mlsanityData to 13 Oct 2026

WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking

arXiv 2511.07863 ↗First posted 11 Nov 2025cs.AIcited by 4

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Large language models now draft news, legal analyses, and software code with human-level fluency. At the same time, regulations such as the EU AI Act mandate that each synthetic passage carry an imperceptible, machine-verifiable mark for provenance. Conventional logit-based watermarks satisfy this requirement by selecting a pseudorandom green vocabulary at every decoding step and boosting its logits, yet the random split can exclude the highest-probability token and thus erode fluency. WaterMod mitigates this limitation through a probability-aware modular rule. The vocabulary is first sorted in descending model probability; the resulting ranks are then partitioned by the residue rank mod k, which distributes adjacent-and therefore semantically similar-tokens across different classes. A fixed bias of small magnitude is applied to one selected class. In the zero-bit setting (k=2), an entropy-adaptive gate selects either the even or the odd parity as the green list. Because the top two ranks fall into different parities, this choice embeds a detectable signal while guaranteeing that at least one high-probability token remains available for sampling. In the multi-bit regime (k>2), the current payload digit d selects the color class whose ranks satisfy rank mod k = d. Biasing the logits of that class embeds exactly one base-k digit per decoding step, thereby enabling fine-grained provenance tracing. The same modular arithmetic therefore supports both binary attribution and rich payloads. Experimental results demonstrate that WaterMod consistently attains strong watermark detection performance while maintaining generation quality in both zero-bit and multi-bit settings. This robustness holds across a range of tasks, including natural language generation, mathematical reasoning, and code synthesis. Our code and data are available at https://github.com/Shinwoo-Park/WaterMod.

Key facts. Cited by 4 papers in the map (data through 13 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 19 of its 35 references that are in the map. First posted on arXiv 11 Nov 2025.

Builds on

19 of 35 references.

Closest ancestors · 12

Same direction, newest first

  1. 2024Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Models27 Oct
  2. 2024Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?24 Jul
  3. 2024CodeIP: A Grammar-Guided Multi-Bit Watermark for Large Language Models of Code24 Apr
  4. 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar
  5. 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices25 Feb
  6. 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
  7. 2023CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models28 Aug
  8. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  9. 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
  10. 2023Who Wrote this Code? Watermarking for Code Generation24 May
  11. 2023Watermarking Text Generated by Black-Box Language Models14 May
  12. 2023DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text9 May

Other references · 7

  1. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,549
  2. 2021Training Verifiers to Solve Math Word Problemscited by 9,916
  3. 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,362
  4. 2021CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoningcited by 47
  5. 2025Fine-tuning Large Language Models for Improving Factuality in Legal Question Answeringcited by 28
  6. 2023WatME: Towards Lossless Watermarking Through Lexical Redundancycited by 26
  7. 2024Edit Distance Robust Watermarks via Indexing Pseudorandom Codescited by 12

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models
  2. 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions
  3. 2026MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking
  4. 2026Flip, Don't Shuffle: Watermarking LLMs at the Speed of Inference
  5. 2026ChainMark: Model-Free LLM Watermarking with Closed-Form Calibration
  6. 2026WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency
  7. 2025Optimal Detection for Language Watermarks with Pseudorandom Collision
  8. 2026QuantileMark: A Message-Symmetric Multi-bit Watermark for LLMs