HATS: High-Accuracy Triple-Set Watermarking for Large Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Misuse of LLM-generated text can be curbed by watermarking techniques that embed implicit signals into the output. We propose a watermark that partitions the vocabulary at each decoding step into three sets (Green/Yellow/Red) with fixed ratios and restricts sampling to the Green and Yellow sets. At detection time, we replay the same partitions, compute Green-enrichment and Red-depletion statistics, convert them to one-sided z-scores, and aggregate their p-values via Fisher's method to decide whether a passage is watermarked. We implement generation, detection, and testing on Llama 2 7B, and evaluate true-positive rate, false-positive rate, and text quality. Results show that the triple-partition scheme achieves high detection accuracy at fixed FPR while preserving readability.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 18 of its 25 references that are in the map. First posted on arXiv 22 Dec 2025.
Builds on
18 of 25 references.
Closest ancestors · 6
Same direction, newest first
- 2024Adaptive Text Watermark for Large Language Models25 Jan
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
- 2023A Watermark for Large Language Models24 Jan
- 2021Tracing Text Provenance via Context-Aware Lexical Substitution15 Dec
Other references · 12
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2024DeepSeek LLM: Scaling Open-Source Language Models with Longtermismcited by 621
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2025The Widespread Adoption of Large Language Model-Assisted Writing Across Societycited by 50
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
- 2024LLMs with Industrial Lens: Deciphering the Challenges and Prospects -- A Surveycited by 12
- 2023The Adoption and Efficacy of Large Language Models: Evidence From Consumer Complaints in the Financial Industrycited by 8
Built on by
Not cited yet.