mlsanityData to 14 Oct 2026

Linguistic Holonomy and Statistical Watermarks: Inner Geometry of Meaning-Preserving Transformations

arXiv 2608.19369 ↗First posted 19 Aug 2026cs.CL cs.CR math.DGcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Statistical watermarks for language models live in the freedom of the signifier: they choose among tokens that are nearly equivalent in meaning, and they are therefore eroded by exactly those transformations which move the form of a text while leaving its content in place. The literature measures such transformations by their endpoint, through the semantic similarity between the original and the rewritten text. We show that the endpoint is the wrong statistic. Adapting the formalism of linguistic loops, we prove that the invariant of a chain of meaning-preserving transformations factorises canonically into an endpoint part and a holonomy in the stabiliser of the initial state, the second of which the semantic deficit cannot see; the loop rotation is parallel transport on the unit sphere of the embedding space, so that the analogy with the Wilson loop becomes a theorem rather than a figure of speech. On the side of the detector we prove an exact identity: the residual statistic is proportional to the number of positions whose seeding window survived intact, from which the decay law ρh+1 follows as the independent-edit corollary. The identity has a disconcerting consequence, which we confirm to three decimal places: at one and the same retention rate the surviving signal may be one half of the original, one quarter of it, or exactly nothing, according only to where the edits fall.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 11 of its 16 references that are in the map. First posted on arXiv 19 Aug 2026.

Builds on

11 of 16 references.

Closest ancestors · 10

Same direction, newest first

  1. 2026Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks6 May
  2. 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices25 Feb
  3. 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
  4. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  5. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  6. 2023On the Reliability of Watermarks for Large Language Models7 Jun
  7. 2023Undetectable Watermarks for Language Models25 May
  8. 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
  9. 2023Can AI-Generated Text be Reliably Detected?17 Mar
  10. 2023A Watermark for Large Language Models24 Jan

Other references · 1

  1. 2025Linguistic Loops and Geometric Invariants as a Way to Pre-Verbal Thought?cited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026SLAM: Structural Linguistic Activation Marking for Language Models
  2. 2024Stylometric Watermarks for Large Language Models
  3. 2025A Linguistics-Aware LLM Watermarking via Syntactic Predictability
  4. 2023Three Bricks to Consolidate Watermarks for Large Language Models
  5. 2024Learnable Linguistic Watermarks for Tracing Model Extraction Attacks on Large Language Models
  6. 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models
  7. 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigation
  8. 2026Perturbation, Not Provenance: Why Activation Steering Does Not Make a Robust Text Watermark