mlsanityData to 14 Oct 2026

textGrain watermarking is harder to detect: can sum-tests still do it optimally?

arXiv 2610.17655 ↗First posted 13 Oct 2026stat.ML cs.IT cs.LGcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Watermarking embeds an imperceptible signal in text from large language models that is statistically detectable with a secret key. The recent textGrain watermark (Li et. al. (2026b)) calibrates this signal against the model's sampling entropy through an explicit entropy budget, combining the stochasticity of Red-Green and the unbiasedness of Gumbel-max watermarks, and its accompanying report proposes a detector that sums pivotal statistics. We study when, and how efficiently, textGrain can be detected after human edits, modeled as a sparse mixture in which a fraction varepsilonnasymp n-p of positions retain the watermark and token uncertainty decays as n-q. First, entropy calibration comes at a cost: the minimax detection boundary of textGrain is p+q=1/2, so its detectable region is strictly smaller than that of Gumbel-max and maximal-coupling watermarks, whose boundary is 2p+q=1. This cost stems from textGrain's construction rather than from entropy calibration itself: an unbiased scheme with the same entropy loss remains detectable where textGrain is not. Second, perhaps surprisingly, this loss makes the sum detector optimal at the boundary when the number of transport columns is fixed, unlike for Gumbel-max. When the number of columns grows and the entropy budget does not vanish, the detectable region expands while that of the sum detector does not. Third, for a fixed edit fraction, we characterize the optimal exponential rate of type II error decay and show that the sum detector falls strictly short of it at every fixed alternative. Finally, we propose a weighted multiscale binomial scan, valid in finite samples and needing no knowledge of the next-token distributions, entropy budget, or edit fraction; it attains every detection boundary above and the optimal exponent.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 18 of its 30 references that are in the map. First posted on arXiv 13 Oct 2026.

Builds on

18 of 30 references.

Closest ancestors · 16

Same direction, newest first

  1. 2026Optimal Watermark Localization in Mixed-Source Large Language Model Texts14 Aug
  2. 2025Optimal Detection for Language Watermarks with Pseudorandom Collision24 Oct
  3. 2025Optimal Estimation of Watermark Proportions in Hybrid AI-Human Texts27 Jun
  4. 2024Robust Detection of Watermarks for Large Language Models Under Human Edits21 Nov
  5. 2024Debiasing Watermarks for Large Language Models via Maximal Coupling17 Nov
  6. 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules1 Apr
  7. 2024An Entropy-based Text Watermarking Detection Method20 Mar
  8. 2024Towards Better Statistical Understanding of Watermarking LLMs19 Mar
  9. 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb
  10. 2024Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs8 Feb
  11. 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models11 Oct
  12. 2023Unbiased Watermark for Large Language Models22 Sep
4 more
  1. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  2. 2023Undetectable Watermarks for Language Models25 May
  3. 2023Who Wrote this Code? Watermarking for Code Generation24 May
  4. 2023A Watermark for Large Language Models24 Jan

Other references · 2

  1. 2024The numeraire e-variable and reverse information projectioncited by 12
  2. 2026Green-Red Watermarking for Recommender Systemscited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Optimized Couplings for Watermarking Large Language Models
  2. 2025Entropy-Guided Watermarking for LLMs: A Test-Time Framework for Robust and Traceable Text Generation
  3. 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles
  4. 2026Sample Complexities of Estimating Gumbel--Max Watermark Proportions with and without Reduction to Pivotal Statistics
  5. 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models
  6. 2023Towards Optimal Statistical Watermarking
  7. 2023Three Bricks to Consolidate Watermarks for Large Language Models
  8. 2026Signature filtering: a lightweight enhancement for statistical watermark detection in large language models