRO-watermark side of the contested paraphrase record.

paper

2023-06-07

2026-10-04