Every Step Counts: Decoding Trajectories as Authorship Fingerprints of dLLMs
On the map: Diffusion models → Discrete and text diffusion
Abstract (arXiv)
Discrete Diffusion Large Language Models (dLLMs) have recently emerged as a competitive paradigm for non-autoregressive language modeling. Their distinctive decoding mechanism enables faster inference speed and strong performance in code generation and mathematical tasks. In this work, we show that the decoding mechanism of dLLMs not only enhances model utility but also can be used as a powerful tool for model attribution. A key challenge in this problem lies in the diversity of attribution scenarios, including distinguishing between different models as well as between different checkpoints or backups of the same model. To ensure broad applicability, we identify two fundamental problems: what information to extract from the decoding trajectory, and how to utilize it effectively. We first observe that relying directly on per-step model confidence yields poor performance. This is mainly due to the bidirectional decoding nature of dLLMs: each newly decoded token influences the confidence of other decoded tokens, making model confidence highly redundant and washing out structural signal regarding decoding order or dependencies. To overcome this, we propose a novel information extraction scheme called the Directed Decoding Map (DDM), which captures structural relationships between decoding steps and better reveals model-specific behaviors. Furthermore, to make full use of the extracted structural information during attribution, we propose Gaussian-Trajectory Attribution (GTA), where we fit a cell-wise Gaussian distribution at each decoding position for each target model, and define the likelihood of a trajectory as the attribution score: if a trajectory exhibits higher log-likelihood under the distribution of a specific model, it is more likely to have been generated by that model. Extensive experiments under different settings validate the utility of our methods.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Discrete and text diffusion, one of 14 directions in Diffusion models. Builds on 24 of its 43 references that are in the map. First posted on arXiv 2 Oct 2025.
Builds on
24 of 43 references.
Closest ancestors · 3
Same direction, newest first
- 2025Dream 7B: Diffusion Large Language Models21 Aug
- 2025Discrete Diffusion in Large Language and Multimodal Models: A Survey16 Jun
- 2025Large Language Diffusion Models14 Feb
Other references · 21
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2023A Watermark for Large Language Modelscited by 667
- 2023Detecting Language Model Attacks with Perplexitycited by 411
- 2021All That's 'Human' Is Not Gold: Evaluating Human Evaluation of Generated Textcited by 287
- 2020Automatic Detection of Machine Generated Text: A Critical Surveycited by 160
- 2020TweepFake: about Detecting Deepfake Tweetscited by 117
- 2024Perplexed by Perplexity: Perplexity-Based Data Pruning With Small Reference Modelscited by 83
- 2024Detecting Multimedia Generated by Large AI Models: A Surveycited by 73
- 2020A Systematic Review on Model Watermarking for Neural Networkscited by 49
- 2023Spear Phishing With Large Language Modelscited by 49
9 more
- 2023Origin Tracing and Detecting of LLMscited by 39
- 2025The Devil behind the mask: An emergent safety vulnerability of Diffusion LLMscited by 32
- 2024Your Large Language Models Are Leaving Fingerprintscited by 31
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Contentcited by 25
- 2025Jailbreaking Large Language Diffusion Models: Revealing Hidden Safety Flaws in Diffusion-Based Text Generationcited by 24
- 2024Detecting Machine-Generated Texts: Not Just "AI vs Humans" and Explainability is Complicatedcited by 15
- 2025Where to Start Alignment? Diffusion Large Language Model May Demand a Distinct Positioncited by 11
- 2018An Investigation of Supervised Learning Methods for Authorship Attribution in Short Hinglish Texts using Char & Word N-gramscited by 3
- 2023Who could be behind QAnon? Authorship attribution with supervised machine-learningcited by 2
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Modelscited by 2
- 2026Anatomy of a Lie: A Multi-Stage Diagnostic Framework for Tracing Hallucinations in Vision-Language Modelscited by 1
- 2026AutoMIA: Improved Baselines for Membership Inference Attack via Agentic Self-Explorationcited by 0
- 2026Backdooring Masked Diffusion Language Modelscited by 0
- 2026Backdooring Masked Diffusion Language Models19 May 2026
- 2026AutoMIA: Improved Baselines for Membership Inference Attack via Agentic Self-Exploration1 Apr 2026
- 2026Anatomy of a Lie: A Multi-Stage Diagnostic Framework for Tracing Hallucinations in Vision-Language Models16 Mar 2026
- 2026Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Models24 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2025Free Draft-and-Verification: Toward Lossless Parallel Decoding for Diffusion Large Language Models
- 2026Fast-dLLM++: Fr'echet Profile Decoding for Faster Diffusion LLM Inference
- 2025dParallel: Learnable Parallel Decoding for dLLMs
- 2026Improving Diffusion Language Model Decoding through Joint Search in Generation Order and Token Space
- 2025Finish First, Perfect Later: Test-Time Token-Level Cross-Validation for Diffusion Large Language Models
- 2026Locally Coherent Parallel Decoding in Diffusion Language Models
- 2025DiffuCoder: Understanding and Improving Masked Diffusion Models for Code Generation
- 2026Confidence-Based Decoding is Provably Efficient for Diffusion Language Models