The paper proposes a production‑centered framework for comparing detection and watermarking techniques across two main AI image and video creation routes: direct visual generation and LLM‑driven code rendering. It introduces an explicit verification specification that separates passive inference, message recovery, and authenticated provenance, and organizes watermarks by production stage for images, videos, source code, and rendering‑aware outputs. The authors outline ten research questions covering identifiability, observability, fair comparison, payload recoverability, reconstruction, synchronization, composition, hybrid local contribution, and private production‑event authentication, and connect the framework to concrete systems such as Claude, OpenAI, and rendering tools.
arXiv:2606. 28386v1 Announce Type: cross Abstract: Image autoregressive models (IARs) have recently demonstrated remarkable capabilities in visual content generation, achieving photorealistic quality and rapid synthesis through the next-token prediction paradigm adapted from large language models.
The paper introduces a self-referential retrosynthesis framework for explainable AI provenance forensics that works with fixed generative models. It uses a jointly optimized encoder-decoder pair to embed client inputs, allowing the generator to produce high-fidelity outputs while enabling round-trip consistency checks. The method eliminates the need for watermarking or generator modifications and provides interpretable evidence linking generated images back to their source inputs.
The paper introduces the concept of watermark laundering, where an attacker uses a single reconstruction prompt on public foundation image models to produce a visually faithful output that renders invisible watermarks undecodable. The authors evaluate this failure mode across six OpenAI and Google image editing models, three watermarking schemes, and 1,800 reconstructions, finding that OpenAI models cause the strongest payload disruption while Nano Banana 2 shows vulnerability of DwtDct under high-fidelity reconstruction. Prompt ablation experiments reveal that the disruption is driven by the reconstruction pathway itself rather than any specific removal instruction, highlighting prompt-conditioned reconstruction as a distinct attack interface.
The paper introduces a self‑referential retrosynthesis framework for explainable AI provenance forensics that works with fixed‑generator generative models. It uses a jointly optimized encoder‑decoder pair to embed client inputs, generate high‑fidelity outputs, and then verify provenance by comparing the resynthesized image to the original query. The method eliminates the need for watermarking or generator modifications while providing interpretable evidence of a model’s output origin.
The paper surveys Multimodal Code Intelligence, focusing on tasks where code is generated, edited, refined, or reasoned about under visually grounded inputs such as screenshots, charts, and videos. It categorizes the field by the role of code—rendered artifact, editable structure, intermediate reasoning trace, or executable tool interface—and organizes benchmarks into four domains: Graphical User Interface, Scientific Visualization, Structured Graphics, and Frontier Tasks and Frameworks. The authors argue that reliable evaluation must include evidence of semantics and interaction beyond visual fidelity, and propose four verification-centered research directions to advance the field toward evidence-grounded executable systems.
FeatMark is a watermarking framework that protects images from text‑to‑image diffusion model mimicry attacks by embedding small, scene‑consistent micro‑features instead of pixel‑level perturbations. It constructs domain‑specific feature banks, selects executable features, and injects them via mask‑guided concept editing to create highly localized, natural edits. Experiments on VGGFace2, CelebA‑HQ, and WikiArt show FeatMark remains robust against ten strong watermark removal attacks and several adaptive attacks, with minimal impact on perceptual quality and extending to video mimicry scenarios.
arXiv:2609.40031v1 Announce Type: cross Abstract: Digital image watermarking is increasingly critical in media contexts, as emerging regulations and industry practices require marking AI-generated co...
arXiv:2609.24362v1 Announce Type: new Abstract: Sandboxed computer environments support multi-step reasoning with tools, executable programs, and persistent files, yet their extension from language m...
Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of a target individual....
arXiv:2609.39024v1 Announce Type: new Abstract: Text-to-image (T2I) generation is gaining increasing popularity with the general public, motivating the development of reliable mechanisms for copyrigh...
arXiv:2608.29212v1 Announce Type: cross Abstract: Existing video watermarking systems are symmetric: the party that can verify a mark holds the extractor weights or generator secret and can therefore...
arXiv:2608.20749v1 Announce Type: new Abstract: Identity-preserving video generation aims to synthesize videos that follow natural-language instructions while maintaining the visual identity of a giv...