mlsanityData to 7 Oct 2026

A Unified Framework for LLM Watermarks

arXiv 2602.06754 ↗First posted 6 Feb 2026cs.CR cs.AI cs.LGcited by 3

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

LLM watermarks allow tracing AI-generated texts by inserting a detectable signal into their generated content. Recent works have proposed a wide range of watermarking algorithms, each with distinct designs, usually built using a bottom-up approach. Crucially, there is no general and principled formulation for LLM watermarking. In this work, we show that most existing and widely used watermarking schemes can in fact be derived from a principled constrained optimization problem. Our formulation unifies existing watermarking methods and explicitly reveals the constraints that each method optimizes. In particular, it highlights an understudied quality-diversity-power trade-off. At the same time, our framework also provides a principled approach for designing novel watermarking schemes tailored to specific requirements. For instance, it allows us to directly use perplexity as a proxy for quality, and derive new schemes that are optimal with respect to this constraint. Our experimental evaluation validates our framework: watermarking schemes derived from a given constraint consistently maximize detection power with respect to that constraint.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 20 of its 27 references that are in the map. First posted on arXiv 6 Feb 2026.

Builds on

20 of 27 references.

Closest ancestors · 15

Same direction, newest first

  1. 2025SimKey: A Semantically Aware Key Module for Watermarking Language Models11 Oct
  2. 2025Analyzing and Evaluating Unbiased Language Model Watermark28 Sep
  3. 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks8 Jul
  4. 2025Optimized Couplings for Watermarking Large Language Models13 May
  5. 2025Improved Unbiased Watermark for Large Language Models16 Feb
  6. 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach3 Oct
  7. 2024Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature4 Jun
  8. 2024Black-Box Detection of Language Model Watermarks28 May
  9. 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules1 Apr
  10. 2023Optimizing watermarks for large language models28 Dec
  11. 2023Towards Optimal Statistical Watermarking13 Dec
  12. 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasing15 Nov
3 more
  1. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  2. 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
  3. 2023A Watermark for Large Language Models24 Jan

Other references · 5

  1. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  2. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  3. 2021Program Synthesis with Large Language Modelscited by 3,509
  4. 2019ELI5: Long Form Question Answeringcited by 567
  5. 2019Jointly Measuring Diversity and Quality in Text Generation Modelscited by 61

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 3.

3 papers.