mlsanityData to 14 Oct 2026

On Seeding Watermarks to Detect Verbatim LLM Copy-Paste Responses

arXiv 2605.16336 ↗First posted 7 May 2026cs.CR cs.AI cs.CYcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Large language models (LLMs) have made fluent essay writing, code drafting, and quiz answering instantly available to students at every level, from secondary school through graduate study. Many educators do not object to LLM use per~se; what they need to detect is the case in which a student pastes the assignment prompt into a chatbot and submits the model's reply verbatim, without engaging with the work. Existing post-hoc AI-text detectors remain unreliable and have been shown to penalise non-native English writers, while output-side watermarks require cooperation from the model provider. We propose an alternative that the educator controls directly: an input-side watermark in which an invisible instruction is embedded inside the visible assignment prompt itself. An LLM that ingests the prompt verbatim quietly reads the hidden instruction and writes a tell-tale signature into its reply, exposing the copy-and-paste pathway specifically. We describe SteganoPrompt, a single-page, zero-dependency web tool that encodes an arbitrary printable-ASCII payload into the deprecated Unicode Tags block (textttU+E0000--textttU+E007F). The encoded string is visually identical to the original, survives common copy-paste channels (Word, Google Docs, PDF, Markdown, Slack, e-mail, the major learning-management systems), and is tokenized as ordinary text by most frontier models. We evaluate compliance across eight LLM families and a representative set of educational content channels. To keep deployment transparent, disclosure is built into the tool itself: every encoded brief also carries a brief, always-on academic-integrity reminder for the student, and we set out concrete guidance recommending for its disclosed, ethical use in the classroom. The tool is released under the MIT licence at https://ezharjan.github.io/SteganoPrompt/.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 15 of its 34 references that are in the map. First posted on arXiv 7 May 2026.

Builds on

15 of 34 references.

Closest ancestors · 4

Same direction, newest first

  1. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  2. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  3. 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
  4. 2023Can AI-Generated Text be Reliably Detected?17 Mar

Other references · 11

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
  3. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  4. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  5. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  6. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
  7. 2024Defending Against Indirect Prompt Injection Attacks With Spotlightingcited by 267
  8. 2023GPT detectors are biased against non-native English writerscited by 178
  9. 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 164
  10. 2019Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systemscited by 101
  11. 2021Frustratingly Easy Edit-based Linguistic Steganography with a Masked Language Modelcited by 30

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025In-Context Watermarks for Large Language Models
  2. 2024PostMark: A Robust Blackbox Watermark for Large Language Models
  3. 2024DUPE: Detection Undermining via Prompt Engineering for Deepfake Text
  4. 2024Watermarking Language Models through Language Models
  5. 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks
  6. 2024Provably Robust Watermarks for Open-Source Language Models
  7. 2026LLM Output Detectability and Task Performance Can be Jointly Optimized
  8. 2025PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs