Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
As large language models (LLMs) are adapted to sensitive domains such as medicine, their fluency raises safety risks, particularly regarding provenance and accountability. Watermarking embeds detectable patterns to mitigate these risks, yet its reliability in medical contexts remains untested. Existing benchmarks focus on detection-quality tradeoffs and overlook factual risks. In medical text, watermarking often reweights low-entropy tokens, which are highly predictable and often carry critical medical terminology. Shifting these tokens can cause inaccuracy and hallucinations, risks that prior general-domain benchmarks fail to capture. We propose a medical-focused evaluation workflow that jointly assesses factual accuracy and coherence. Using GPT-Judger and further human validation, we introduce the Factuality-Weighted Score (FWS), a composite metric prioritizing factual accuracy beyond coherence to guide watermarking deployment in medical domains. Our evaluation shows current watermarking methods substantially compromise medical factuality, with entropy shifts degrading medical entity representation. These findings underscore the need for domain-aware watermarking approaches that preserve the integrity of medical content.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 20 of its 40 references that are in the map. First posted on arXiv 9 Sep 2025.
Builds on
20 of 40 references.
Closest ancestors · 8
Same direction, newest first
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models28 Feb
- 2023On the Learnability of Watermarks for Language Models7 Dec
- 2023New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking4 Dec
- 2023Downstream Trade-offs of a Family of Text Watermarks16 Nov
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Who Wrote this Code? Watermarking for Code Generation24 May
- 2021Protecting Intellectual Property of Language Generation APIs with Lexical Watermark5 Dec
Other references · 12
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2022BioGPT: Generative Pre-trained Transformer for Biomedical Text Generation and Miningcited by 538
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 496
- 2023How Close is ChatGPT to Human Experts? Comparison Corpus, Evaluation, and Detectioncited by 481
- 2024BioMistral: A Collection of Open-Source Pretrained Large Language Models for Medical Domainscited by 301
- 2019ScispaCy: Fast and Robust Models for Biomedical Natural Language Processingcited by 244
- 2023TrojText: Test-time Invisible Textual Trojan Insertioncited by 28
- 2024QGEval: Benchmarking Multi-dimensional Evaluation for Question Generationcited by 17
- 2025Towards Safe AI Clinicians: A Comprehensive Study on Large Language Model Jailbreaking in Healthcarecited by 10
- 2023TrojFSP: Trojan Insertion in Few-shot Prompt Tuningcited by 9
- 2024BadFair: Backdoored Fairness Attacks with Group-conditioned Triggerscited by 4
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2025PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMscited by 4
- 2026SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Modelscited by 2
- 2026Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Textscited by 0
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Textcited by 0
- 2026Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinatecited by 0
- 2026Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinate4 Oct 2026
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text9 Jun 2026
- 2026Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts16 May 2026
- 2026SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models18 Apr 2026
- 2025PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs27 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2024Protecting Copyright of Medical Pre-trained Language Models: Training-Free Backdoor Model Watermarking
- 2023Self-Verification Improves Few-Shot Clinical Information Extraction
- 2025MediEval: A Unified Medical Benchmark for Patient-Contextual and Knowledge-Grounded Reasoning in LLMs
- 2025FActBench: A Benchmark for Fine-grained Automatic Evaluation of LLM-Generated Text in the Medical Domain
- 2025Fact or Guesswork? Evaluating Large Language Models' Medical Knowledge with Structured One-Hop Judgments
- 2026When Retrieval Helps and Distracts: Evaluating Evidence-Generating LLMs for Biomedical Claim Verification
- 2025Combating Biomedical Misinformation through Multi-modal Claim Detection and Evidence-based Verification
- 2026Measuring Epistemic Resilience of LLMs Under Misleading Medical Context