mlsanityData to 7 Oct 2026

Latent Watermarks under Generative Editing: A Benchmark and Analysis of Detection Survival

arXiv 2610.09702 ↗First posted 7 Oct 2026cs.CVcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Ordinary prompt-based editing can cause latent watermark detection to fail without explicitly targeting the watermark. We benchmark eight watermark methods against five editors across four generative backbones, four editing strengths, and five semantic categories, with edit-validity and threshold checks. Separating editing from seven subsequent distortions reveals that editing alone primarily distinguishes Tree-Ring, while added distortions expose a broader spectrum of detection survival. Sequential edits reveal a second hidden difference: score separation can decline while detection rates remain near their ceiling. Across methods, standardized clean score separation (d') organizes composite-survival tiers, whereas spatial overlap adds little to predicting edit-only survival beyond clean detectability. Embedding-strength interventions in two methods link higher clean separation to higher post-edit separation. In HSTR, the margin contrast is positive, while the angular layout contrast at matched clean separation remains unresolved. Together, outcome decomposition and continuous separation expose differences hidden by aggregate TPR. Method tiers are stable under threshold recalibration at the main operating points and alternative composite weights. Clean d' is thus a useful empirical diagnostic within this benchmark, with mixed transfer to unseen methods. Code and supporting artifacts are planned for a separate release.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 7 of its 41 references that are in the map. First posted on arXiv 7 Oct 2026.

Builds on

7 of 41 references.

Closest ancestors · 2

Same direction, newest first

  1. 2026Understanding Semantic Perturbations on In-Processing Generative Image Watermarks29 Mar
  2. 2024JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits6 Jun

Other references · 5

  1. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
  2. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
  3. 2018Variational image compression with a scale hyperpriorcited by 910
  4. 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 89
  5. 2026Are Watermarked Images Editable? SafeMark for Watermark-Preserving Text-Guided Image Editingcited by 1

Built on by

Not cited yet.