mlsanityData to 14 Oct 2026

Flip, Don't Shuffle: Watermarking LLMs at the Speed of Inference

arXiv 2609.03844 ↗First posted 3 Sep 2026cs.CR cs.CL cs.LGcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

We introduce Stateless Bernoulli Watermarking (SBW), a new statistical watermark for Large Language Models that determines green list membership through independent per-token Bernoulli trials. Unlike KGW's vocabulary permutation or SynthID's multi-layer tournament, SBW requires only a single comparison per token against a counter-based random number generator, reducing membership complexity to O(1) and enabling single-kernel execution with zero intermediate allocations. We prove that this formulation preserves the same detection guarantees as fixed-size green lists: the z-score test remains N(0,1) under the null. The stateless architecture enables capabilities unavailable to existing methods: full-vocabulary self-salt watermarking (over 6000× faster than KGW's self-salt and 2× faster than SynthID despite biasing the entire vocabulary with candidate-dependent seeding) and architectural compatibility with distributed inference. In end-to-end generation benchmarks, SBW adds less than 1% overhead at all batch sizes. We additionally identify hash function design as a previously unexplored axis for watermark quality, showing that a GPU-native Jenkins hash improves null calibration by 1.8× while producing more diverse text. Experiments across two seeding schemes and eight (γ, δ) configurations confirm statistical equivalence with ROC-AUC differences below 0.01.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 15 of its 25 references that are in the map. First posted on arXiv 3 Sep 2026.

Builds on

15 of 25 references.

Closest ancestors · 9

Same direction, newest first

  1. 2024Watermarking Large Language Models and the Generated Content: Opportunities and Challenges24 Oct
  2. 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules1 Apr
  3. 2024Towards Better Statistical Understanding of Watermarking LLMs19 Mar
  4. 2024Watermark Stealing in Large Language Models29 Feb
  5. 2023On the Learnability of Watermarks for Language Models7 Dec
  6. 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models7 Nov
  7. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  8. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  9. 2023A Watermark for Large Language Models24 Jan

Other references · 6

  1. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  2. 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
  3. 2022Contrastive Decoding: Open-ended Text Generation as Optimizationcited by 609
  4. 2019Neural Text Generation with Unlikelihood Trainingcited by 503
  5. 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
  6. 2024Revisiting the Robustness of Watermarking to Paraphrasing Attackscited by 25

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026ChainMark: Model-Free LLM Watermarking with Closed-Form Calibration
  2. 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models
  3. 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions
  4. 2025Optimal Detection for Language Watermarks with Pseudorandom Collision
  5. 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models
  6. 2026Signature filtering: a lightweight enhancement for statistical watermark detection in large language models
  7. 2025Optimized Couplings for Watermarking Large Language Models
  8. 2024A Watermark for Black-Box Language Models