AgentMark: Utility-Preserving Behavioral Watermarking for Agents (2026.acl-long)
Copied to clipboard
| Challenge: | Recent advances in large language models (LLMs) have improved text generation and reasoning. |
| Approach: | They propose a behavioral watermarking framework that embeds multi-bit identifiers into planning decisions while preserving utility. |
| Outcome: | The proposed framework embeds multi-bit provenance into planning decisions while preserving utility. |
Similar Papers
PostMark: A Robust Blackbox Watermark for Large Language Models (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing methods to detect LLM-generated text require access to the underlying LLM’s logits, which LLM providers are loath to share due to fears of model distillation. |
| Approach: | They develop a post-hoc watermarking procedure that inserts an input-dependent set of words into the text after the decoding process has completed. |
| Outcome: | The proposed method is more robust to paraphrasing attacks than existing methods. |
A Reinforcement Learning Framework for Robust and Secure LLM Watermarking (2026.eacl-long)
Copied to clipboard
| Challenge: | Existing watermarking algorithms rely on heuristic green/red token lists . however, these lists are inconsistent and can be compromised . |
| Approach: | They propose a framework for robust and secure LLM watermarking using reinforcement learning. |
| Outcome: | The proposed method achieves state-of-the-art trade-off across all criteria with notable improvements in resistance to spoofing attacks without degrading other criteria. |
EntroBench: Evaluating LLM Watermarking Under Multi-Entropy Scenarios and Practical User Operations (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing evaluations of large language models (LLMs) watermarking are limited to fixed entropy settings. |
| Approach: | They propose a benchmark for LLM watermarking that systematically covers three entropy levels and seven representative tasks. |
| Outcome: | The proposed framework covers three entropy levels and seven representative tasks. |
MorphMark: Flexible Adaptive Watermarking for Large Language Models (2025.acl-long)
Copied to clipboard
| Challenge: | Existing methods for tracing text origins struggle with a watermark effectiveness dilemma . weaker watermarks preserve text quality, while stronger ones enhance effectiveness . |
| Approach: | They propose a method that adjusts watermark strength in response to changes in a key factor . they first formalize the problem within a multi-objective trade-off analysis framework . |
| Outcome: | The proposed method improves watermark effectiveness but reduces text quality . the proposed method prioritizes flexibility and time and space efficiency . |
XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts (2026.acl-long)
Copied to clipboard
| Challenge: | Existing methods for embedding binary messages into LLM-generated text suffer from key limitations, such as a poor trade-off between text quality and decoding accuracy. |
| Approach: | They propose a method for embedding binary messages into Large Language Model (LLM)-generated text that uses a limited number of tokens to decode and recover the encoded message. |
| Outcome: | The proposed method significantly outperforms existing methods in multiple downstream tasks and will be made publicly available upon acceptance. |
Watermark under Fire: A Robustness Evaluation of LLM Watermarking (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Various watermarking methods have been proposed to identify LLM-generated texts . lack of unified evaluation platforms has left many critical questions unanswered . |
| Approach: | They systematize existing LLM watermarkers and watermark removal attacks and develop a unified platform that integrates them. |
| Outcome: | The proposed systematizes existing LLM watermarkers and watermark removal attacks, mapping out their design spaces. |
Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing detection methods for large language models rely on fixed strategies to steal watermarks. |
| Approach: | They propose a novel steal-based watermark algorithm that derives watermark information from watermarked texts to craft highly targeted adversarial attacks. |
| Outcome: | The proposed system significantly increases steal efficiency against target watermarks under identical conditions. |
SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models (2025.emnlp-main)
Copied to clipboard
| Challenge: | Experimental results demonstrate that SimMark surpasses previous sentence-level watermarking techniques in robustness, sampling efficiency, and applicability across diverse domains. |
| Approach: | They propose a sentence-level watermarking algorithm that makes LLM outputs traceable without requiring access to model internals. |
| Outcome: | The proposed algorithm surpasses previous sentence-level watermarking techniques in robustness, sampling efficiency, and applicability across diverse domains while maintaining the text quality and fluency. |
Position: LLM Watermarking Should Align Stakeholders’ Incentives for Practical Adoption (2026.findings-acl)
Copied to clipboard
| Challenge: | despite advances in watermarking algorithms, real-world deployment remains limited . model watermarks can be used to protect intellectual property and promote trust in AI . |
| Approach: | They propose to revisit three classes of watermarking to examine incentives for large language models . model watermarks naturally aligns with LLM provider interests, yet faces new challenges in open-source ecosystems . |
| Outcome: | The proposed methods can be used in dataset decontamination, user-controlled provenance, and in-context watermarking. |
Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing secret-key schemes tightly couple detection with injection . this dependency creates a fundamental barrier for real-world governance . |
| Approach: | et al. introduce a black-box framework for non-intrusive, third-party watermark verification . they propose a proxy model to amplify watermark-relevant signals and complementary relative measurements . |
| Outcome: | a new framework decouples detection from injection and assesses alignment of query text with watermark distributions. |