mlsanityData to 14 Oct 2026

PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints

arXiv 2509.21057 ↗First posted 25 Sep 2025cs.CR cs.CLcited by 16

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Semantic-level watermarking (SWM) for large language models (LLMs) enhances watermarking robustness against text modifications and paraphrasing attacks by treating the sentence as the fundamental unit. However, existing methods still lack strong theoretical guarantees of robustness, and reject-sampling-based generation often introduces significant distribution distortions compared with unwatermarked outputs. In this work, we introduce a new theoretical framework on SWM through the concept of proxy functions (PFs) unicodex2013 functions that map sentences to scalar values. Building on this framework, we propose PMark, a simple yet powerful SWM method that estimates the PF median for the next sentence dynamically through sampling while enforcing multiple PF constraints (which we call channels) to strengthen watermark evidence. Equipped with solid theoretical guarantees, PMark achieves the desired distortion-free property and improves the robustness against paraphrasing-style attacks. We also provide an empirically optimized version that further removes the requirement for dynamical median estimation for better sampling efficiency. Experimental results show that PMark consistently outperforms existing SWM baselines in both text quality and robustness, offering a more effective paradigm for detecting machine-generated text. Our code will be released at [this URL](https://github.com/PMark-repo/PMark).

Key facts. Cited by 16 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 42 of its 56 references that are in the map. First posted on arXiv 25 Sep 2025.

Builds on

42 of 56 references.

Closest ancestors · 26

Same direction, newest first

  1. 2025Majority Bit-Aware Watermarking For Large Language Models5 Aug
  2. 2025MorphMark: Flexible Adaptive Watermarking for Large Language Models14 May
  3. 2025Optimized Couplings for Watermarking Large Language Models13 May
  4. 2025Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning9 Apr
  5. 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models5 Feb
  6. 2024Robust Multi-bit Text Watermark with LLM-based Paraphrasers4 Dec
  7. 2024SoK: Watermarking for AI-Generated Content27 Nov
  8. 2024FreqMark: Frequency-Based Watermark for Sentence-Level Detection of LLM-Generated Text9 Oct
  9. 2024A Watermark for Black-Box Language Models2 Oct
  10. 2024PersonaMark: Personalized LLM watermarking for model protection and user attribution15 Sep
  11. 2024Waterfall: Framework for Robust and Scalable Text Watermarking and Provenance for LLMs5 Jul
  12. 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
14 more
  1. 2024An Entropy-based Text Watermarking Detection Method20 Mar
  2. 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar
  3. 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
  4. 2024Pseudorandom Error-Correcting Codes14 Feb
  5. 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
  6. 2024Adaptive Text Watermark for Large Language Models25 Jan
  7. 2023Towards Optimal Statistical Watermarking13 Dec
  8. 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
  9. 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
  10. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  11. 2023Undetectable Watermarks for Language Models25 May
  12. 2023Can AI-Generated Text be Reliably Detected?17 Mar
  13. 2023Protecting Language Generation Models via Invisible Watermarking6 Feb
  14. 2023A Watermark for Large Language Models24 Jan

Other references · 16

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  5. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  6. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
  7. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
  8. 2025Gemma 3 Technical Reportcited by 1,824
  9. 2024SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineeringcited by 1,737
  10. 2024WorldSimBench: Towards Video Generation Models as World Simulatorscited by 881
  11. 2022One Embedder, Any Task: Instruction-Finetuned Text Embeddingscited by 333
  12. 2021BookSum: A Collection of Datasets for Long-form Narrative Summarizationcited by 184
4 more
  1. 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 105
  2. 2025AI4Research: A Survey of Artificial Intelligence for Scientific Researchcited by 60
  3. 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 19
  4. 2023On the Zero-Shot Generalization of Machine-Generated Text Detectorscited by 11

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 15.

16 papers.

Sort:

By area:

  1. 2026Vision-Language Introspection: Mitigating Overconfident Hallucinations in MLLMs via Interpretable Bi-Causal Steeringcited by 8
  2. 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Modelscited by 3
  3. 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Modelcited by 3
  4. 2026Decoding by Perturbation: Mitigating MLLM Hallucinations via Dynamic Textual Perturbationcited by 3
  5. 2026KBF: Knowledge Boundary as Fingerprint for Language Model and Black-Box API Auditingcited by 3
  6. 2026RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resiliencecited by 2
  7. 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 2
  8. 2025LLM Watermark Evasion via Bias Inversioncited by 1
  9. 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasingcited by 1
  10. 2026Global Sketch-Based Watermarking for Diffusion Language Modelscited by 1
  11. 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Unitscited by 1
  12. 2026DenMark: Robust Semantic Watermarking for Diffusion Language Modelscited by 1
4 more
  1. 2026SemTrace: Source-Grounded Semantic Signatures for Tracing LLM Exposure to Protected Documentscited by 0
  2. 2026The average-farmer illusion in language-model simulations of agricultural decisionscited by 0
  3. 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoodscited by 0
  4. 2026ByteMark: A Unified Byte-Level Watermark for Detection Across Language Modelscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2023Robust Distortion-free Watermarks for Language Models
  2. 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Models
  3. 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models
  4. 2024PostMark: A Robust Blackbox Watermark for Large Language Models
  5. 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
  6. 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking
  7. 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization
  8. 2024Provably Robust Watermarks for Open-Source Language Models