Watermarking Without Standards Is Not AI Governance
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Watermarking has emerged as a leading technical proposal for attributing generative AI content and is increasingly cited in global governance frameworks. This position paper argues that current implementations risk serving as symbolic compliance rather than delivering effective oversight. We identify a growing gap between regulatory expectations and the technical limitations of existing watermarking schemes. Through analysis of policy proposals and industry practices, we show how incentive structures disincentivize robust, auditable deployments. To realign watermarking with governance goals, we propose a three-layer framework encompassing technical standards, audit infrastructure, and enforcement mechanisms. Without enforceable requirements and independent verification, watermarking will remain inadequate for accountability and ultimately undermine broader efforts in AI safety and regulation.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 24 of its 49 references that are in the map. First posted on arXiv 27 May 2025.
Builds on
24 of 49 references.
Closest ancestors · 9
Same direction, newest first
- 2025SoK: How Robust is Audio Watermarking in Generative AI models?24 Mar
- 2024SoK: Watermarking for AI-Generated Content27 Nov
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024Watermark Stealing in Large Language Models29 Feb
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AI2 Jun
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
- 2023Can AI-Generated Text be Reliably Detected?17 Mar
- 2023A Watermark for Large Language Models24 Jan
Other references · 15
- 2024GPT-4o System Cardcited by 4,588
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2018Model Cards for Model Reportingcited by 1,080
- 2016Stealing Machine Learning Models via Prediction APIscited by 619
- 2022AudioGen: Textually Guided Audio Generationcited by 295
- 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 97
- 2024Proactive Detection of Voice Cloning with Localized Watermarkingcited by 78
- 2024Watermark Anything with Localized Messagescited by 53
- 2023Who Audits the Auditors? Recommendations from a field scan of the algorithmic auditing ecosystemcited by 52
- 2023WavMark: Watermarking for Audio Generationcited by 50
- 2024Video Seal: Open and Efficient Video Watermarkingcited by 48
- 2025OpenAI's Approach to External Red Teaming for AI Models and Systemscited by 28
Built on by
Citing papers per year: 2025: 1; 2026: 8.
9 papers.
- 2026The Impact of AI-Generated Text on the Internetcited by 6
- 2026Authenticated Contradictions from Desynchronized Provenance and Watermarkingcited by 3
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Auditing Cross-Lingual Fairness in Language Model Watermarkingcited by 1
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technologycited by 0
- 2026The End of Trust: How Agentic AI Breaks Security Assumptionscited by 0
- 2026"AI Watermarking": Bridging Policy Discourse and Technical Capabilitiescited by 0
- 2026AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluationcited by 0
- 2026Watermarks Without Verification: AI Text Watermarking After the EU AI Actcited by 0
- 2026Watermarks Without Verification: AI Text Watermarking After the EU AI Act9 Sep 2026
- 2026Auditing Cross-Lingual Fairness in Language Model Watermarking20 Aug 2026
- 2026AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluation17 Jul 2026
- 2026"AI Watermarking": Bridging Policy Discourse and Technical Capabilities25 May 2026
- 2026The End of Trust: How Agentic AI Breaks Security Assumptions14 May 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026The Impact of AI-Generated Text on the Internet14 Apr 2026
- 2026Authenticated Contradictions from Desynchronized Provenance and Watermarking2 Mar 2026
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology5 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2026From Forensics to Ecosystems: Rethinking Watermarks for Generative AI Oversight
- 2025Adoption of Watermarking for Generative AI Systems in Practice and Implications under the new EU AI Act
- 2026Authenticity Debt and the Synthetic Content Threat Landscape: A Layered Framework for Trust, Provenance, and IP Governance in the Generative AI Era
- 2026Beyond AI-Generated Labels: Watermarking, Co-Creation, and Conflation of AI-Generation with Disinformation
- 2025UniMark: Artificial Intelligence Generated Content Identification Toolkit
- 2025On-Device Watermarking: A Socio-Technical Imperative For Authenticity In The Age of Generative AI
- 2024SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI
- 2026Transparency as Architecture: Structural Compliance Gaps in EU AI Act Article 50 II