Deep dives / The Word-Choice Watermark

The Word-Choice Watermark

Claude and Gemini now mark the text they write by tilting which words they pick.

By Jim Thornton 14 min read An interactive guide with our own experiments

We built the same kind of mark with our own key, put 150 web pages through 18 kinds of handling, and measured what survives. This guide shows how the mark works, what removed it in our tests, who can check for it, and what it means for search.

One of these is watermarked. Which one?

Text A Likely watermarked · z 3.8 No signal · z 0.8

Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how your foot lands and rolls can give you a significant clue about the type of support you need.

Next, consider the specific type of cushioning you prefer. Some runners thrive on soft, maximalist cushioning
Embarking on your first marathon is an exhilarating achievement, but the journey doesn't end at the starting line; the right running shoes are absolutely crucial for comfort, injury prevention, and overall performance. Choosing the perfect pair is a deeply personal process that requires paying close attention to your running style, foot mechanics, and training progression. Before you dive into the endless catalog of options, the most important first step is visiting a specialized running store where experts can analyze your gait. They will observe how you run, whether you overpronate, supinate, or have a neutral stride, providing invaluable insight that no online review can replicate.

Once you understand your foot mechanics, you can start narrowing down the shoe types that suit you best. Cushioning

Text B Likely watermarked · z 3.8 No signal · z 0.8

Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how your foot lands and rolls can give you a significant clue about the type of support you need.

Next, consider the specific type of cushioning you prefer. Some runners thrive on soft, maximalist cushioning
Embarking on your first marathon is an exhilarating achievement, but the journey doesn't end at the starting line; the right running shoes are absolutely crucial for comfort, injury prevention, and overall performance. Choosing the perfect pair is a deeply personal process that requires paying close attention to your running style, foot mechanics, and training progression. Before you dive into the endless catalog of options, the most important first step is visiting a specialized running store where experts can analyze your gait. They will observe how you run, whether you overpronate, supinate, or have a neutral stride, providing invaluable insight that no online review can replicate.

Once you understand your foot mechanics, you can start narrowing down the shoe types that suit you best. Cushioning

Both came from the same model and the same prompt. Only one was written with our secret key.

You picked Text A. Honestly, nobody can tell by reading. Apply the key to find out.

You picked Text B. Honestly, nobody can tell by reading. Apply the key to find out.

You guessed right, and it was a coin flip. Not that one, and that's the point. Text A carries the watermark. On these 150 tokens z = 3.8; on the full 446-token article it is 6.8. The other text, in full, scores 0.55.

You guessed right, and it was a coin flip. Not that one, and that's the point. Text B carries the watermark. On these 150 tokens z = 3.8; on the full 446-token article it is 6.8. The other text, in full, scores 0.55.

Our pilot · 26 Sep 2026 Gemma 4 E2B, one 400-word blog prompt, written twice; teal marks a token whose keyed score is above 0.5, faded text one below.

Teal marks what we measured ourselves. Amber marks what others report. Toy marks a simplified mechanism. Outside facts are as of 26 Sep 2026 unless dated otherwise.

Chapter 01 · The mechanism

Every word is a choice

Any text watermark hides in one step: the weighted dice roll a model makes for every word. Some text leaves far more room for it than other text.

How a model picks a word

Weighted dice

  1. What Gemma 4 expects next

    Our measurement · 29 Sep 2026

    Search traffic fell after the

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    all other tokens33.6%

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    platform2.9%
    all other tokens30.6%

    Next word after …after the platform3.94 bits

    update26.9%
    experienced17.3%
    announced12.7%
    was10.5%
    introduced3.9%
    underwent3.6%
    launched2.7%
    faced2.5%
    all other tokens19.9%

    Next word after …the platform experienced2.63 bits

    technical34.8%
    several18.6%
    downtime18.6%
    a16.4%
    significant3.7%
    an2.4%
    some1.6%
    outages0.9%
    all other tokens3.1%

    Next word after …platform experienced several1.89 bits

    technical43.3%
    outages43.3%
    service4.6%
    downtime2.3%
    significant1.2%
    server1.0%
    periods1.0%
    major0.9%
    all other tokens2.5%

    Next word after …experienced several outages0.69 bits · forced

    .90.1%
    and3.5%
    over2.7%
    ,1.9%
    during1.0%
    in0.5%
    within0.1%
    throughout0.0%
    all other tokens0.1%

    Next word after …experienced several outages.0.75 bits

    (stop writing)89.3%
    Users5.7%
    (new paragraph)1.8%
    This1.4%
    (new paragraph)0.5%
    Users0.2%
    The0.2%
    0.1%
    all other tokens0.7%

    Next word after …several outages. Users2.23 bits

    were51.6%
    who27.6%
    ,7.4%
    became3.3%
    lost2.4%
    abandoned1.6%
    experienced1.1%
    also0.8%
    all other tokens4.2%

    Next word after …outages. Users became0.02 bits · forced

    frustrated99.9%
    hesitant0.1%
    disillusioned0.0%
    discouraged0.0%
    less0.0%
    impatient0.0%
    wary0.0%
    more0.0%
    all other tokens0.0%

    Next word after …Users became frustrated0.94 bits

    and78.6%
    ,15.5%
    with5.7%
    due0.1%
    by0.0%
    .0.0%
    when0.0%
    as0.0%
    all other tokens0.0%

    Next word after …became frustrated and3.72 bits

    switched19.3%
    stopped15.0%
    sought13.3%
    left8.6%
    started8.6%
    abandoned8.6%
    began8.0%
    lost4.3%
    all other tokens14.4%

    Next word after …frustrated and switched0.00 bits · forced

    to100%
    platforms0.0%
    their0.0%
    providers0.0%
    away0.0%
    alternatives0.0%
    over0.0%
    alternative0.0%
    all other tokens0.0%

    Next word after …and switched to1.65 bits

    competitors58.3%
    alternative25.1%
    competing7.6%
    competitor6.2%
    other2.2%
    alternatives0.5%
    platforms0.0%
    more0.0%
    all other tokens0.0%

    Next word after …switched to competitors2.55 bits

    offering33.3%
    .22.9%
    who14.8%
    ,13.0%
    to9.5%
    that2.4%
    for2.0%
    with1.1%
    all other tokens1.1%

    Next word after …to competitors offering0.44 bits · forced

    more93.1%
    a4.1%
    better2.7%
    stable0.1%
    reliable0.0%
    greater0.0%
    higher0.0%
    uninterrupted0.0%
    all other tokens0.0%

    Next word after …competitors offering more1.05 bits

    stable49.7%
    reliable49.7%
    stability0.3%
    reliability0.3%
    consistent0.0%
    uptime0.0%
    안정0.0%
    稳定0.0%
    all other tokens0.0%

    Next word after …offering more stable0.96 bits

    service73.4%
    services24.6%
    experiences1.3%
    performance0.6%
    platforms0.0%
    and0.0%
    access0.0%
    uptime0.0%
    all other tokens0.0%

    Next word after …more stable services0.06 bits · forced

    .99.5%
    ,0.3%
    and0.2%
    during0.0%
    with0.0%
    for0.0%
    or0.0%
    ."0.0%
    all other tokens0.0%
    the word the model rolled forced: top choice over 90% (5 of 17) Tap a word to see its odds

    Gemma 4 E2B, our measurement, 29 Sep 2026. The sentence was sampled with stopping turned off for 16 tokens, so at "Users" the model's top choice is to stop writing.

    01 / 04

    What the model expects next

    We give Google's open Gemma 4 model the words “Search traffic fell after the” and read what it expects next. It gives every one of its 262,144 tokens a probability. The eight shown hold 66% of the odds.4

    Our measurement · 29 Sep 2026
  2. What Gemma 4 expects next

    Our measurement · 29 Sep 2026

    Search traffic fell after the

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    all other tokens33.6%

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    platform2.9%
    all other tokens30.6%

    Next word after …after the platform3.94 bits

    update26.9%
    experienced17.3%
    announced12.7%
    was10.5%
    introduced3.9%
    underwent3.6%
    launched2.7%
    faced2.5%
    all other tokens19.9%

    Next word after …the platform experienced2.63 bits

    technical34.8%
    several18.6%
    downtime18.6%
    a16.4%
    significant3.7%
    an2.4%
    some1.6%
    outages0.9%
    all other tokens3.1%

    Next word after …platform experienced several1.89 bits

    technical43.3%
    outages43.3%
    service4.6%
    downtime2.3%
    significant1.2%
    server1.0%
    periods1.0%
    major0.9%
    all other tokens2.5%

    Next word after …experienced several outages0.69 bits · forced

    .90.1%
    and3.5%
    over2.7%
    ,1.9%
    during1.0%
    in0.5%
    within0.1%
    throughout0.0%
    all other tokens0.1%

    Next word after …experienced several outages.0.75 bits

    (stop writing)89.3%
    Users5.7%
    (new paragraph)1.8%
    This1.4%
    (new paragraph)0.5%
    Users0.2%
    The0.2%
    0.1%
    all other tokens0.7%

    Next word after …several outages. Users2.23 bits

    were51.6%
    who27.6%
    ,7.4%
    became3.3%
    lost2.4%
    abandoned1.6%
    experienced1.1%
    also0.8%
    all other tokens4.2%

    Next word after …outages. Users became0.02 bits · forced

    frustrated99.9%
    hesitant0.1%
    disillusioned0.0%
    discouraged0.0%
    less0.0%
    impatient0.0%
    wary0.0%
    more0.0%
    all other tokens0.0%

    Next word after …Users became frustrated0.94 bits

    and78.6%
    ,15.5%
    with5.7%
    due0.1%
    by0.0%
    .0.0%
    when0.0%
    as0.0%
    all other tokens0.0%

    Next word after …became frustrated and3.72 bits

    switched19.3%
    stopped15.0%
    sought13.3%
    left8.6%
    started8.6%
    abandoned8.6%
    began8.0%
    lost4.3%
    all other tokens14.4%

    Next word after …frustrated and switched0.00 bits · forced

    to100%
    platforms0.0%
    their0.0%
    providers0.0%
    away0.0%
    alternatives0.0%
    over0.0%
    alternative0.0%
    all other tokens0.0%

    Next word after …and switched to1.65 bits

    competitors58.3%
    alternative25.1%
    competing7.6%
    competitor6.2%
    other2.2%
    alternatives0.5%
    platforms0.0%
    more0.0%
    all other tokens0.0%

    Next word after …switched to competitors2.55 bits

    offering33.3%
    .22.9%
    who14.8%
    ,13.0%
    to9.5%
    that2.4%
    for2.0%
    with1.1%
    all other tokens1.1%

    Next word after …to competitors offering0.44 bits · forced

    more93.1%
    a4.1%
    better2.7%
    stable0.1%
    reliable0.0%
    greater0.0%
    higher0.0%
    uninterrupted0.0%
    all other tokens0.0%

    Next word after …competitors offering more1.05 bits

    stable49.7%
    reliable49.7%
    stability0.3%
    reliability0.3%
    consistent0.0%
    uptime0.0%
    안정0.0%
    稳定0.0%
    all other tokens0.0%

    Next word after …offering more stable0.96 bits

    service73.4%
    services24.6%
    experiences1.3%
    performance0.6%
    platforms0.0%
    and0.0%
    access0.0%
    uptime0.0%
    all other tokens0.0%

    Next word after …more stable services0.06 bits · forced

    .99.5%
    ,0.3%
    and0.2%
    during0.0%
    with0.0%
    for0.0%
    or0.0%
    ."0.0%
    all other tokens0.0%
    the word the model rolled forced: top choice over 90% (5 of 17) Tap a word to see its odds

    Gemma 4 E2B, our measurement, 29 Sep 2026. The sentence was sampled with stopping turned off for 16 tokens, so at "Users" the model's top choice is to stop writing.

    02 / 04

    A roll, not the top word

    The model does not take the top word. It rolls weighted dice, and here it picks “platform”, a 2.9% outcome outside the top eight, over “update” at 17.9%. A different roll gives a different, equally good sentence.4

  3. What Gemma 4 expects next

    Our measurement · 29 Sep 2026

    Search traffic fell after the

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    all other tokens33.6%

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    platform2.9%
    all other tokens30.6%

    Next word after …after the platform3.94 bits

    update26.9%
    experienced17.3%
    announced12.7%
    was10.5%
    introduced3.9%
    underwent3.6%
    launched2.7%
    faced2.5%
    all other tokens19.9%

    Next word after …the platform experienced2.63 bits

    technical34.8%
    several18.6%
    downtime18.6%
    a16.4%
    significant3.7%
    an2.4%
    some1.6%
    outages0.9%
    all other tokens3.1%

    Next word after …platform experienced several1.89 bits

    technical43.3%
    outages43.3%
    service4.6%
    downtime2.3%
    significant1.2%
    server1.0%
    periods1.0%
    major0.9%
    all other tokens2.5%

    Next word after …experienced several outages0.69 bits · forced

    .90.1%
    and3.5%
    over2.7%
    ,1.9%
    during1.0%
    in0.5%
    within0.1%
    throughout0.0%
    all other tokens0.1%

    Next word after …experienced several outages.0.75 bits

    (stop writing)89.3%
    Users5.7%
    (new paragraph)1.8%
    This1.4%
    (new paragraph)0.5%
    Users0.2%
    The0.2%
    0.1%
    all other tokens0.7%

    Next word after …several outages. Users2.23 bits

    were51.6%
    who27.6%
    ,7.4%
    became3.3%
    lost2.4%
    abandoned1.6%
    experienced1.1%
    also0.8%
    all other tokens4.2%

    Next word after …outages. Users became0.02 bits · forced

    frustrated99.9%
    hesitant0.1%
    disillusioned0.0%
    discouraged0.0%
    less0.0%
    impatient0.0%
    wary0.0%
    more0.0%
    all other tokens0.0%

    Next word after …Users became frustrated0.94 bits

    and78.6%
    ,15.5%
    with5.7%
    due0.1%
    by0.0%
    .0.0%
    when0.0%
    as0.0%
    all other tokens0.0%

    Next word after …became frustrated and3.72 bits

    switched19.3%
    stopped15.0%
    sought13.3%
    left8.6%
    started8.6%
    abandoned8.6%
    began8.0%
    lost4.3%
    all other tokens14.4%

    Next word after …frustrated and switched0.00 bits · forced

    to100%
    platforms0.0%
    their0.0%
    providers0.0%
    away0.0%
    alternatives0.0%
    over0.0%
    alternative0.0%
    all other tokens0.0%

    Next word after …and switched to1.65 bits

    competitors58.3%
    alternative25.1%
    competing7.6%
    competitor6.2%
    other2.2%
    alternatives0.5%
    platforms0.0%
    more0.0%
    all other tokens0.0%

    Next word after …switched to competitors2.55 bits

    offering33.3%
    .22.9%
    who14.8%
    ,13.0%
    to9.5%
    that2.4%
    for2.0%
    with1.1%
    all other tokens1.1%

    Next word after …to competitors offering0.44 bits · forced

    more93.1%
    a4.1%
    better2.7%
    stable0.1%
    reliable0.0%
    greater0.0%
    higher0.0%
    uninterrupted0.0%
    all other tokens0.0%

    Next word after …competitors offering more1.05 bits

    stable49.7%
    reliable49.7%
    stability0.3%
    reliability0.3%
    consistent0.0%
    uptime0.0%
    안정0.0%
    稳定0.0%
    all other tokens0.0%

    Next word after …offering more stable0.96 bits

    service73.4%
    services24.6%
    experiences1.3%
    performance0.6%
    platforms0.0%
    and0.0%
    access0.0%
    uptime0.0%
    all other tokens0.0%

    Next word after …more stable services0.06 bits · forced

    .99.5%
    ,0.3%
    and0.2%
    during0.0%
    with0.0%
    for0.0%
    or0.0%
    ."0.0%
    all other tokens0.0%
    the word the model rolled forced: top choice over 90% (5 of 17) Tap a word to see its odds

    Gemma 4 E2B, our measurement, 29 Sep 2026. The sentence was sampled with stopping turned off for 16 tokens, so at "Users" the model's top choice is to stop writing.

    03 / 04

    One roll per word

    Each word shifts the odds for the next one. This sentence is 17 rolls.4

  4. What Gemma 4 expects next

    Our measurement · 29 Sep 2026

    Search traffic fell after the

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    all other tokens33.6%

    Next word after …after the 4.85 bits

    update17.9%
    Google10.8%
    algorithm10.8%
    implementation7.5%
    major5.8%
    search4.8%
    recent4.5%
    launch4.3%
    platform2.9%
    all other tokens30.6%

    Next word after …after the platform3.94 bits

    update26.9%
    experienced17.3%
    announced12.7%
    was10.5%
    introduced3.9%
    underwent3.6%
    launched2.7%
    faced2.5%
    all other tokens19.9%

    Next word after …the platform experienced2.63 bits

    technical34.8%
    several18.6%
    downtime18.6%
    a16.4%
    significant3.7%
    an2.4%
    some1.6%
    outages0.9%
    all other tokens3.1%

    Next word after …platform experienced several1.89 bits

    technical43.3%
    outages43.3%
    service4.6%
    downtime2.3%
    significant1.2%
    server1.0%
    periods1.0%
    major0.9%
    all other tokens2.5%

    Next word after …experienced several outages0.69 bits · forced

    .90.1%
    and3.5%
    over2.7%
    ,1.9%
    during1.0%
    in0.5%
    within0.1%
    throughout0.0%
    all other tokens0.1%

    Next word after …experienced several outages.0.75 bits

    (stop writing)89.3%
    Users5.7%
    (new paragraph)1.8%
    This1.4%
    (new paragraph)0.5%
    Users0.2%
    The0.2%
    0.1%
    all other tokens0.7%

    Next word after …several outages. Users2.23 bits

    were51.6%
    who27.6%
    ,7.4%
    became3.3%
    lost2.4%
    abandoned1.6%
    experienced1.1%
    also0.8%
    all other tokens4.2%

    Next word after …outages. Users became0.02 bits · forced

    frustrated99.9%
    hesitant0.1%
    disillusioned0.0%
    discouraged0.0%
    less0.0%
    impatient0.0%
    wary0.0%
    more0.0%
    all other tokens0.0%

    Next word after …Users became frustrated0.94 bits

    and78.6%
    ,15.5%
    with5.7%
    due0.1%
    by0.0%
    .0.0%
    when0.0%
    as0.0%
    all other tokens0.0%

    Next word after …became frustrated and3.72 bits

    switched19.3%
    stopped15.0%
    sought13.3%
    left8.6%
    started8.6%
    abandoned8.6%
    began8.0%
    lost4.3%
    all other tokens14.4%

    Next word after …frustrated and switched0.00 bits · forced

    to100%
    platforms0.0%
    their0.0%
    providers0.0%
    away0.0%
    alternatives0.0%
    over0.0%
    alternative0.0%
    all other tokens0.0%

    Next word after …and switched to1.65 bits

    competitors58.3%
    alternative25.1%
    competing7.6%
    competitor6.2%
    other2.2%
    alternatives0.5%
    platforms0.0%
    more0.0%
    all other tokens0.0%

    Next word after …switched to competitors2.55 bits

    offering33.3%
    .22.9%
    who14.8%
    ,13.0%
    to9.5%
    that2.4%
    for2.0%
    with1.1%
    all other tokens1.1%

    Next word after …to competitors offering0.44 bits · forced

    more93.1%
    a4.1%
    better2.7%
    stable0.1%
    reliable0.0%
    greater0.0%
    higher0.0%
    uninterrupted0.0%
    all other tokens0.0%

    Next word after …competitors offering more1.05 bits

    stable49.7%
    reliable49.7%
    stability0.3%
    reliability0.3%
    consistent0.0%
    uptime0.0%
    안정0.0%
    稳定0.0%
    all other tokens0.0%

    Next word after …offering more stable0.96 bits

    service73.4%
    services24.6%
    experiences1.3%
    performance0.6%
    platforms0.0%
    and0.0%
    access0.0%
    uptime0.0%
    all other tokens0.0%

    Next word after …more stable services0.06 bits · forced

    .99.5%
    ,0.3%
    and0.2%
    during0.0%
    with0.0%
    for0.0%
    or0.0%
    ."0.0%
    all other tokens0.0%
    the word the model rolled forced: top choice over 90% (5 of 17) Tap a word to see its odds

    Gemma 4 E2B, our measurement, 29 Sep 2026. The sentence was sampled with stopping turned off for 16 tokens, so at "Users" the model's top choice is to stop writing.

    04 / 04

    Some rolls are not choices

    Some rolls are not real choices. After “switched”, the word “to” holds 100% of the odds. Five of the 17 words were over 90% certain, and a watermark can only hide in the other twelve.4

Where a mark has space

Room to hide a signal

  1. Room per token, in bits

    Our measurement · 27 Sep 2026
    Juneteenth serves as a profound milestone in the American narrative, marking the moment when the promise of freedom finally reached the shores of Texas, long …

    1.07 bits per token on average (tokens 2 to 40; the first has no context)

    In an era defined by rapid shifts in consumer behavior, the ability to transform vast oceans of data into precise, strategic direction is the ultimate competitive …

    1.15 bits per token on average (tokens 2 to 40; the first has no context)

    <div class="wp-block-group alignfull has-background"><div class="wp-block-group__inner-container is …

    0.59 bits per token on average (tokens 2 to 40; the first has no context)

    {"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.example. …

    0.52 bits per token on average (tokens 2 to 40; the first has no context)

    Range chart: one real company's website, a market research firm, not named; page counts after each label. Scored by Gemma 4 E2B, 27 Sep 2026. Samples: the first 28 tokens of two pages our model wrote in the main study and two hand-written markup samples; grey columns are forced tokens (top choice over 90%).

    01 / 04

    Measuring the room

    Researchers measure that room as entropy, in bits per token: the more good options at each word, the more bits. We scored 244 prose pages from one real company's website, plus the markup of 120 of them.3

    Our measurement · 27 Sep 2026
  2. Room per token, in bits

    Our measurement · 27 Sep 2026
    Juneteenth serves as a profound milestone in the American narrative, marking the moment when the promise of freedom finally reached the shores of Texas, long …

    1.07 bits per token on average (tokens 2 to 40; the first has no context)

    In an era defined by rapid shifts in consumer behavior, the ability to transform vast oceans of data into precise, strategic direction is the ultimate competitive …

    1.15 bits per token on average (tokens 2 to 40; the first has no context)

    <div class="wp-block-group alignfull has-background"><div class="wp-block-group__inner-container is …

    0.59 bits per token on average (tokens 2 to 40; the first has no context)

    {"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.example. …

    0.52 bits per token on average (tokens 2 to 40; the first has no context)

    Range chart: one real company's website, a market research firm, not named; page counts after each label. Scored by Gemma 4 E2B, 27 Sep 2026. Samples: the first 28 tokens of two pages our model wrote in the main study and two hand-written markup samples; grey columns are forced tokens (top choice over 90%).

    02 / 04

    Prose lands close together

    All five kinds of prose land close together. Medians run from 1.20 bits for blog posts and service pages to 1.33 for guides, and pages vary more than page types do.3

  3. Room per token, in bits

    Our measurement · 27 Sep 2026
    Juneteenth serves as a profound milestone in the American narrative, marking the moment when the promise of freedom finally reached the shores of Texas, long …

    1.07 bits per token on average (tokens 2 to 40; the first has no context)

    In an era defined by rapid shifts in consumer behavior, the ability to transform vast oceans of data into precise, strategic direction is the ultimate competitive …

    1.15 bits per token on average (tokens 2 to 40; the first has no context)

    <div class="wp-block-group alignfull has-background"><div class="wp-block-group__inner-container is …

    0.59 bits per token on average (tokens 2 to 40; the first has no context)

    {"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.example. …

    0.52 bits per token on average (tokens 2 to 40; the first has no context)

    Range chart: one real company's website, a market research firm, not named; page counts after each label. Scored by Gemma 4 E2B, 27 Sep 2026. Samples: the first 28 tokens of two pages our model wrote in the main study and two hand-written markup samples; grey columns are forced tokens (top choice over 90%).

    03 / 04

    HTML leaves about half

    The HTML around that prose leaves about half the room: 0.65 bits. Tags and class names decide most of the characters.3

  4. Room per token, in bits

    Our measurement · 27 Sep 2026
    Juneteenth serves as a profound milestone in the American narrative, marking the moment when the promise of freedom finally reached the shores of Texas, long …

    1.07 bits per token on average (tokens 2 to 40; the first has no context)

    In an era defined by rapid shifts in consumer behavior, the ability to transform vast oceans of data into precise, strategic direction is the ultimate competitive …

    1.15 bits per token on average (tokens 2 to 40; the first has no context)

    <div class="wp-block-group alignfull has-background"><div class="wp-block-group__inner-container is …

    0.59 bits per token on average (tokens 2 to 40; the first has no context)

    {"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.example. …

    0.52 bits per token on average (tokens 2 to 40; the first has no context)

    Range chart: one real company's website, a market research firm, not named; page counts after each label. Scored by Gemma 4 E2B, 27 Sep 2026. Samples: the first 28 tokens of two pages our model wrote in the main study and two hand-written markup samples; grey columns are forced tokens (top choice over 90%).

    04 / 04

    Schema is tighter still

    Structured data is tighter still, 0.29 bits for JSON-LD schema. Anthropic says the same of code: its mark lives mostly in comments.3,6

    Claude Help Center · 22 Sep 2026

Chapter 02 · The method

Written in, read out

The method deployed in Gemini and Claude is a keyed tournament, and only the key-holder can read it back. Here it is, with a real article from our pilot.

Every text watermark uses a secret key to bias the dice in a pattern only the key-holder can check. Scott Aaronson described a keyed scheme for OpenAI in 2022 that leaves the odds unchanged on average.10 The first widely cited paper, in 2023, favours a keyed “green list” of words at each position.9 Research schemes such as SemStamp mark sentence meaning instead of words, and no major product used one as of 26 Sep 2026.11 The method in Gemini, and in a version in Claude, is a tournament.7,5

How the mark is written

The tournament (toy)

  1. Tournament for the word after “the platform”

    Toy: 8 candidates, 3 roundsOdds measured · 29 Sep 2026
    secret key + the previous four tokens → a score of 0 or 1 for each candidate, fresh every round
    update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced

    Measured odds update 27%experienced 17%announced 13%was 11%introduced 4%underwent 4%launched 3%faced 3%

    Equal scores: a coin flip decides.

    Search traffic fell after the platform experienced …

    After “switched” totototototototo → to 100% of the odds: no contest

    Our real key 30 rounds · 5-token context

    Toy mechanism with measured odds (Gemma 4 E2B, 29 Sep 2026). The scores here come from a demo key; the real scheme is Dathathri et al., Nature, 23 Oct 2024.

    01 / 04

    Draw candidates

    For each word, the model draws several candidates from its normal odds. After “the platform”, “update” is the most likely at 27%, so it can fill more than one slot.4

    Toy: 8 candidates, 3 roundsOdds measured · 29 Sep 2026
  2. Tournament for the word after “the platform”

    Toy: 8 candidates, 3 roundsOdds measured · 29 Sep 2026
    secret key + the previous four tokens → a score of 0 or 1 for each candidate, fresh every round
    update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced

    Measured odds update 27%experienced 17%announced 13%was 11%introduced 4%underwent 4%launched 3%faced 3%

    Equal scores: a coin flip decides.

    Search traffic fell after the platform experienced …

    After “switched” totototototototo → to 100% of the odds: no contest

    Our real key 30 rounds · 5-token context

    Toy mechanism with measured odds (Gemma 4 E2B, 29 Sep 2026). The scores here come from a demo key; the real scheme is Dathathri et al., Nature, 23 Oct 2024.

    02 / 04

    The key scores each candidate

    The secret key, combined with the previous four tokens, gives each candidate a score of 0 or 1 for this round. Pairs face off; the higher score advances, and a tie is a coin flip.7

  3. Tournament for the word after “the platform”

    Toy: 8 candidates, 3 roundsOdds measured · 29 Sep 2026
    secret key + the previous four tokens → a score of 0 or 1 for each candidate, fresh every round
    update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced

    Measured odds update 27%experienced 17%announced 13%was 11%introduced 4%underwent 4%launched 3%faced 3%

    Equal scores: a coin flip decides.

    Search traffic fell after the platform experienced …

    After “switched” totototototototo → to 100% of the odds: no contest

    Our real key 30 rounds · 5-token context

    Toy mechanism with measured odds (Gemma 4 E2B, 29 Sep 2026). The scores here come from a demo key; the real scheme is Dathathri et al., Nature, 23 Oct 2024.

    03 / 04

    Rounds to a champion

    Each round uses fresh scores. The winner is still a word the model found plausible, which is why Google reports no significant quality difference across about 20 million Gemini responses.7

    Nature · 23 Oct 2024
  4. Tournament for the word after “the platform”

    Toy: 8 candidates, 3 roundsOdds measured · 29 Sep 2026
    secret key + the previous four tokens → a score of 0 or 1 for each candidate, fresh every round
    update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced update 0 update 0 faced 0 announced 1 experienced 0 experienced 0 experienced 0 update 0 update 1 announced 0 experienced 0 experienced 0 update 1 experienced 1 experienced

    Measured odds update 27%experienced 17%announced 13%was 11%introduced 4%underwent 4%launched 3%faced 3%

    Equal scores: a coin flip decides.

    Search traffic fell after the platform experienced …

    After “switched” totototototototo → to 100% of the odds: no contest

    Our real key 30 rounds · 5-token context

    Toy mechanism with measured odds (Gemma 4 E2B, 29 Sep 2026). The scores here come from a demo key; the real scheme is Dathathri et al., Nature, 23 Oct 2024.

    04 / 04

    Thirty rounds, and forced words

    Our key runs 30 rounds; this toy shows 3. A word with no real alternative skips the contest, because every candidate is the same word.1

How the mark is read

Reading the mark

  1. Running average score, token by token

    Our pilot · 26 Sep 2026
    0.400.450.500.550.60 1100200300400477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55 0.400.450.500.550.60 1200477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55
    99% noise band detection line, z 2.33 Watermarked, our keyWritten without the keyWatermarked, read with the wrong key

    Pilot article blog-02, Gemma 4 E2B, our key, 26 Sep 2026. The score is the running mean of each token's keyed score; 0.5 means no signal.

    01 / 05

    Replay the scoring

    The key-holder replays the scoring on a finished text. Ordinary words average 0.5, like coin flips. This is one article from our pilot, 442 scored tokens, written with our key.1

    Our pilot · 26 Sep 2026
  2. Running average score, token by token

    Our pilot · 26 Sep 2026
    0.400.450.500.550.60 1100200300400477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55 0.400.450.500.550.60 1200477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55
    99% noise band detection line, z 2.33 Watermarked, our keyWritten without the keyWatermarked, read with the wrong key

    Pilot article blog-02, Gemma 4 E2B, our key, 26 Sep 2026. The score is the running mean of each token's keyed score; 0.5 means no signal.

    02 / 05

    The watermarked article

    The watermarked article settles at 0.534 and clears the detection line with a z-score of 6.8.1

  3. Running average score, token by token

    Our pilot · 26 Sep 2026
    0.400.450.500.550.60 1100200300400477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55 0.400.450.500.550.60 1200477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55
    99% noise band detection line, z 2.33 Watermarked, our keyWritten without the keyWatermarked, read with the wrong key

    Pilot article blog-02, Gemma 4 E2B, our key, 26 Sep 2026. The score is the running mean of each token's keyed score; 0.5 means no signal.

    03 / 05

    Written without the key

    The same prompt written without the key stays inside the band, at z 0.55.1

  4. Running average score, token by token

    Our pilot · 26 Sep 2026
    0.400.450.500.550.60 1100200300400477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55 0.400.450.500.550.60 1200477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55
    99% noise band detection line, z 2.33 Watermarked, our keyWritten without the keyWatermarked, read with the wrong key

    Pilot article blog-02, Gemma 4 E2B, our key, 26 Sep 2026. The score is the running mean of each token's keyed score; 0.5 means no signal.

    04 / 05

    Read with the wrong key

    Scored with the wrong key, the watermarked article looks unmarked too, at z −0.42. The key is the only thing that makes the pattern readable.1

  5. Running average score, token by token

    Our pilot · 26 Sep 2026
    0.400.450.500.550.60 1100200300400477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55 0.400.450.500.550.60 1200477 tokens scored z 6.8z 0.55z −0.42 first 30 tokens: band 0.45 to 0.55
    99% noise band detection line, z 2.33 Watermarked, our keyWritten without the keyWatermarked, read with the wrong key

    Pilot article blog-02, Gemma 4 E2B, our key, 26 Sep 2026. The score is the running mean of each token's keyed score; 0.5 means no signal.

    05 / 05

    Length matters

    The band narrows as words pile up. A tagline sits where nothing can be concluded, and neither Anthropic nor Google publishes a minimum length.1,6

    Claude Help Center · 22 Sep 2026

Chapter 03 · What we measured

Our experiments

Claude's and Gemini's keys are private, so nobody outside those companies can test the deployed marks. We built our own mark with the same open method and a key we made up, then measured what everyday handling does to it. We were not writing a removal guide; we wanted to know where things stand.

Two runs, one key

Setup

  1. Two runs, one key

    Our runs · 26 Sep 2026 and 28 Sep 2026
    Pilot · 26 Sep 2026 12 short articles→ Gemma 4 E2B, laptop→ 17 kinds of handling→ detector
    Main study · 28 Sep 2026
    Blog post 29/30
    Case study 28/30
    Guide 28/30
    Promo page 25/30
    Service page 22/30
    → brief, names removed → Gemma 4 26Brented A100 with our keywithout
    18 kinds of handling Copy and pasteCut to 100 tokensCut to 200 tokensLight edit, asked 5%Light edit, asked 10%Light edit, asked 15%Light edit, asked 20%Light edit, asked 30%Light edit, asked 40%Half mixed with other textAI rewrite, Mistral NemoAI rewrite, GPT-5.5Japanese and backOdd spacing added afterOdd spacing, then cleanedWritten with a symbol after each wordWritten one word per lineWritten in capitals
    Detector -102468 z 2.33 1% false alarms by design
    150pages, each written twice 5,017scored texts 9 of 2,250unwatermarked texts flagged (0.4%) 132 of 150detected untouched (88%)

    Main study: Gemma 4 26B on a rented A100, 28 Sep 2026; one dot per page, filled when the untouched page is detected. Pilot: Gemma 4 E2B on a laptop, 26 Sep 2026. Key: 30 rounds, 5-token context, temperature 0.8, top-k 40.

    01 / 05

    Two rounds

    We ran two rounds. The pilot, on 26 Sep 2026, used the small Gemma 4 E2B model on a laptop to write 12 short articles. The main study, on 28 Sep 2026, used Gemma 4 26B on a rented A100 GPU to write 150 web pages.1,2

    Our runs · 26 and 28 Sep 2026
  2. Two runs, one key

    Our runs · 26 Sep 2026 and 28 Sep 2026
    Pilot · 26 Sep 2026 12 short articles→ Gemma 4 E2B, laptop→ 17 kinds of handling→ detector
    Main study · 28 Sep 2026
    Blog post 29/30
    Case study 28/30
    Guide 28/30
    Promo page 25/30
    Service page 22/30
    → brief, names removed → Gemma 4 26Brented A100 with our keywithout
    18 kinds of handling Copy and pasteCut to 100 tokensCut to 200 tokensLight edit, asked 5%Light edit, asked 10%Light edit, asked 15%Light edit, asked 20%Light edit, asked 30%Light edit, asked 40%Half mixed with other textAI rewrite, Mistral NemoAI rewrite, GPT-5.5Japanese and backOdd spacing added afterOdd spacing, then cleanedWritten with a symbol after each wordWritten one word per lineWritten in capitals
    Detector -102468 z 2.33 1% false alarms by design
    150pages, each written twice 5,017scored texts 9 of 2,250unwatermarked texts flagged (0.4%) 132 of 150detected untouched (88%)

    Main study: Gemma 4 26B on a rented A100, 28 Sep 2026; one dot per page, filled when the untouched page is detected. Pilot: Gemma 4 E2B on a laptop, 26 Sep 2026. Key: 30 rounds, 5-token context, temperature 0.8, top-k 40.

    02 / 05

    Pages modelled on a real site

    The 150 pages follow five page types from one real company's website, 30 of each. The model turned each real page into a brief with names removed, then wrote a fresh page twice: once with our key and once without.2

  3. Two runs, one key

    Our runs · 26 Sep 2026 and 28 Sep 2026
    Pilot · 26 Sep 2026 12 short articles→ Gemma 4 E2B, laptop→ 17 kinds of handling→ detector
    Main study · 28 Sep 2026
    Blog post 29/30
    Case study 28/30
    Guide 28/30
    Promo page 25/30
    Service page 22/30
    → brief, names removed → Gemma 4 26Brented A100 with our keywithout
    18 kinds of handling Copy and pasteCut to 100 tokensCut to 200 tokensLight edit, asked 5%Light edit, asked 10%Light edit, asked 15%Light edit, asked 20%Light edit, asked 30%Light edit, asked 40%Half mixed with other textAI rewrite, Mistral NemoAI rewrite, GPT-5.5Japanese and backOdd spacing added afterOdd spacing, then cleanedWritten with a symbol after each wordWritten one word per lineWritten in capitals
    Detector -102468 z 2.33 1% false alarms by design
    150pages, each written twice 5,017scored texts 9 of 2,250unwatermarked texts flagged (0.4%) 132 of 150detected untouched (88%)

    Main study: Gemma 4 26B on a rented A100, 28 Sep 2026; one dot per page, filled when the untouched page is detected. Pilot: Gemma 4 E2B on a laptop, 26 Sep 2026. Key: 30 rounds, 5-token context, temperature 0.8, top-k 40.

    03 / 05

    Eighteen kinds of handling

    Every page then went through 18 kinds of handling: copy and paste, cutting it short, AI light edits from 5% to 40%, mixing with other text, AI rewrites, a round trip through Japanese, and formatting changes.2

  4. Two runs, one key

    Our runs · 26 Sep 2026 and 28 Sep 2026
    Pilot · 26 Sep 2026 12 short articles→ Gemma 4 E2B, laptop→ 17 kinds of handling→ detector
    Main study · 28 Sep 2026
    Blog post 29/30
    Case study 28/30
    Guide 28/30
    Promo page 25/30
    Service page 22/30
    → brief, names removed → Gemma 4 26Brented A100 with our keywithout
    18 kinds of handling Copy and pasteCut to 100 tokensCut to 200 tokensLight edit, asked 5%Light edit, asked 10%Light edit, asked 15%Light edit, asked 20%Light edit, asked 30%Light edit, asked 40%Half mixed with other textAI rewrite, Mistral NemoAI rewrite, GPT-5.5Japanese and backOdd spacing added afterOdd spacing, then cleanedWritten with a symbol after each wordWritten one word per lineWritten in capitals
    Detector -102468 z 2.33 1% false alarms by design
    150pages, each written twice 5,017scored texts 9 of 2,250unwatermarked texts flagged (0.4%) 132 of 150detected untouched (88%)

    Main study: Gemma 4 26B on a rented A100, 28 Sep 2026; one dot per page, filled when the untouched page is detected. Pilot: Gemma 4 E2B on a laptop, 26 Sep 2026. Key: 30 rounds, 5-token context, temperature 0.8, top-k 40.

    04 / 05

    What counts as detected

    A text counts as detected when its score clears z 2.33, a 1% false-alarm rate by design. Of 2,250 unwatermarked texts, 9 were flagged: 0.4%.2

  5. Two runs, one key

    Our runs · 26 Sep 2026 and 28 Sep 2026
    Pilot · 26 Sep 2026 12 short articles→ Gemma 4 E2B, laptop→ 17 kinds of handling→ detector
    Main study · 28 Sep 2026
    Blog post 29/30
    Case study 28/30
    Guide 28/30
    Promo page 25/30
    Service page 22/30
    → brief, names removed → Gemma 4 26Brented A100 with our keywithout
    18 kinds of handling Copy and pasteCut to 100 tokensCut to 200 tokensLight edit, asked 5%Light edit, asked 10%Light edit, asked 15%Light edit, asked 20%Light edit, asked 30%Light edit, asked 40%Half mixed with other textAI rewrite, Mistral NemoAI rewrite, GPT-5.5Japanese and backOdd spacing added afterOdd spacing, then cleanedWritten with a symbol after each wordWritten one word per lineWritten in capitals
    Detector -102468 z 2.33 1% false alarms by design
    150pages, each written twice 5,017scored texts 9 of 2,250unwatermarked texts flagged (0.4%) 132 of 150detected untouched (88%)

    Main study: Gemma 4 26B on a rented A100, 28 Sep 2026; one dot per page, filled when the untouched page is detected. Pilot: Gemma 4 E2B on a laptop, 26 Sep 2026. Key: 30 rounds, 5-token context, temperature 0.8, top-k 40.

    05 / 05

    Untouched: 88%

    Untouched, the detector finds our mark in 132 of 150 pages, 88%. The 18 misses are concentrated in service pages, 8 of 30.2

Detection after each kind of handling

What removed it

  1. Share of watermarked pages still detected

    Our study · 28 Sep 2026
    0%50%100%AI judge, 0 to 10

    Control

    Untouched 88%
    Copy and paste 88%

    Length

    Cut to 200 tokens 67%
    Cut to 100 tokens 29%

    AI light edits

    Asked 5%6% changed 65% 9.9
    Asked 10%10% changed 45% 9.9
    Asked 15%13% changed 36% 9.9
    Asked 20%17% changed 17% 9.8
    Asked 30%26% changed 3.3% 9.7
    Asked 40%31% changed 3.3% 9.5

    Mixing

    Half mixed with other text 38%

    AI rewrite

    AI rewrite, Mistral Nemo 5.3% 9.5
    AI rewrite, GPT-5.5 (67 pages) 0% 9.7

    Translation

    Japanese and back 2.7% 9.6

    Formatting

    5 kinds, from added spacing to writing in capitals: see “Removal without rewording”

    150 watermarked pages (GPT-5.5 rewrite: 67), Gemma 4 26B, our key, 28 Sep 2026. Whiskers: 95% intervals. Quality: one AI judge (DeepSeek V4 Flash) scoring the changed text against the original.

    01 / 05

    Copy and paste

    Copy and paste changes nothing: 88% detected, the same as untouched. The mark is the word choice itself, so there is nothing hidden to lose.2

    Our study · 28 Sep 2026
  2. Share of watermarked pages still detected

    Our study · 28 Sep 2026
    0%50%100%AI judge, 0 to 10

    Control

    Untouched 88%
    Copy and paste 88%

    Length

    Cut to 200 tokens 67%
    Cut to 100 tokens 29%

    AI light edits

    Asked 5%6% changed 65% 9.9
    Asked 10%10% changed 45% 9.9
    Asked 15%13% changed 36% 9.9
    Asked 20%17% changed 17% 9.8
    Asked 30%26% changed 3.3% 9.7
    Asked 40%31% changed 3.3% 9.5

    Mixing

    Half mixed with other text 38%

    AI rewrite

    AI rewrite, Mistral Nemo 5.3% 9.5
    AI rewrite, GPT-5.5 (67 pages) 0% 9.7

    Translation

    Japanese and back 2.7% 9.6

    Formatting

    5 kinds, from added spacing to writing in capitals: see “Removal without rewording”

    150 watermarked pages (GPT-5.5 rewrite: 67), Gemma 4 26B, our key, 28 Sep 2026. Whiskers: 95% intervals. Quality: one AI judge (DeepSeek V4 Flash) scoring the changed text against the original.

    02 / 05

    Length

    Length matters. Cut to the first 200 tokens, 67% are still detected; cut to 100 tokens, 29%.2

  3. Share of watermarked pages still detected

    Our study · 28 Sep 2026
    0%50%100%AI judge, 0 to 10

    Control

    Untouched 88%
    Copy and paste 88%

    Length

    Cut to 200 tokens 67%
    Cut to 100 tokens 29%

    AI light edits

    Asked 5%6% changed 65% 9.9
    Asked 10%10% changed 45% 9.9
    Asked 15%13% changed 36% 9.9
    Asked 20%17% changed 17% 9.8
    Asked 30%26% changed 3.3% 9.7
    Asked 40%31% changed 3.3% 9.5

    Mixing

    Half mixed with other text 38%

    AI rewrite

    AI rewrite, Mistral Nemo 5.3% 9.5
    AI rewrite, GPT-5.5 (67 pages) 0% 9.7

    Translation

    Japanese and back 2.7% 9.6

    Formatting

    5 kinds, from added spacing to writing in capitals: see “Removal without rewording”

    150 watermarked pages (GPT-5.5 rewrite: 67), Gemma 4 26B, our key, 28 Sep 2026. Whiskers: 95% intervals. Quality: one AI judge (DeepSeek V4 Flash) scoring the changed text against the original.

    03 / 05

    AI light edits

    AI light edits wear the mark down step by step. Edits that changed 6% of the words leave 65% detected, edits that changed 17% leave 17%, and edits that changed 26% leave 3%.2

  4. Share of watermarked pages still detected

    Our study · 28 Sep 2026
    0%50%100%AI judge, 0 to 10

    Control

    Untouched 88%
    Copy and paste 88%

    Length

    Cut to 200 tokens 67%
    Cut to 100 tokens 29%

    AI light edits

    Asked 5%6% changed 65% 9.9
    Asked 10%10% changed 45% 9.9
    Asked 15%13% changed 36% 9.9
    Asked 20%17% changed 17% 9.8
    Asked 30%26% changed 3.3% 9.7
    Asked 40%31% changed 3.3% 9.5

    Mixing

    Half mixed with other text 38%

    AI rewrite

    AI rewrite, Mistral Nemo 5.3% 9.5
    AI rewrite, GPT-5.5 (67 pages) 0% 9.7

    Translation

    Japanese and back 2.7% 9.6

    Formatting

    5 kinds, from added spacing to writing in capitals: see “Removal without rewording”

    150 watermarked pages (GPT-5.5 rewrite: 67), Gemma 4 26B, our key, 28 Sep 2026. Whiskers: 95% intervals. Quality: one AI judge (DeepSeek V4 Flash) scoring the changed text against the original.

    04 / 05

    Mixing

    Mixing each page half and half with another page leaves 38% detected.2

  5. Share of watermarked pages still detected

    Our study · 28 Sep 2026
    0%50%100%AI judge, 0 to 10

    Control

    Untouched 88%
    Copy and paste 88%

    Length

    Cut to 200 tokens 67%
    Cut to 100 tokens 29%

    AI light edits

    Asked 5%6% changed 65% 9.9
    Asked 10%10% changed 45% 9.9
    Asked 15%13% changed 36% 9.9
    Asked 20%17% changed 17% 9.8
    Asked 30%26% changed 3.3% 9.7
    Asked 40%31% changed 3.3% 9.5

    Mixing

    Half mixed with other text 38%

    AI rewrite

    AI rewrite, Mistral Nemo 5.3% 9.5
    AI rewrite, GPT-5.5 (67 pages) 0% 9.7

    Translation

    Japanese and back 2.7% 9.6

    Formatting

    5 kinds, from added spacing to writing in capitals: see “Removal without rewording”

    150 watermarked pages (GPT-5.5 rewrite: 67), Gemma 4 26B, our key, 28 Sep 2026. Whiskers: 95% intervals. Quality: one AI judge (DeepSeek V4 Flash) scoring the changed text against the original.

    05 / 05

    Rewrites and translation

    A full AI rewrite removes it: 5.3% detected after Mistral Nemo and 0 of 67 after GPT-5.5. A round trip through Japanese leaves 2.7%. An AI judge still scores those rewrites 9.5 and 9.7 out of 10.2

Words changed, not words asked for

How much rewording it takes

  1. Detected, by share of words actually changed

    Our study · 28 Sep 2026
    0%25%50%75%100% 0-5%5-10%10-15%15-20%20-30%30-45%45%+ share of the original's words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4% 0%25%50%75%100% 0-55-1010-1515-2020-3030-4545+ % of words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4%
    All 150 pages, every edit, rewrite and translation Most room (over 0.592 bits)Middle thirdLeast room (under 0.533 bits) Pilot, 12 articles, Gemma 4 E2B, 26 Sep 2026

    Main study, Gemma 4 26B, our key, 28 Sep 2026. Words changed is measured, not the share the editor was asked for. Room is the model's own entropy while writing, split into thirds.

    01 / 05

    Placed by words changed

    Here every edit, rewrite and translation is placed by how many words actually changed, not by what the editor was asked to do. With under 5% of the words changed, 85% of pages are detected.2

    Our study · 28 Sep 2026
  2. Detected, by share of words actually changed

    Our study · 28 Sep 2026
    0%25%50%75%100% 0-5%5-10%10-15%15-20%20-30%30-45%45%+ share of the original's words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4% 0%25%50%75%100% 0-55-1010-1515-2020-3030-4545+ % of words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4%
    All 150 pages, every edit, rewrite and translation Most room (over 0.592 bits)Middle thirdLeast room (under 0.533 bits) Pilot, 12 articles, Gemma 4 E2B, 26 Sep 2026

    Main study, Gemma 4 26B, our key, 28 Sep 2026. Words changed is measured, not the share the editor was asked for. Room is the model's own entropy while writing, split into thirds.

    02 / 05

    One word in ten

    Detection falls fast. Between 5% and 10% changed, 54% are detected; between 10% and 15%, 32%. Half the pages lose the mark at about one word in ten.2

  3. Detected, by share of words actually changed

    Our study · 28 Sep 2026
    0%25%50%75%100% 0-5%5-10%10-15%15-20%20-30%30-45%45%+ share of the original's words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4% 0%25%50%75%100% 0-55-1010-1515-2020-3030-4545+ % of words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4%
    All 150 pages, every edit, rewrite and translation Most room (over 0.592 bits)Middle thirdLeast room (under 0.533 bits) Pilot, 12 articles, Gemma 4 E2B, 26 Sep 2026

    Main study, Gemma 4 26B, our key, 28 Sep 2026. Words changed is measured, not the share the editor was asked for. Room is the model's own entropy while writing, split into thirds.

    03 / 05

    The tail

    Between 20% and 30% changed, 4.9% are detected, and beyond 30%, about 2%.2

  4. Detected, by share of words actually changed

    Our study · 28 Sep 2026
    0%25%50%75%100% 0-5%5-10%10-15%15-20%20-30%30-45%45%+ share of the original's words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4% 0%25%50%75%100% 0-55-1010-1515-2020-3030-4545+ % of words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4%
    All 150 pages, every edit, rewrite and translation Most room (over 0.592 bits)Middle thirdLeast room (under 0.533 bits) Pilot, 12 articles, Gemma 4 E2B, 26 Sep 2026

    Main study, Gemma 4 26B, our key, 28 Sep 2026. Words changed is measured, not the share the editor was asked for. Room is the model's own entropy while writing, split into thirds.

    04 / 05

    Room while writing

    Pages written with the most room start stronger: 96% detected under 5% change, against 70% for the least room. By 15% to 20% changed, all three groups sit between 9% and 17%.2

  5. Detected, by share of words actually changed

    Our study · 28 Sep 2026
    0%25%50%75%100% 0-5%5-10%10-15%15-20%20-30%30-45%45%+ share of the original's words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4% 0%25%50%75%100% 0-55-1010-1515-2020-3030-4545+ % of words changed half detected: about 1 word in 10 0-5%: 84.8% detected, n = 2235-10%: 53.6% detected, n = 22410-15%: 32.1% detected, n = 16215-20%: 13.2% detected, n = 12120-30%: 4.9% detected, n = 20530-45%: 2.2% detected, n = 27245-100%: 2.4% detected, n = 210 Most room (over 0.592 bits), 0-5%: 96.1%, n = 76Most room (over 0.592 bits), 5-10%: 64.2%, n = 81Most room (over 0.592 bits), 10-15%: 35.3%, n = 51Most room (over 0.592 bits), 15-20%: 17.1%, n = 41Most room (over 0.592 bits), 20-30%: 6.2%, n = 65Most room (over 0.592 bits), 30-45%: 5.5%, n = 73Most room (over 0.592 bits), 45-100%: 1.2%, n = 83 Middle third, 0-5%: 87.0%, n = 77Middle third, 5-10%: 53.9%, n = 76Middle third, 10-15%: 33.3%, n = 48Middle third, 15-20%: 9.5%, n = 42Middle third, 20-30%: 4.3%, n = 69Middle third, 30-45%: 2.2%, n = 92Middle third, 45-100%: 6.1%, n = 66 Least room (under 0.533 bits), 0-5%: 70.0%, n = 70Least room (under 0.533 bits), 5-10%: 40.3%, n = 67Least room (under 0.533 bits), 10-15%: 28.6%, n = 63Least room (under 0.533 bits), 15-20%: 13.2%, n = 38Least room (under 0.533 bits), 20-30%: 4.2%, n = 71Least room (under 0.533 bits), 30-45%: 0.0%, n = 107Least room (under 0.533 bits), 45-100%: 0.0%, n = 61 Pilot, 0-5%: 85.7%, n = 14Pilot, 5-10%: 61.5%, n = 13Pilot, 10-15%: 37.5%, n = 8Pilot, 15-20%: 20.0%, n = 10Pilot, 20-30%: 0.0%, n = 14Pilot, 30-45%: 5.9%, n = 17Pilot, 45-100%: 0.0%, n = 44 85%54%32%13%4.9%2.2%2.4%
    All 150 pages, every edit, rewrite and translation Most room (over 0.592 bits)Middle thirdLeast room (under 0.533 bits) Pilot, 12 articles, Gemma 4 E2B, 26 Sep 2026

    Main study, Gemma 4 26B, our key, 28 Sep 2026. Words changed is measured, not the share the editor was asked for. Room is the model's own entropy while writing, split into thirds.

    05 / 05

    The pilot agrees

    The pilot traced the same curve two days earlier, with a smaller model and 12 articles. Two models agree on the shape; both use our one key.1,2

    Our pilot · 26 Sep 2026

Tap a version to compare

One article, nine versions

  1. One pilot article, token by token

    Our pilot · 26 Sep 2026

    Original z 6.8 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 11% changed z 4.9 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the correct choice is vitally critical for preventing injury and guaranteeing an enjoyable occasion. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 19% changed z 2.7 · detected

    Setting out on the journey to your first marathon is a thrilling goal, but before you lace up those first race shoes, making the right choice is absolutely vital for avoiding injury and ensuring an enjoyable experience. Choosing the perfect running shoe is less about finding the trendiest new model and more about finding a dependable companion that aligns with your foot mechanics and the demands of long-distance running. Begin by grasping your stride; are you a heel striker, a midfoot runner, or a forefoot strider? Although not a formal analysis, paying attention to how

    Cut to 100 tokens z 1.9 · not detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider?

    Half mixed z 2.8 · detected

    Tired of shouting into the void when trying to connect with your customers? If you run a small business, building a direct line of communication is one of the most powerful, yet often underutilized, tools at your disposal, and that’s where email newsletters come in. Think of an email newsletter not just as a promotional blast, but as a personal touchpoint, a way to nurture the relationships you’ve built with your audience and keep your brand top-of-mind long after they’ve left your physical store or website. Starting

    Spanish and back z 2.8 · detected

    Starting the journey toward your first marathon is an exciting goal, but before lacing up for the race, choosing the right shoes is absolutely crucial to prevent injuries and ensure a pleasant experience. Selecting the perfect running shoes isn't about finding the flashiest model, but rather about finding a reliable companion that matches your foot's biomechanics and the demands of long-distance running. Begin by understanding your stride: do you land on your heel, midfoot, or forefoot? While not a formal analysis, paying attention to how your foot lands and

    Japanese and back z 0.50 · not detected

    The goal of tackling your first marathon is exciting, but choosing the right running shoes before lacing up is crucial to prevent injury and ensure an enjoyable experience. Selecting the perfect running shoe isn't about finding the latest flashy model—it's about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait pattern. Do you land on your heel, midfoot, or forefoot? Even without a professional analysis, observing how your foot strikes the ground and how your weight shifts can provide valuable

    Rewrite, Mistral Nemo z 0.78 · not detected

    Preparing for Your Maiden Marathon: The Perfect Running Shoe Selection

    Embarking on your first marathon is an exciting challenge, but choosing the right running shoe is vital for injury prevention and a pleasant experience. The ideal shoe isn't about aesthetics; it's about finding a trustworthy companion that aligns with your foot mechanics and marathon demands.

    Begin by understanding your running style. Observe how your foot lands and rolls - are you a heel striker, midfoot runner, or forefoot strider? This informal analysis will hint at the support you

    Rewrite, GPT-5.5 z 1.5 · not detected

    Training for your first marathon is an exciting challenge, but before you put in serious miles, choosing the right running shoes is essential. The right pair can help reduce your risk of injury and make the entire experience far more comfortable. Picking a marathon shoe is not about grabbing the trendiest or most eye-catching model; it is about finding a dependable option that suits the way your feet move and can handle the demands of long-distance running. A good place to begin is by noticing your running gait. Do you usually land on your heel, midfoot

    Written without the key z 0.55 · not detected

    Embarking on your first marathon is an exhilarating achievement, but the journey doesn't end at the starting line; the right running shoes are absolutely crucial for comfort, injury prevention, and overall performance. Choosing the perfect pair is a deeply personal process that requires paying close attention to your running style, foot mechanics, and training progression. Before you dive into the endless catalog of options, the most important first step is visiting a specialized running store where experts can analyze your gait. They will observe how you run, whether you overpronate, supinate
    score above 0.5: evidence for our mark faded: below 0.5

    Pilot article blog-02, Gemma 4 E2B, 26 Sep 2026. One article; the averages are in the two scenes before this one. The z and the verdict are for the whole text; the first 110 tokens are shown.

    01 / 04

    Untouched

    This is one pilot article, each word tinted by how much it supports our mark. Untouched, it scores z 6.8.1

    Our pilot · 26 Sep 2026
  2. One pilot article, token by token

    Our pilot · 26 Sep 2026

    Original z 6.8 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 11% changed z 4.9 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the correct choice is vitally critical for preventing injury and guaranteeing an enjoyable occasion. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 19% changed z 2.7 · detected

    Setting out on the journey to your first marathon is a thrilling goal, but before you lace up those first race shoes, making the right choice is absolutely vital for avoiding injury and ensuring an enjoyable experience. Choosing the perfect running shoe is less about finding the trendiest new model and more about finding a dependable companion that aligns with your foot mechanics and the demands of long-distance running. Begin by grasping your stride; are you a heel striker, a midfoot runner, or a forefoot strider? Although not a formal analysis, paying attention to how

    Cut to 100 tokens z 1.9 · not detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider?

    Half mixed z 2.8 · detected

    Tired of shouting into the void when trying to connect with your customers? If you run a small business, building a direct line of communication is one of the most powerful, yet often underutilized, tools at your disposal, and that’s where email newsletters come in. Think of an email newsletter not just as a promotional blast, but as a personal touchpoint, a way to nurture the relationships you’ve built with your audience and keep your brand top-of-mind long after they’ve left your physical store or website. Starting

    Spanish and back z 2.8 · detected

    Starting the journey toward your first marathon is an exciting goal, but before lacing up for the race, choosing the right shoes is absolutely crucial to prevent injuries and ensure a pleasant experience. Selecting the perfect running shoes isn't about finding the flashiest model, but rather about finding a reliable companion that matches your foot's biomechanics and the demands of long-distance running. Begin by understanding your stride: do you land on your heel, midfoot, or forefoot? While not a formal analysis, paying attention to how your foot lands and

    Japanese and back z 0.50 · not detected

    The goal of tackling your first marathon is exciting, but choosing the right running shoes before lacing up is crucial to prevent injury and ensure an enjoyable experience. Selecting the perfect running shoe isn't about finding the latest flashy model—it's about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait pattern. Do you land on your heel, midfoot, or forefoot? Even without a professional analysis, observing how your foot strikes the ground and how your weight shifts can provide valuable

    Rewrite, Mistral Nemo z 0.78 · not detected

    Preparing for Your Maiden Marathon: The Perfect Running Shoe Selection

    Embarking on your first marathon is an exciting challenge, but choosing the right running shoe is vital for injury prevention and a pleasant experience. The ideal shoe isn't about aesthetics; it's about finding a trustworthy companion that aligns with your foot mechanics and marathon demands.

    Begin by understanding your running style. Observe how your foot lands and rolls - are you a heel striker, midfoot runner, or forefoot strider? This informal analysis will hint at the support you

    Rewrite, GPT-5.5 z 1.5 · not detected

    Training for your first marathon is an exciting challenge, but before you put in serious miles, choosing the right running shoes is essential. The right pair can help reduce your risk of injury and make the entire experience far more comfortable. Picking a marathon shoe is not about grabbing the trendiest or most eye-catching model; it is about finding a dependable option that suits the way your feet move and can handle the demands of long-distance running. A good place to begin is by noticing your running gait. Do you usually land on your heel, midfoot

    Written without the key z 0.55 · not detected

    Embarking on your first marathon is an exhilarating achievement, but the journey doesn't end at the starting line; the right running shoes are absolutely crucial for comfort, injury prevention, and overall performance. Choosing the perfect pair is a deeply personal process that requires paying close attention to your running style, foot mechanics, and training progression. Before you dive into the endless catalog of options, the most important first step is visiting a specialized running store where experts can analyze your gait. They will observe how you run, whether you overpronate, supinate
    score above 0.5: evidence for our mark faded: below 0.5

    Pilot article blog-02, Gemma 4 E2B, 26 Sep 2026. One article; the averages are in the two scenes before this one. The z and the verdict are for the whole text; the first 110 tokens are shown.

    02 / 04

    AI edits

    An AI edit that changes 11% of the words leaves z 4.9. One that changes 19% drops it to 2.7, just above the line.1

  3. One pilot article, token by token

    Our pilot · 26 Sep 2026

    Original z 6.8 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 11% changed z 4.9 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the correct choice is vitally critical for preventing injury and guaranteeing an enjoyable occasion. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 19% changed z 2.7 · detected

    Setting out on the journey to your first marathon is a thrilling goal, but before you lace up those first race shoes, making the right choice is absolutely vital for avoiding injury and ensuring an enjoyable experience. Choosing the perfect running shoe is less about finding the trendiest new model and more about finding a dependable companion that aligns with your foot mechanics and the demands of long-distance running. Begin by grasping your stride; are you a heel striker, a midfoot runner, or a forefoot strider? Although not a formal analysis, paying attention to how

    Cut to 100 tokens z 1.9 · not detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider?

    Half mixed z 2.8 · detected

    Tired of shouting into the void when trying to connect with your customers? If you run a small business, building a direct line of communication is one of the most powerful, yet often underutilized, tools at your disposal, and that’s where email newsletters come in. Think of an email newsletter not just as a promotional blast, but as a personal touchpoint, a way to nurture the relationships you’ve built with your audience and keep your brand top-of-mind long after they’ve left your physical store or website. Starting

    Spanish and back z 2.8 · detected

    Starting the journey toward your first marathon is an exciting goal, but before lacing up for the race, choosing the right shoes is absolutely crucial to prevent injuries and ensure a pleasant experience. Selecting the perfect running shoes isn't about finding the flashiest model, but rather about finding a reliable companion that matches your foot's biomechanics and the demands of long-distance running. Begin by understanding your stride: do you land on your heel, midfoot, or forefoot? While not a formal analysis, paying attention to how your foot lands and

    Japanese and back z 0.50 · not detected

    The goal of tackling your first marathon is exciting, but choosing the right running shoes before lacing up is crucial to prevent injury and ensure an enjoyable experience. Selecting the perfect running shoe isn't about finding the latest flashy model—it's about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait pattern. Do you land on your heel, midfoot, or forefoot? Even without a professional analysis, observing how your foot strikes the ground and how your weight shifts can provide valuable

    Rewrite, Mistral Nemo z 0.78 · not detected

    Preparing for Your Maiden Marathon: The Perfect Running Shoe Selection

    Embarking on your first marathon is an exciting challenge, but choosing the right running shoe is vital for injury prevention and a pleasant experience. The ideal shoe isn't about aesthetics; it's about finding a trustworthy companion that aligns with your foot mechanics and marathon demands.

    Begin by understanding your running style. Observe how your foot lands and rolls - are you a heel striker, midfoot runner, or forefoot strider? This informal analysis will hint at the support you

    Rewrite, GPT-5.5 z 1.5 · not detected

    Training for your first marathon is an exciting challenge, but before you put in serious miles, choosing the right running shoes is essential. The right pair can help reduce your risk of injury and make the entire experience far more comfortable. Picking a marathon shoe is not about grabbing the trendiest or most eye-catching model; it is about finding a dependable option that suits the way your feet move and can handle the demands of long-distance running. A good place to begin is by noticing your running gait. Do you usually land on your heel, midfoot

    Written without the key z 0.55 · not detected

    Embarking on your first marathon is an exhilarating achievement, but the journey doesn't end at the starting line; the right running shoes are absolutely crucial for comfort, injury prevention, and overall performance. Choosing the perfect pair is a deeply personal process that requires paying close attention to your running style, foot mechanics, and training progression. Before you dive into the endless catalog of options, the most important first step is visiting a specialized running store where experts can analyze your gait. They will observe how you run, whether you overpronate, supinate
    score above 0.5: evidence for our mark faded: below 0.5

    Pilot article blog-02, Gemma 4 E2B, 26 Sep 2026. One article; the averages are in the two scenes before this one. The z and the verdict are for the whole text; the first 110 tokens are shown.

    03 / 04

    Translation

    A round trip through Spanish keeps z 2.8. Through Japanese, it falls to 0.5.1

  4. One pilot article, token by token

    Our pilot · 26 Sep 2026

    Original z 6.8 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 11% changed z 4.9 · detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the correct choice is vitally critical for preventing injury and guaranteeing an enjoyable occasion. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider? While not a formal analysis, paying attention to how

    AI edit · 19% changed z 2.7 · detected

    Setting out on the journey to your first marathon is a thrilling goal, but before you lace up those first race shoes, making the right choice is absolutely vital for avoiding injury and ensuring an enjoyable experience. Choosing the perfect running shoe is less about finding the trendiest new model and more about finding a dependable companion that aligns with your foot mechanics and the demands of long-distance running. Begin by grasping your stride; are you a heel striker, a midfoot runner, or a forefoot strider? Although not a formal analysis, paying attention to how

    Cut to 100 tokens z 1.9 · not detected

    Embarking on the journey to your first marathon is an exhilarating goal, but before you lace up those first race shoes, making the right choice is absolutely crucial for preventing injury and ensuring an enjoyable experience. Selecting the perfect running shoe is less about finding the flashiest new model and more about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait; are you a heel striker, a midfoot runner, or a forefoot strider?

    Half mixed z 2.8 · detected

    Tired of shouting into the void when trying to connect with your customers? If you run a small business, building a direct line of communication is one of the most powerful, yet often underutilized, tools at your disposal, and that’s where email newsletters come in. Think of an email newsletter not just as a promotional blast, but as a personal touchpoint, a way to nurture the relationships you’ve built with your audience and keep your brand top-of-mind long after they’ve left your physical store or website. Starting

    Spanish and back z 2.8 · detected

    Starting the journey toward your first marathon is an exciting goal, but before lacing up for the race, choosing the right shoes is absolutely crucial to prevent injuries and ensure a pleasant experience. Selecting the perfect running shoes isn't about finding the flashiest model, but rather about finding a reliable companion that matches your foot's biomechanics and the demands of long-distance running. Begin by understanding your stride: do you land on your heel, midfoot, or forefoot? While not a formal analysis, paying attention to how your foot lands and

    Japanese and back z 0.50 · not detected

    The goal of tackling your first marathon is exciting, but choosing the right running shoes before lacing up is crucial to prevent injury and ensure an enjoyable experience. Selecting the perfect running shoe isn't about finding the latest flashy model—it's about finding a reliable partner that matches your foot mechanics and the demands of long-distance running. Start by understanding your gait pattern. Do you land on your heel, midfoot, or forefoot? Even without a professional analysis, observing how your foot strikes the ground and how your weight shifts can provide valuable

    Rewrite, Mistral Nemo z 0.78 · not detected

    Preparing for Your Maiden Marathon: The Perfect Running Shoe Selection

    Embarking on your first marathon is an exciting challenge, but choosing the right running shoe is vital for injury prevention and a pleasant experience. The ideal shoe isn't about aesthetics; it's about finding a trustworthy companion that aligns with your foot mechanics and marathon demands.

    Begin by understanding your running style. Observe how your foot lands and rolls - are you a heel striker, midfoot runner, or forefoot strider? This informal analysis will hint at the support you

    Rewrite, GPT-5.5 z 1.5 · not detected

    Training for your first marathon is an exciting challenge, but before you put in serious miles, choosing the right running shoes is essential. The right pair can help reduce your risk of injury and make the entire experience far more comfortable. Picking a marathon shoe is not about grabbing the trendiest or most eye-catching model; it is about finding a dependable option that suits the way your feet move and can handle the demands of long-distance running. A good place to begin is by noticing your running gait. Do you usually land on your heel, midfoot

    Written without the key z 0.55 · not detected

    Embarking on your first marathon is an exhilarating achievement, but the journey doesn't end at the starting line; the right running shoes are absolutely crucial for comfort, injury prevention, and overall performance. Choosing the perfect pair is a deeply personal process that requires paying close attention to your running style, foot mechanics, and training progression. Before you dive into the endless catalog of options, the most important first step is visiting a specialized running store where experts can analyze your gait. They will observe how you run, whether you overpronate, supinate
    score above 0.5: evidence for our mark faded: below 0.5

    Pilot article blog-02, Gemma 4 E2B, 26 Sep 2026. One article; the averages are in the two scenes before this one. The z and the verdict are for the whole text; the first 110 tokens are shown.

    04 / 04

    Rewrites

    AI rewrites leave nothing readable: z 0.8 after Mistral Nemo, 1.5 after GPT-5.5. The article written without the key scores 0.55.1

Formatting, not words

Removal without rewording

  1. Detected after formatting changes

    Our study · 28 Sep 2026

    Changed after writing

    Untouched 88%
    Odd spacing added 2.0%
    Same spacing, cleaned up by the detector 84%

    Formatted while writing, converted back

    A symbol after every wordmodel followed the format: 99.8% 0.7%
    One word per linemodel followed the format: 100% 1.3%
    All capitalsmodel followed the format: 100% 2.7%

    Why: each word is scored with the tokens just before it Illustration

    Writtenthe◆right◆shoe“shoe” scored next to ◆

    Symbols removedfortherightshoesame word, new context: a fresh, unrelated score

    150 pages per row, Gemma 4 26B, our key, 28 Sep 2026. The formatted-while-writing rows are fresh watermarked pages written under a formatting instruction, then converted back. Cleaning up whitespace before scoring does not raise their rates.

    01 / 04

    Spacing added after writing

    Some changes alter no words at all. Scattering tabs and line breaks through a finished page drops detection from 88% to 2% for a detector that reads the text as is.2

    Our study · 28 Sep 2026
  2. Detected after formatting changes

    Our study · 28 Sep 2026

    Changed after writing

    Untouched 88%
    Odd spacing added 2.0%
    Same spacing, cleaned up by the detector 84%

    Formatted while writing, converted back

    A symbol after every wordmodel followed the format: 99.8% 0.7%
    One word per linemodel followed the format: 100% 1.3%
    All capitalsmodel followed the format: 100% 2.7%

    Why: each word is scored with the tokens just before it Illustration

    Writtenthe◆right◆shoe“shoe” scored next to ◆

    Symbols removedfortherightshoesame word, new context: a fresh, unrelated score

    150 pages per row, Gemma 4 26B, our key, 28 Sep 2026. The formatted-while-writing rows are fresh watermarked pages written under a formatting instruction, then converted back. Cleaning up whitespace before scoring does not raise their rates.

    02 / 04

    Reversible

    That change is reversible, and so is the damage. A detector that collapses whitespace before scoring recovers 84%.2

  3. Detected after formatting changes

    Our study · 28 Sep 2026

    Changed after writing

    Untouched 88%
    Odd spacing added 2.0%
    Same spacing, cleaned up by the detector 84%

    Formatted while writing, converted back

    A symbol after every wordmodel followed the format: 99.8% 0.7%
    One word per linemodel followed the format: 100% 1.3%
    All capitalsmodel followed the format: 100% 2.7%

    Why: each word is scored with the tokens just before it Illustration

    Writtenthe◆right◆shoe“shoe” scored next to ◆

    Symbols removedfortherightshoesame word, new context: a fresh, unrelated score

    150 pages per row, Gemma 4 26B, our key, 28 Sep 2026. The formatted-while-writing rows are fresh watermarked pages written under a formatting instruction, then converted back. Cleaning up whitespace before scoring does not raise their rates.

    03 / 04

    Formatted while writing

    Formatting while writing is different. When the model writes with a symbol after every word, one word per line or in capitals, and the text is converted back afterwards, 0.7% to 2.7% of pages are detected, even after cleanup.2

  4. Detected after formatting changes

    Our study · 28 Sep 2026

    Changed after writing

    Untouched 88%
    Odd spacing added 2.0%
    Same spacing, cleaned up by the detector 84%

    Formatted while writing, converted back

    A symbol after every wordmodel followed the format: 99.8% 0.7%
    One word per linemodel followed the format: 100% 1.3%
    All capitalsmodel followed the format: 100% 2.7%

    Why: each word is scored with the tokens just before it Illustration

    Writtenthe◆right◆shoe“shoe” scored next to ◆

    Symbols removedfortherightshoesame word, new context: a fresh, unrelated score

    150 pages per row, Gemma 4 26B, our key, 28 Sep 2026. The formatted-while-writing rows are fresh watermarked pages written under a formatting instruction, then converted back. Cleaning up whitespace before scoring does not raise their rates.

    04 / 04

    Why: context

    The reason is context. Each word's score depends on the tokens just before it, so words written next to a symbol sit in a different context once it is gone. Kirchenbauer et al. described this “emoji attack” in 2023; a provider can defend by ignoring such symbols when it applies the mark, and whether Claude or Gemini does is not public.2,9

    Kirchenbauer et al. · 2023

Why some pages start weaker

AI pages leave less room

  1. Room per token: the real pages and oursRoom while writing and the strength of the mark

    Our study · 28 Sep 2026
    Blog post 0.58 / 1.20 97% detected
    Case study 0.55 / 1.24 93% detected
    Guide 0.61 / 1.35 93% detected
    Promo page 0.55 / 1.21 83% detected
    Service page 0.51 / 1.20 73% detected
    0.00.51.01.5
    02468 0.400.450.500.550.600.650.700.75 room while writing, bits per token detection z z 2.33 Blog post: 0.53 bits, z 2.44Blog post: 0.59 bits, z 3.43Blog post: 0.64 bits, z 4.26Blog post: 0.60 bits, z 4.37Blog post: 0.65 bits, z 4.60Blog post: 0.58 bits, z 5.35Blog post: 0.50 bits, z 3.83Blog post: 0.61 bits, z 5.42Blog post: 0.58 bits, z 3.13Blog post: 0.67 bits, z 3.29Blog post: 0.53 bits, z 1.92Blog post: 0.58 bits, z 3.57Blog post: 0.59 bits, z 4.19Blog post: 0.58 bits, z 5.34Blog post: 0.57 bits, z 2.68Blog post: 0.55 bits, z 4.59Blog post: 0.64 bits, z 4.36Blog post: 0.54 bits, z 3.37Blog post: 0.57 bits, z 3.76Blog post: 0.70 bits, z 3.72Blog post: 0.59 bits, z 2.64Blog post: 0.48 bits, z 5.09Blog post: 0.60 bits, z 2.90Blog post: 0.56 bits, z 2.86Blog post: 0.56 bits, z 3.04Blog post: 0.56 bits, z 3.19Blog post: 0.65 bits, z 3.40Guide: 0.59 bits, z 3.98Blog post: 0.74 bits, z 5.16Blog post: 0.63 bits, z 4.54Blog post: 0.66 bits, z 3.93Guide: 0.67 bits, z 3.81Guide: 0.62 bits, z 4.28Guide: 0.54 bits, z 4.12Guide: 0.47 bits, z 1.44Guide: 0.56 bits, z 3.22Guide: 0.63 bits, z 4.89Guide: 0.62 bits, z 4.41Guide: 0.65 bits, z 4.50Guide: 0.65 bits, z 3.37Guide: 0.63 bits, z 5.22Guide: 0.56 bits, z 4.86Guide: 0.59 bits, z 5.08Guide: 0.64 bits, z 3.73Guide: 0.55 bits, z 4.79Guide: 0.68 bits, z 3.96Guide: 0.56 bits, z 3.66Guide: 0.61 bits, z 4.18Guide: 0.64 bits, z 4.32Guide: 0.52 bits, z 2.70Guide: 0.62 bits, z 3.99Guide: 0.48 bits, z 3.63Guide: 0.66 bits, z 3.73Guide: 0.68 bits, z 4.52Guide: 0.62 bits, z 3.86Guide: 0.53 bits, z 2.80Guide: 0.53 bits, z 3.78Guide: 0.58 bits, z 3.59Guide: 0.65 bits, z 4.04Guide: 0.48 bits, z 1.93Service page: 0.51 bits, z 3.22Service page: 0.59 bits, z 3.34Service page: 0.46 bits, z 2.34Service page: 0.42 bits, z 2.52Service page: 0.44 bits, z 2.34Service page: 0.52 bits, z 1.63Service page: 0.51 bits, z 4.58Service page: 0.55 bits, z 2.28Service page: 0.46 bits, z 3.85Service page: 0.51 bits, z 3.86Service page: 0.62 bits, z 7.45Service page: 0.48 bits, z 2.11Service page: 0.53 bits, z 2.23Service page: 0.54 bits, z 3.85Service page: 0.55 bits, z 2.00Service page: 0.41 bits, z 3.42Service page: 0.47 bits, z 3.05Service page: 0.57 bits, z 3.62Service page: 0.56 bits, z 3.21Service page: 0.49 bits, z 3.79Service page: 0.55 bits, z 5.34Service page: 0.60 bits, z 2.50Service page: 0.65 bits, z 3.18Service page: 0.47 bits, z 1.74Service page: 0.48 bits, z 3.55Service page: 0.46 bits, z 2.09Service page: 0.50 bits, z 2.31Service page: 0.53 bits, z 3.44Service page: 0.51 bits, z 3.65Service page: 0.48 bits, z 5.29Case study: 0.54 bits, z 3.34Case study: 0.51 bits, z 3.03Case study: 0.56 bits, z 5.25Case study: 0.48 bits, z 2.74Case study: 0.57 bits, z 3.69Case study: 0.51 bits, z 2.58Case study: 0.59 bits, z 3.39Case study: 0.57 bits, z 4.46Case study: 0.47 bits, z 3.43Case study: 0.52 bits, z 3.40Case study: 0.57 bits, z 4.01Case study: 0.57 bits, z 2.97Case study: 0.53 bits, z 3.25Case study: 0.62 bits, z 6.14Case study: 0.55 bits, z 2.37Case study: 0.58 bits, z 3.94Case study: 0.54 bits, z 2.14Case study: 0.59 bits, z 3.34Case study: 0.43 bits, z 3.49Case study: 0.48 bits, z 4.38Case study: 0.53 bits, z 3.28Case study: 0.49 bits, z 4.73Case study: 0.55 bits, z 2.26Case study: 0.53 bits, z 5.17Case study: 0.61 bits, z 5.02Case study: 0.54 bits, z 3.88Case study: 0.59 bits, z 4.06Case study: 0.47 bits, z 3.90Case study: 0.61 bits, z 2.50Promo / landing page: 0.48 bits, z 1.85Case study: 0.70 bits, z 2.96Promo / landing page: 0.62 bits, z 2.56Promo / landing page: 0.42 bits, z 0.85Promo / landing page: 0.61 bits, z 5.22Promo / landing page: 0.53 bits, z 3.75Promo / landing page: 0.53 bits, z 3.35Promo / landing page: 0.56 bits, z 6.17Promo / landing page: 0.59 bits, z 3.71Promo / landing page: 0.49 bits, z 2.08Promo / landing page: 0.60 bits, z 2.93Promo / landing page: 0.58 bits, z 5.93Promo / landing page: 0.59 bits, z 3.27Promo / landing page: 0.56 bits, z 2.99Promo / landing page: 0.55 bits, z 4.63Promo / landing page: 0.51 bits, z 2.31Promo / landing page: 0.63 bits, z 3.43Promo / landing page: 0.57 bits, z 3.56Promo / landing page: 0.54 bits, z 5.42Promo / landing page: 0.55 bits, z 2.42Promo / landing page: 0.63 bits, z 3.52Promo / landing page: 0.73 bits, z 5.51Promo / landing page: 0.52 bits, z 3.49Promo / landing page: 0.61 bits, z 4.84Promo / landing page: 0.54 bits, z 4.11Promo / landing page: 0.50 bits, z 3.68Promo / landing page: 0.64 bits, z 4.54Promo / landing page: 0.56 bits, z 4.46Promo / landing page: 0.49 bits, z 2.46Promo / landing page: 0.46 bits, z 2.11Promo / landing page: 0.54 bits, z 3.74 02468 0.400.500.600.70 room while writing, bits per token detection z z 2.33 Blog post: 0.53 bits, z 2.44Blog post: 0.59 bits, z 3.43Blog post: 0.64 bits, z 4.26Blog post: 0.60 bits, z 4.37Blog post: 0.65 bits, z 4.60Blog post: 0.58 bits, z 5.35Blog post: 0.50 bits, z 3.83Blog post: 0.61 bits, z 5.42Blog post: 0.58 bits, z 3.13Blog post: 0.67 bits, z 3.29Blog post: 0.53 bits, z 1.92Blog post: 0.58 bits, z 3.57Blog post: 0.59 bits, z 4.19Blog post: 0.58 bits, z 5.34Blog post: 0.57 bits, z 2.68Blog post: 0.55 bits, z 4.59Blog post: 0.64 bits, z 4.36Blog post: 0.54 bits, z 3.37Blog post: 0.57 bits, z 3.76Blog post: 0.70 bits, z 3.72Blog post: 0.59 bits, z 2.64Blog post: 0.48 bits, z 5.09Blog post: 0.60 bits, z 2.90Blog post: 0.56 bits, z 2.86Blog post: 0.56 bits, z 3.04Blog post: 0.56 bits, z 3.19Blog post: 0.65 bits, z 3.40Guide: 0.59 bits, z 3.98Blog post: 0.74 bits, z 5.16Blog post: 0.63 bits, z 4.54Blog post: 0.66 bits, z 3.93Guide: 0.67 bits, z 3.81Guide: 0.62 bits, z 4.28Guide: 0.54 bits, z 4.12Guide: 0.47 bits, z 1.44Guide: 0.56 bits, z 3.22Guide: 0.63 bits, z 4.89Guide: 0.62 bits, z 4.41Guide: 0.65 bits, z 4.50Guide: 0.65 bits, z 3.37Guide: 0.63 bits, z 5.22Guide: 0.56 bits, z 4.86Guide: 0.59 bits, z 5.08Guide: 0.64 bits, z 3.73Guide: 0.55 bits, z 4.79Guide: 0.68 bits, z 3.96Guide: 0.56 bits, z 3.66Guide: 0.61 bits, z 4.18Guide: 0.64 bits, z 4.32Guide: 0.52 bits, z 2.70Guide: 0.62 bits, z 3.99Guide: 0.48 bits, z 3.63Guide: 0.66 bits, z 3.73Guide: 0.68 bits, z 4.52Guide: 0.62 bits, z 3.86Guide: 0.53 bits, z 2.80Guide: 0.53 bits, z 3.78Guide: 0.58 bits, z 3.59Guide: 0.65 bits, z 4.04Guide: 0.48 bits, z 1.93Service page: 0.51 bits, z 3.22Service page: 0.59 bits, z 3.34Service page: 0.46 bits, z 2.34Service page: 0.42 bits, z 2.52Service page: 0.44 bits, z 2.34Service page: 0.52 bits, z 1.63Service page: 0.51 bits, z 4.58Service page: 0.55 bits, z 2.28Service page: 0.46 bits, z 3.85Service page: 0.51 bits, z 3.86Service page: 0.62 bits, z 7.45Service page: 0.48 bits, z 2.11Service page: 0.53 bits, z 2.23Service page: 0.54 bits, z 3.85Service page: 0.55 bits, z 2.00Service page: 0.41 bits, z 3.42Service page: 0.47 bits, z 3.05Service page: 0.57 bits, z 3.62Service page: 0.56 bits, z 3.21Service page: 0.49 bits, z 3.79Service page: 0.55 bits, z 5.34Service page: 0.60 bits, z 2.50Service page: 0.65 bits, z 3.18Service page: 0.47 bits, z 1.74Service page: 0.48 bits, z 3.55Service page: 0.46 bits, z 2.09Service page: 0.50 bits, z 2.31Service page: 0.53 bits, z 3.44Service page: 0.51 bits, z 3.65Service page: 0.48 bits, z 5.29Case study: 0.54 bits, z 3.34Case study: 0.51 bits, z 3.03Case study: 0.56 bits, z 5.25Case study: 0.48 bits, z 2.74Case study: 0.57 bits, z 3.69Case study: 0.51 bits, z 2.58Case study: 0.59 bits, z 3.39Case study: 0.57 bits, z 4.46Case study: 0.47 bits, z 3.43Case study: 0.52 bits, z 3.40Case study: 0.57 bits, z 4.01Case study: 0.57 bits, z 2.97Case study: 0.53 bits, z 3.25Case study: 0.62 bits, z 6.14Case study: 0.55 bits, z 2.37Case study: 0.58 bits, z 3.94Case study: 0.54 bits, z 2.14Case study: 0.59 bits, z 3.34Case study: 0.43 bits, z 3.49Case study: 0.48 bits, z 4.38Case study: 0.53 bits, z 3.28Case study: 0.49 bits, z 4.73Case study: 0.55 bits, z 2.26Case study: 0.53 bits, z 5.17Case study: 0.61 bits, z 5.02Case study: 0.54 bits, z 3.88Case study: 0.59 bits, z 4.06Case study: 0.47 bits, z 3.90Case study: 0.61 bits, z 2.50Promo / landing page: 0.48 bits, z 1.85Case study: 0.70 bits, z 2.96Promo / landing page: 0.62 bits, z 2.56Promo / landing page: 0.42 bits, z 0.85Promo / landing page: 0.61 bits, z 5.22Promo / landing page: 0.53 bits, z 3.75Promo / landing page: 0.53 bits, z 3.35Promo / landing page: 0.56 bits, z 6.17Promo / landing page: 0.59 bits, z 3.71Promo / landing page: 0.49 bits, z 2.08Promo / landing page: 0.60 bits, z 2.93Promo / landing page: 0.58 bits, z 5.93Promo / landing page: 0.59 bits, z 3.27Promo / landing page: 0.56 bits, z 2.99Promo / landing page: 0.55 bits, z 4.63Promo / landing page: 0.51 bits, z 2.31Promo / landing page: 0.63 bits, z 3.43Promo / landing page: 0.57 bits, z 3.56Promo / landing page: 0.54 bits, z 5.42Promo / landing page: 0.55 bits, z 2.42Promo / landing page: 0.63 bits, z 3.52Promo / landing page: 0.73 bits, z 5.51Promo / landing page: 0.52 bits, z 3.49Promo / landing page: 0.61 bits, z 4.84Promo / landing page: 0.54 bits, z 4.11Promo / landing page: 0.50 bits, z 3.68Promo / landing page: 0.64 bits, z 4.54Promo / landing page: 0.56 bits, z 4.46Promo / landing page: 0.49 bits, z 2.46Promo / landing page: 0.46 bits, z 2.11Promo / landing page: 0.54 bits, z 3.74
    human-written page on the real site our model's page, same brief our model's page, detected hollow: missed blog post service page

    Human room: Gemma 4 E2B reading the real page. AI room: Gemma 4 26B measuring its own odds while writing. Two models, so read the gap as indicative, not exact. 30 pages per type, 28 Sep 2026.

    01 / 03

    About half the room

    The real site's human-written pages carry 1.20 to 1.35 bits per token by page type. The pages our model wrote from the same briefs carry 0.51 to 0.61, about half. A model writes what it finds most predictable.2,3

    Human room was scored by Gemma 4 E2B reading the page; AI room was measured by Gemma 4 26B while writing. Read the gap as indicative, not exact.

    Our study · 27 and 28 Sep 2026
  2. Room per token: the real pages and oursRoom while writing and the strength of the mark

    Our study · 28 Sep 2026
    Blog post 0.58 / 1.20 97% detected
    Case study 0.55 / 1.24 93% detected
    Guide 0.61 / 1.35 93% detected
    Promo page 0.55 / 1.21 83% detected
    Service page 0.51 / 1.20 73% detected
    0.00.51.01.5
    02468 0.400.450.500.550.600.650.700.75 room while writing, bits per token detection z z 2.33 Blog post: 0.53 bits, z 2.44Blog post: 0.59 bits, z 3.43Blog post: 0.64 bits, z 4.26Blog post: 0.60 bits, z 4.37Blog post: 0.65 bits, z 4.60Blog post: 0.58 bits, z 5.35Blog post: 0.50 bits, z 3.83Blog post: 0.61 bits, z 5.42Blog post: 0.58 bits, z 3.13Blog post: 0.67 bits, z 3.29Blog post: 0.53 bits, z 1.92Blog post: 0.58 bits, z 3.57Blog post: 0.59 bits, z 4.19Blog post: 0.58 bits, z 5.34Blog post: 0.57 bits, z 2.68Blog post: 0.55 bits, z 4.59Blog post: 0.64 bits, z 4.36Blog post: 0.54 bits, z 3.37Blog post: 0.57 bits, z 3.76Blog post: 0.70 bits, z 3.72Blog post: 0.59 bits, z 2.64Blog post: 0.48 bits, z 5.09Blog post: 0.60 bits, z 2.90Blog post: 0.56 bits, z 2.86Blog post: 0.56 bits, z 3.04Blog post: 0.56 bits, z 3.19Blog post: 0.65 bits, z 3.40Guide: 0.59 bits, z 3.98Blog post: 0.74 bits, z 5.16Blog post: 0.63 bits, z 4.54Blog post: 0.66 bits, z 3.93Guide: 0.67 bits, z 3.81Guide: 0.62 bits, z 4.28Guide: 0.54 bits, z 4.12Guide: 0.47 bits, z 1.44Guide: 0.56 bits, z 3.22Guide: 0.63 bits, z 4.89Guide: 0.62 bits, z 4.41Guide: 0.65 bits, z 4.50Guide: 0.65 bits, z 3.37Guide: 0.63 bits, z 5.22Guide: 0.56 bits, z 4.86Guide: 0.59 bits, z 5.08Guide: 0.64 bits, z 3.73Guide: 0.55 bits, z 4.79Guide: 0.68 bits, z 3.96Guide: 0.56 bits, z 3.66Guide: 0.61 bits, z 4.18Guide: 0.64 bits, z 4.32Guide: 0.52 bits, z 2.70Guide: 0.62 bits, z 3.99Guide: 0.48 bits, z 3.63Guide: 0.66 bits, z 3.73Guide: 0.68 bits, z 4.52Guide: 0.62 bits, z 3.86Guide: 0.53 bits, z 2.80Guide: 0.53 bits, z 3.78Guide: 0.58 bits, z 3.59Guide: 0.65 bits, z 4.04Guide: 0.48 bits, z 1.93Service page: 0.51 bits, z 3.22Service page: 0.59 bits, z 3.34Service page: 0.46 bits, z 2.34Service page: 0.42 bits, z 2.52Service page: 0.44 bits, z 2.34Service page: 0.52 bits, z 1.63Service page: 0.51 bits, z 4.58Service page: 0.55 bits, z 2.28Service page: 0.46 bits, z 3.85Service page: 0.51 bits, z 3.86Service page: 0.62 bits, z 7.45Service page: 0.48 bits, z 2.11Service page: 0.53 bits, z 2.23Service page: 0.54 bits, z 3.85Service page: 0.55 bits, z 2.00Service page: 0.41 bits, z 3.42Service page: 0.47 bits, z 3.05Service page: 0.57 bits, z 3.62Service page: 0.56 bits, z 3.21Service page: 0.49 bits, z 3.79Service page: 0.55 bits, z 5.34Service page: 0.60 bits, z 2.50Service page: 0.65 bits, z 3.18Service page: 0.47 bits, z 1.74Service page: 0.48 bits, z 3.55Service page: 0.46 bits, z 2.09Service page: 0.50 bits, z 2.31Service page: 0.53 bits, z 3.44Service page: 0.51 bits, z 3.65Service page: 0.48 bits, z 5.29Case study: 0.54 bits, z 3.34Case study: 0.51 bits, z 3.03Case study: 0.56 bits, z 5.25Case study: 0.48 bits, z 2.74Case study: 0.57 bits, z 3.69Case study: 0.51 bits, z 2.58Case study: 0.59 bits, z 3.39Case study: 0.57 bits, z 4.46Case study: 0.47 bits, z 3.43Case study: 0.52 bits, z 3.40Case study: 0.57 bits, z 4.01Case study: 0.57 bits, z 2.97Case study: 0.53 bits, z 3.25Case study: 0.62 bits, z 6.14Case study: 0.55 bits, z 2.37Case study: 0.58 bits, z 3.94Case study: 0.54 bits, z 2.14Case study: 0.59 bits, z 3.34Case study: 0.43 bits, z 3.49Case study: 0.48 bits, z 4.38Case study: 0.53 bits, z 3.28Case study: 0.49 bits, z 4.73Case study: 0.55 bits, z 2.26Case study: 0.53 bits, z 5.17Case study: 0.61 bits, z 5.02Case study: 0.54 bits, z 3.88Case study: 0.59 bits, z 4.06Case study: 0.47 bits, z 3.90Case study: 0.61 bits, z 2.50Promo / landing page: 0.48 bits, z 1.85Case study: 0.70 bits, z 2.96Promo / landing page: 0.62 bits, z 2.56Promo / landing page: 0.42 bits, z 0.85Promo / landing page: 0.61 bits, z 5.22Promo / landing page: 0.53 bits, z 3.75Promo / landing page: 0.53 bits, z 3.35Promo / landing page: 0.56 bits, z 6.17Promo / landing page: 0.59 bits, z 3.71Promo / landing page: 0.49 bits, z 2.08Promo / landing page: 0.60 bits, z 2.93Promo / landing page: 0.58 bits, z 5.93Promo / landing page: 0.59 bits, z 3.27Promo / landing page: 0.56 bits, z 2.99Promo / landing page: 0.55 bits, z 4.63Promo / landing page: 0.51 bits, z 2.31Promo / landing page: 0.63 bits, z 3.43Promo / landing page: 0.57 bits, z 3.56Promo / landing page: 0.54 bits, z 5.42Promo / landing page: 0.55 bits, z 2.42Promo / landing page: 0.63 bits, z 3.52Promo / landing page: 0.73 bits, z 5.51Promo / landing page: 0.52 bits, z 3.49Promo / landing page: 0.61 bits, z 4.84Promo / landing page: 0.54 bits, z 4.11Promo / landing page: 0.50 bits, z 3.68Promo / landing page: 0.64 bits, z 4.54Promo / landing page: 0.56 bits, z 4.46Promo / landing page: 0.49 bits, z 2.46Promo / landing page: 0.46 bits, z 2.11Promo / landing page: 0.54 bits, z 3.74 02468 0.400.500.600.70 room while writing, bits per token detection z z 2.33 Blog post: 0.53 bits, z 2.44Blog post: 0.59 bits, z 3.43Blog post: 0.64 bits, z 4.26Blog post: 0.60 bits, z 4.37Blog post: 0.65 bits, z 4.60Blog post: 0.58 bits, z 5.35Blog post: 0.50 bits, z 3.83Blog post: 0.61 bits, z 5.42Blog post: 0.58 bits, z 3.13Blog post: 0.67 bits, z 3.29Blog post: 0.53 bits, z 1.92Blog post: 0.58 bits, z 3.57Blog post: 0.59 bits, z 4.19Blog post: 0.58 bits, z 5.34Blog post: 0.57 bits, z 2.68Blog post: 0.55 bits, z 4.59Blog post: 0.64 bits, z 4.36Blog post: 0.54 bits, z 3.37Blog post: 0.57 bits, z 3.76Blog post: 0.70 bits, z 3.72Blog post: 0.59 bits, z 2.64Blog post: 0.48 bits, z 5.09Blog post: 0.60 bits, z 2.90Blog post: 0.56 bits, z 2.86Blog post: 0.56 bits, z 3.04Blog post: 0.56 bits, z 3.19Blog post: 0.65 bits, z 3.40Guide: 0.59 bits, z 3.98Blog post: 0.74 bits, z 5.16Blog post: 0.63 bits, z 4.54Blog post: 0.66 bits, z 3.93Guide: 0.67 bits, z 3.81Guide: 0.62 bits, z 4.28Guide: 0.54 bits, z 4.12Guide: 0.47 bits, z 1.44Guide: 0.56 bits, z 3.22Guide: 0.63 bits, z 4.89Guide: 0.62 bits, z 4.41Guide: 0.65 bits, z 4.50Guide: 0.65 bits, z 3.37Guide: 0.63 bits, z 5.22Guide: 0.56 bits, z 4.86Guide: 0.59 bits, z 5.08Guide: 0.64 bits, z 3.73Guide: 0.55 bits, z 4.79Guide: 0.68 bits, z 3.96Guide: 0.56 bits, z 3.66Guide: 0.61 bits, z 4.18Guide: 0.64 bits, z 4.32Guide: 0.52 bits, z 2.70Guide: 0.62 bits, z 3.99Guide: 0.48 bits, z 3.63Guide: 0.66 bits, z 3.73Guide: 0.68 bits, z 4.52Guide: 0.62 bits, z 3.86Guide: 0.53 bits, z 2.80Guide: 0.53 bits, z 3.78Guide: 0.58 bits, z 3.59Guide: 0.65 bits, z 4.04Guide: 0.48 bits, z 1.93Service page: 0.51 bits, z 3.22Service page: 0.59 bits, z 3.34Service page: 0.46 bits, z 2.34Service page: 0.42 bits, z 2.52Service page: 0.44 bits, z 2.34Service page: 0.52 bits, z 1.63Service page: 0.51 bits, z 4.58Service page: 0.55 bits, z 2.28Service page: 0.46 bits, z 3.85Service page: 0.51 bits, z 3.86Service page: 0.62 bits, z 7.45Service page: 0.48 bits, z 2.11Service page: 0.53 bits, z 2.23Service page: 0.54 bits, z 3.85Service page: 0.55 bits, z 2.00Service page: 0.41 bits, z 3.42Service page: 0.47 bits, z 3.05Service page: 0.57 bits, z 3.62Service page: 0.56 bits, z 3.21Service page: 0.49 bits, z 3.79Service page: 0.55 bits, z 5.34Service page: 0.60 bits, z 2.50Service page: 0.65 bits, z 3.18Service page: 0.47 bits, z 1.74Service page: 0.48 bits, z 3.55Service page: 0.46 bits, z 2.09Service page: 0.50 bits, z 2.31Service page: 0.53 bits, z 3.44Service page: 0.51 bits, z 3.65Service page: 0.48 bits, z 5.29Case study: 0.54 bits, z 3.34Case study: 0.51 bits, z 3.03Case study: 0.56 bits, z 5.25Case study: 0.48 bits, z 2.74Case study: 0.57 bits, z 3.69Case study: 0.51 bits, z 2.58Case study: 0.59 bits, z 3.39Case study: 0.57 bits, z 4.46Case study: 0.47 bits, z 3.43Case study: 0.52 bits, z 3.40Case study: 0.57 bits, z 4.01Case study: 0.57 bits, z 2.97Case study: 0.53 bits, z 3.25Case study: 0.62 bits, z 6.14Case study: 0.55 bits, z 2.37Case study: 0.58 bits, z 3.94Case study: 0.54 bits, z 2.14Case study: 0.59 bits, z 3.34Case study: 0.43 bits, z 3.49Case study: 0.48 bits, z 4.38Case study: 0.53 bits, z 3.28Case study: 0.49 bits, z 4.73Case study: 0.55 bits, z 2.26Case study: 0.53 bits, z 5.17Case study: 0.61 bits, z 5.02Case study: 0.54 bits, z 3.88Case study: 0.59 bits, z 4.06Case study: 0.47 bits, z 3.90Case study: 0.61 bits, z 2.50Promo / landing page: 0.48 bits, z 1.85Case study: 0.70 bits, z 2.96Promo / landing page: 0.62 bits, z 2.56Promo / landing page: 0.42 bits, z 0.85Promo / landing page: 0.61 bits, z 5.22Promo / landing page: 0.53 bits, z 3.75Promo / landing page: 0.53 bits, z 3.35Promo / landing page: 0.56 bits, z 6.17Promo / landing page: 0.59 bits, z 3.71Promo / landing page: 0.49 bits, z 2.08Promo / landing page: 0.60 bits, z 2.93Promo / landing page: 0.58 bits, z 5.93Promo / landing page: 0.59 bits, z 3.27Promo / landing page: 0.56 bits, z 2.99Promo / landing page: 0.55 bits, z 4.63Promo / landing page: 0.51 bits, z 2.31Promo / landing page: 0.63 bits, z 3.43Promo / landing page: 0.57 bits, z 3.56Promo / landing page: 0.54 bits, z 5.42Promo / landing page: 0.55 bits, z 2.42Promo / landing page: 0.63 bits, z 3.52Promo / landing page: 0.73 bits, z 5.51Promo / landing page: 0.52 bits, z 3.49Promo / landing page: 0.61 bits, z 4.84Promo / landing page: 0.54 bits, z 4.11Promo / landing page: 0.50 bits, z 3.68Promo / landing page: 0.64 bits, z 4.54Promo / landing page: 0.56 bits, z 4.46Promo / landing page: 0.49 bits, z 2.46Promo / landing page: 0.46 bits, z 2.11Promo / landing page: 0.54 bits, z 3.74
    human-written page on the real site our model's page, same brief our model's page, detected hollow: missed blog post service page

    Human room: Gemma 4 E2B reading the real page. AI room: Gemma 4 26B measuring its own odds while writing. Two models, so read the gap as indicative, not exact. 30 pages per type, 28 Sep 2026.

    02 / 03

    Less room, weaker mark

    Less room means a weaker mark. Across the 150 untouched pages, more room goes with a higher score, a rank correlation of 0.40.2

  3. Room per token: the real pages and oursRoom while writing and the strength of the mark

    Our study · 28 Sep 2026
    Blog post 0.58 / 1.20 97% detected
    Case study 0.55 / 1.24 93% detected
    Guide 0.61 / 1.35 93% detected
    Promo page 0.55 / 1.21 83% detected
    Service page 0.51 / 1.20 73% detected
    0.00.51.01.5
    02468 0.400.450.500.550.600.650.700.75 room while writing, bits per token detection z z 2.33 Blog post: 0.53 bits, z 2.44Blog post: 0.59 bits, z 3.43Blog post: 0.64 bits, z 4.26Blog post: 0.60 bits, z 4.37Blog post: 0.65 bits, z 4.60Blog post: 0.58 bits, z 5.35Blog post: 0.50 bits, z 3.83Blog post: 0.61 bits, z 5.42Blog post: 0.58 bits, z 3.13Blog post: 0.67 bits, z 3.29Blog post: 0.53 bits, z 1.92Blog post: 0.58 bits, z 3.57Blog post: 0.59 bits, z 4.19Blog post: 0.58 bits, z 5.34Blog post: 0.57 bits, z 2.68Blog post: 0.55 bits, z 4.59Blog post: 0.64 bits, z 4.36Blog post: 0.54 bits, z 3.37Blog post: 0.57 bits, z 3.76Blog post: 0.70 bits, z 3.72Blog post: 0.59 bits, z 2.64Blog post: 0.48 bits, z 5.09Blog post: 0.60 bits, z 2.90Blog post: 0.56 bits, z 2.86Blog post: 0.56 bits, z 3.04Blog post: 0.56 bits, z 3.19Blog post: 0.65 bits, z 3.40Guide: 0.59 bits, z 3.98Blog post: 0.74 bits, z 5.16Blog post: 0.63 bits, z 4.54Blog post: 0.66 bits, z 3.93Guide: 0.67 bits, z 3.81Guide: 0.62 bits, z 4.28Guide: 0.54 bits, z 4.12Guide: 0.47 bits, z 1.44Guide: 0.56 bits, z 3.22Guide: 0.63 bits, z 4.89Guide: 0.62 bits, z 4.41Guide: 0.65 bits, z 4.50Guide: 0.65 bits, z 3.37Guide: 0.63 bits, z 5.22Guide: 0.56 bits, z 4.86Guide: 0.59 bits, z 5.08Guide: 0.64 bits, z 3.73Guide: 0.55 bits, z 4.79Guide: 0.68 bits, z 3.96Guide: 0.56 bits, z 3.66Guide: 0.61 bits, z 4.18Guide: 0.64 bits, z 4.32Guide: 0.52 bits, z 2.70Guide: 0.62 bits, z 3.99Guide: 0.48 bits, z 3.63Guide: 0.66 bits, z 3.73Guide: 0.68 bits, z 4.52Guide: 0.62 bits, z 3.86Guide: 0.53 bits, z 2.80Guide: 0.53 bits, z 3.78Guide: 0.58 bits, z 3.59Guide: 0.65 bits, z 4.04Guide: 0.48 bits, z 1.93Service page: 0.51 bits, z 3.22Service page: 0.59 bits, z 3.34Service page: 0.46 bits, z 2.34Service page: 0.42 bits, z 2.52Service page: 0.44 bits, z 2.34Service page: 0.52 bits, z 1.63Service page: 0.51 bits, z 4.58Service page: 0.55 bits, z 2.28Service page: 0.46 bits, z 3.85Service page: 0.51 bits, z 3.86Service page: 0.62 bits, z 7.45Service page: 0.48 bits, z 2.11Service page: 0.53 bits, z 2.23Service page: 0.54 bits, z 3.85Service page: 0.55 bits, z 2.00Service page: 0.41 bits, z 3.42Service page: 0.47 bits, z 3.05Service page: 0.57 bits, z 3.62Service page: 0.56 bits, z 3.21Service page: 0.49 bits, z 3.79Service page: 0.55 bits, z 5.34Service page: 0.60 bits, z 2.50Service page: 0.65 bits, z 3.18Service page: 0.47 bits, z 1.74Service page: 0.48 bits, z 3.55Service page: 0.46 bits, z 2.09Service page: 0.50 bits, z 2.31Service page: 0.53 bits, z 3.44Service page: 0.51 bits, z 3.65Service page: 0.48 bits, z 5.29Case study: 0.54 bits, z 3.34Case study: 0.51 bits, z 3.03Case study: 0.56 bits, z 5.25Case study: 0.48 bits, z 2.74Case study: 0.57 bits, z 3.69Case study: 0.51 bits, z 2.58Case study: 0.59 bits, z 3.39Case study: 0.57 bits, z 4.46Case study: 0.47 bits, z 3.43Case study: 0.52 bits, z 3.40Case study: 0.57 bits, z 4.01Case study: 0.57 bits, z 2.97Case study: 0.53 bits, z 3.25Case study: 0.62 bits, z 6.14Case study: 0.55 bits, z 2.37Case study: 0.58 bits, z 3.94Case study: 0.54 bits, z 2.14Case study: 0.59 bits, z 3.34Case study: 0.43 bits, z 3.49Case study: 0.48 bits, z 4.38Case study: 0.53 bits, z 3.28Case study: 0.49 bits, z 4.73Case study: 0.55 bits, z 2.26Case study: 0.53 bits, z 5.17Case study: 0.61 bits, z 5.02Case study: 0.54 bits, z 3.88Case study: 0.59 bits, z 4.06Case study: 0.47 bits, z 3.90Case study: 0.61 bits, z 2.50Promo / landing page: 0.48 bits, z 1.85Case study: 0.70 bits, z 2.96Promo / landing page: 0.62 bits, z 2.56Promo / landing page: 0.42 bits, z 0.85Promo / landing page: 0.61 bits, z 5.22Promo / landing page: 0.53 bits, z 3.75Promo / landing page: 0.53 bits, z 3.35Promo / landing page: 0.56 bits, z 6.17Promo / landing page: 0.59 bits, z 3.71Promo / landing page: 0.49 bits, z 2.08Promo / landing page: 0.60 bits, z 2.93Promo / landing page: 0.58 bits, z 5.93Promo / landing page: 0.59 bits, z 3.27Promo / landing page: 0.56 bits, z 2.99Promo / landing page: 0.55 bits, z 4.63Promo / landing page: 0.51 bits, z 2.31Promo / landing page: 0.63 bits, z 3.43Promo / landing page: 0.57 bits, z 3.56Promo / landing page: 0.54 bits, z 5.42Promo / landing page: 0.55 bits, z 2.42Promo / landing page: 0.63 bits, z 3.52Promo / landing page: 0.73 bits, z 5.51Promo / landing page: 0.52 bits, z 3.49Promo / landing page: 0.61 bits, z 4.84Promo / landing page: 0.54 bits, z 4.11Promo / landing page: 0.50 bits, z 3.68Promo / landing page: 0.64 bits, z 4.54Promo / landing page: 0.56 bits, z 4.46Promo / landing page: 0.49 bits, z 2.46Promo / landing page: 0.46 bits, z 2.11Promo / landing page: 0.54 bits, z 3.74 02468 0.400.500.600.70 room while writing, bits per token detection z z 2.33 Blog post: 0.53 bits, z 2.44Blog post: 0.59 bits, z 3.43Blog post: 0.64 bits, z 4.26Blog post: 0.60 bits, z 4.37Blog post: 0.65 bits, z 4.60Blog post: 0.58 bits, z 5.35Blog post: 0.50 bits, z 3.83Blog post: 0.61 bits, z 5.42Blog post: 0.58 bits, z 3.13Blog post: 0.67 bits, z 3.29Blog post: 0.53 bits, z 1.92Blog post: 0.58 bits, z 3.57Blog post: 0.59 bits, z 4.19Blog post: 0.58 bits, z 5.34Blog post: 0.57 bits, z 2.68Blog post: 0.55 bits, z 4.59Blog post: 0.64 bits, z 4.36Blog post: 0.54 bits, z 3.37Blog post: 0.57 bits, z 3.76Blog post: 0.70 bits, z 3.72Blog post: 0.59 bits, z 2.64Blog post: 0.48 bits, z 5.09Blog post: 0.60 bits, z 2.90Blog post: 0.56 bits, z 2.86Blog post: 0.56 bits, z 3.04Blog post: 0.56 bits, z 3.19Blog post: 0.65 bits, z 3.40Guide: 0.59 bits, z 3.98Blog post: 0.74 bits, z 5.16Blog post: 0.63 bits, z 4.54Blog post: 0.66 bits, z 3.93Guide: 0.67 bits, z 3.81Guide: 0.62 bits, z 4.28Guide: 0.54 bits, z 4.12Guide: 0.47 bits, z 1.44Guide: 0.56 bits, z 3.22Guide: 0.63 bits, z 4.89Guide: 0.62 bits, z 4.41Guide: 0.65 bits, z 4.50Guide: 0.65 bits, z 3.37Guide: 0.63 bits, z 5.22Guide: 0.56 bits, z 4.86Guide: 0.59 bits, z 5.08Guide: 0.64 bits, z 3.73Guide: 0.55 bits, z 4.79Guide: 0.68 bits, z 3.96Guide: 0.56 bits, z 3.66Guide: 0.61 bits, z 4.18Guide: 0.64 bits, z 4.32Guide: 0.52 bits, z 2.70Guide: 0.62 bits, z 3.99Guide: 0.48 bits, z 3.63Guide: 0.66 bits, z 3.73Guide: 0.68 bits, z 4.52Guide: 0.62 bits, z 3.86Guide: 0.53 bits, z 2.80Guide: 0.53 bits, z 3.78Guide: 0.58 bits, z 3.59Guide: 0.65 bits, z 4.04Guide: 0.48 bits, z 1.93Service page: 0.51 bits, z 3.22Service page: 0.59 bits, z 3.34Service page: 0.46 bits, z 2.34Service page: 0.42 bits, z 2.52Service page: 0.44 bits, z 2.34Service page: 0.52 bits, z 1.63Service page: 0.51 bits, z 4.58Service page: 0.55 bits, z 2.28Service page: 0.46 bits, z 3.85Service page: 0.51 bits, z 3.86Service page: 0.62 bits, z 7.45Service page: 0.48 bits, z 2.11Service page: 0.53 bits, z 2.23Service page: 0.54 bits, z 3.85Service page: 0.55 bits, z 2.00Service page: 0.41 bits, z 3.42Service page: 0.47 bits, z 3.05Service page: 0.57 bits, z 3.62Service page: 0.56 bits, z 3.21Service page: 0.49 bits, z 3.79Service page: 0.55 bits, z 5.34Service page: 0.60 bits, z 2.50Service page: 0.65 bits, z 3.18Service page: 0.47 bits, z 1.74Service page: 0.48 bits, z 3.55Service page: 0.46 bits, z 2.09Service page: 0.50 bits, z 2.31Service page: 0.53 bits, z 3.44Service page: 0.51 bits, z 3.65Service page: 0.48 bits, z 5.29Case study: 0.54 bits, z 3.34Case study: 0.51 bits, z 3.03Case study: 0.56 bits, z 5.25Case study: 0.48 bits, z 2.74Case study: 0.57 bits, z 3.69Case study: 0.51 bits, z 2.58Case study: 0.59 bits, z 3.39Case study: 0.57 bits, z 4.46Case study: 0.47 bits, z 3.43Case study: 0.52 bits, z 3.40Case study: 0.57 bits, z 4.01Case study: 0.57 bits, z 2.97Case study: 0.53 bits, z 3.25Case study: 0.62 bits, z 6.14Case study: 0.55 bits, z 2.37Case study: 0.58 bits, z 3.94Case study: 0.54 bits, z 2.14Case study: 0.59 bits, z 3.34Case study: 0.43 bits, z 3.49Case study: 0.48 bits, z 4.38Case study: 0.53 bits, z 3.28Case study: 0.49 bits, z 4.73Case study: 0.55 bits, z 2.26Case study: 0.53 bits, z 5.17Case study: 0.61 bits, z 5.02Case study: 0.54 bits, z 3.88Case study: 0.59 bits, z 4.06Case study: 0.47 bits, z 3.90Case study: 0.61 bits, z 2.50Promo / landing page: 0.48 bits, z 1.85Case study: 0.70 bits, z 2.96Promo / landing page: 0.62 bits, z 2.56Promo / landing page: 0.42 bits, z 0.85Promo / landing page: 0.61 bits, z 5.22Promo / landing page: 0.53 bits, z 3.75Promo / landing page: 0.53 bits, z 3.35Promo / landing page: 0.56 bits, z 6.17Promo / landing page: 0.59 bits, z 3.71Promo / landing page: 0.49 bits, z 2.08Promo / landing page: 0.60 bits, z 2.93Promo / landing page: 0.58 bits, z 5.93Promo / landing page: 0.59 bits, z 3.27Promo / landing page: 0.56 bits, z 2.99Promo / landing page: 0.55 bits, z 4.63Promo / landing page: 0.51 bits, z 2.31Promo / landing page: 0.63 bits, z 3.43Promo / landing page: 0.57 bits, z 3.56Promo / landing page: 0.54 bits, z 5.42Promo / landing page: 0.55 bits, z 2.42Promo / landing page: 0.63 bits, z 3.52Promo / landing page: 0.73 bits, z 5.51Promo / landing page: 0.52 bits, z 3.49Promo / landing page: 0.61 bits, z 4.84Promo / landing page: 0.54 bits, z 4.11Promo / landing page: 0.50 bits, z 3.68Promo / landing page: 0.64 bits, z 4.54Promo / landing page: 0.56 bits, z 4.46Promo / landing page: 0.49 bits, z 2.46Promo / landing page: 0.46 bits, z 2.11Promo / landing page: 0.54 bits, z 3.74
    human-written page on the real site our model's page, same brief our model's page, detected hollow: missed blog post service page

    Human room: Gemma 4 E2B reading the real page. AI room: Gemma 4 26B measuring its own odds while writing. Two models, so read the gap as indicative, not exact. 30 pages per type, 28 Sep 2026.

    03 / 03

    Service pages and blog posts

    Service pages, the tightest, are detected 73% of the time untouched; blog posts, 97%. With 30 pages per type, those two figures carry wide margins.2

In plain language

What the experiments show, and what they do not

Method in one paragraph

We used Google's open SynthID-Text code in Hugging Face Transformers with a 30-round key we made up and a 5-token context, sampling at temperature 0.8 with top-k 40.1 A text counts as detected when its weighted score is 2.33 standard deviations above chance, a 1% false-alarm rate by design. Light edits came from an AI editor (Llama 3.3 70B) told to change a set share of words; rewrites came from Mistral Nemo and GPT-5.5; translation from Qwen 3 235B; quality scores from one AI judge (DeepSeek V4 Flash), out of 10, against the original. We measured how many words each change actually altered.

What it shows

  • Copy and paste, reformatting that can be undone, and very light edits leave the mark readable.
  • Any AI rewrite or translation removes it almost completely, and the rewritten text still scores well on quality.
  • Editing removes it gradually: half the pages lose it at about 10% of words changed, and almost none keep it past 20%. Two models, two days apart, trace the same curve.
  • False alarms are rare and match the design: 0.4% of 2,250 unwatermarked texts.
  • Formatting instructions given at writing time can defeat a mark that is keyed on raw tokens.

What it does not show

  • Anything direct about Claude's or Gemini's deployed marks. Their keys, models, settings, detectors and defences differ from ours and are not public.
  • How human editors affect the mark. Our edits were made by an AI editor; the 30 human edits in the original plan were not run.
  • Any effect on search rankings. The planned ranking field test has not run.
  • Quality as readers judge it. One AI judge scored each change; no human panel.
  • Precise per-type rates. Each page type has 30 pages, and the GPT-5.5 rewrite ran on 67 of 150 pages because of rate limits.

How it fits published work Reported

Published tests of open SynthID-Text code report the same pattern. One 2026 study finds paraphrase removes 98.3% of marks;13 a 2024 study finds translation drops detection to near chance;14 and a 2023 study finds a watermark can survive human paraphrase given about 800 tokens.15 None of them tested the deployed Claude or Gemini keys.

Chapter 04 · Access and deadlines

Who can check it

Set against the measurements: who can actually read a real mark, what a hit means, and the dates that change the picture.

Reported by the providers and regulators

Keys, access and deadlines

  1. Who marks text, who can check it, and when

    Reported · as of 26 Sep 2026
    2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate 2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate
    • 10 Jun 2026EU final Code of Practice on marking AI-generated content
    • 2 Aug 2026EU AI Act Article 50 applies
    • 14 Aug 2026Anthropic explains Claude's text watermark, a version of SynthID-Text
    • ~1 Sep 2026Claude text detection opens as a private preview
    • 2 Dec 2026Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection
    • 2 Feb 2027EU Code: providers' detection must interoperate

    A hit means the text may have been generated or processed by Claude.

    Claude Help Center, updated 22 Sep 2026. A miss proves nothing.

    ProviderMarks textMethod and detection
    Anthropic Yes A version of SynthID-Text. Detection: private preview for named groups
    Google Yes, in the Gemini app and web SynthID-Text. Detector portal for early testers; Gemini API text marking not confirmed
    OpenAI No Built one in 2024 and held it back; marks images with C2PA and SynthID
    Meta No deployment found TextSeal research, open-sourced May 2026
    Mistral Planned Says marking and detection by 2 Dec 2026
    Cohere Not stated Signed the EU Code; method unstated
    Microsoft, xAI, Amazon None found Image, audio or video marks only in reviewed material

    As of 26 Sep 2026, from the providers' own pages where possible; future dots (dashed) are commitments or legal deadlines, not facts yet. The private-preview date is approximate (a press report).

    01 / 05

    The EU rule

    EU AI Act Article 50 has applied since 2 Aug 2026. It requires AI-generated text to be marked in a machine-readable form that can be detected.18

    EU AI Act, Art. 50
  2. Who marks text, who can check it, and when

    Reported · as of 26 Sep 2026
    2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate 2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate
    • 10 Jun 2026EU final Code of Practice on marking AI-generated content
    • 2 Aug 2026EU AI Act Article 50 applies
    • 14 Aug 2026Anthropic explains Claude's text watermark, a version of SynthID-Text
    • ~1 Sep 2026Claude text detection opens as a private preview
    • 2 Dec 2026Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection
    • 2 Feb 2027EU Code: providers' detection must interoperate

    A hit means the text may have been generated or processed by Claude.

    Claude Help Center, updated 22 Sep 2026. A miss proves nothing.

    ProviderMarks textMethod and detection
    Anthropic Yes A version of SynthID-Text. Detection: private preview for named groups
    Google Yes, in the Gemini app and web SynthID-Text. Detector portal for early testers; Gemini API text marking not confirmed
    OpenAI No Built one in 2024 and held it back; marks images with C2PA and SynthID
    Meta No deployment found TextSeal research, open-sourced May 2026
    Mistral Planned Says marking and detection by 2 Dec 2026
    Cohere Not stated Signed the EU Code; method unstated
    Microsoft, xAI, Amazon None found Image, audio or video marks only in reviewed material

    As of 26 Sep 2026, from the providers' own pages where possible; future dots (dashed) are commitments or legal deadlines, not facts yet. The private-preview date is approximate (a press report).

    02 / 05

    Claude's mark

    Anthropic says Claude uses a version of SynthID-Text worldwide, with no hidden characters and no user identity in the mark. Claude models released before 2 Aug 2026 are covered by 2 Dec 2026.5,6

    Anthropic · 14 Aug and 22 Sep 2026
  3. Who marks text, who can check it, and when

    Reported · as of 26 Sep 2026
    2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate 2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate
    • 10 Jun 2026EU final Code of Practice on marking AI-generated content
    • 2 Aug 2026EU AI Act Article 50 applies
    • 14 Aug 2026Anthropic explains Claude's text watermark, a version of SynthID-Text
    • ~1 Sep 2026Claude text detection opens as a private preview
    • 2 Dec 2026Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection
    • 2 Feb 2027EU Code: providers' detection must interoperate

    A hit means the text may have been generated or processed by Claude.

    Claude Help Center, updated 22 Sep 2026. A miss proves nothing.

    ProviderMarks textMethod and detection
    Anthropic Yes A version of SynthID-Text. Detection: private preview for named groups
    Google Yes, in the Gemini app and web SynthID-Text. Detector portal for early testers; Gemini API text marking not confirmed
    OpenAI No Built one in 2024 and held it back; marks images with C2PA and SynthID
    Meta No deployment found TextSeal research, open-sourced May 2026
    Mistral Planned Says marking and detection by 2 Dec 2026
    Cohere Not stated Signed the EU Code; method unstated
    Microsoft, xAI, Amazon None found Image, audio or video marks only in reviewed material

    As of 26 Sep 2026, from the providers' own pages where possible; future dots (dashed) are commitments or legal deadlines, not facts yet. The private-preview date is approximate (a press report).

    03 / 05

    Who can check

    Detection is a private preview for regulators, law enforcement, media, fact-checkers, researchers, educators and obligated companies. The public checker on claude.com reads credentials on files, not text.6,36

  4. Who marks text, who can check it, and when

    Reported · as of 26 Sep 2026
    2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate 2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate
    • 10 Jun 2026EU final Code of Practice on marking AI-generated content
    • 2 Aug 2026EU AI Act Article 50 applies
    • 14 Aug 2026Anthropic explains Claude's text watermark, a version of SynthID-Text
    • ~1 Sep 2026Claude text detection opens as a private preview
    • 2 Dec 2026Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection
    • 2 Feb 2027EU Code: providers' detection must interoperate

    A hit means the text may have been generated or processed by Claude.

    Claude Help Center, updated 22 Sep 2026. A miss proves nothing.

    ProviderMarks textMethod and detection
    Anthropic Yes A version of SynthID-Text. Detection: private preview for named groups
    Google Yes, in the Gemini app and web SynthID-Text. Detector portal for early testers; Gemini API text marking not confirmed
    OpenAI No Built one in 2024 and held it back; marks images with C2PA and SynthID
    Meta No deployment found TextSeal research, open-sourced May 2026
    Mistral Planned Says marking and detection by 2 Dec 2026
    Cohere Not stated Signed the EU Code; method unstated
    Microsoft, xAI, Amazon None found Image, audio or video marks only in reviewed material

    As of 26 Sep 2026, from the providers' own pages where possible; future dots (dashed) are commitments or legal deadlines, not facts yet. The private-preview date is approximate (a press report).

    04 / 05

    What a hit means

    A hit means the text “may have been generated or processed by Claude”, which includes proofreading and translation. A miss proves nothing.6

  5. Who marks text, who can check it, and when

    Reported · as of 26 Sep 2026
    2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate 2023202420252026AprJulOct2027 today Nov 2022: Scott Aaronson describes a keyed, distortion-free watermark he built for OpenAI24 Jan 2023: Kirchenbauer et al. publish the green-list watermark (KGW)14 May 2024: Google DeepMind says it watermarks Gemini app and web text with SynthID23 Oct 2024: SynthID-Text published in Nature and open-sourced (Transformers v4.46)10 Jun 2026: EU final Code of Practice on marking AI-generated content2 Aug 2026: EU AI Act Article 50 applies14 Aug 2026: Anthropic explains Claude's text watermark, a version of SynthID-Textabout 1 Sep 2026: Claude text detection opens as a private preview14 Sep 2026: Opus 5 text marking starts on cloud partners2 Dec 2026: Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection2 Feb 2027: EU Code: providers' detection must interoperate
    • 10 Jun 2026EU final Code of Practice on marking AI-generated content
    • 2 Aug 2026EU AI Act Article 50 applies
    • 14 Aug 2026Anthropic explains Claude's text watermark, a version of SynthID-Text
    • ~1 Sep 2026Claude text detection opens as a private preview
    • 2 Dec 2026Claude models released before Aug 2 carry text marks; Mistral's stated date for marking and detection
    • 2 Feb 2027EU Code: providers' detection must interoperate

    A hit means the text may have been generated or processed by Claude.

    Claude Help Center, updated 22 Sep 2026. A miss proves nothing.

    ProviderMarks textMethod and detection
    Anthropic Yes A version of SynthID-Text. Detection: private preview for named groups
    Google Yes, in the Gemini app and web SynthID-Text. Detector portal for early testers; Gemini API text marking not confirmed
    OpenAI No Built one in 2024 and held it back; marks images with C2PA and SynthID
    Meta No deployment found TextSeal research, open-sourced May 2026
    Mistral Planned Says marking and detection by 2 Dec 2026
    Cohere Not stated Signed the EU Code; method unstated
    Microsoft, xAI, Amazon None found Image, audio or video marks only in reviewed material

    As of 26 Sep 2026, from the providers' own pages where possible; future dots (dashed) are commitments or legal deadlines, not facts yet. The private-preview date is approximate (a press report).

    05 / 05

    Everyone else

    Google marks text in the Gemini app and web. OpenAI and Meta had no deployed text mark as of 26 Sep 2026, and Mistral says it will mark by 2 Dec 2026. Under the EU Code, detection is due to interoperate by 2 Feb 2027.8,33,32,20

Chapter 05 · The marketer's question

What it means for search

The question most marketers ask, with what Google has said kept apart from what people infer.

Chapter 06 · For executives

Where we land

  • A watermark shows a model was involved. It says nothing about quality or authorship, and a missing mark proves nothing.
  • It is a compliance tool, not a policing tool. Removing it is cheap, as our study shows, and checking for it is restricted to a few groups.
  • For search, nothing on record links it to rankings as of 26 Sep 2026. What gets hit is content published at scale without adding anything.
  • Stripping marks for SEO has no evidence behind it. Editing AI drafts is normal, and human editorial review is also what exempts AI-assisted public-interest text from the EU's disclosure rule.18
  • Keep drafts, sources and editor sign-offs. They settle an authorship question better than a watermark can.

Text watermark

Lives in the word choice

Survives
Copy and paste, light edits
Removed by
AI rewrites, translation, heavy edits
Who can check
Only the key-holder
False alarms
Set by design; we measured 0.4%2

File credentials (C2PA)

Signed metadata on images and files

Removed by
A screenshot or a re-save
Who can check
Anyone
Claude
Uses them for PNG, JPG and SVG6

“AI detectors”

A guess from style

Key
None
Accuracy
One study found seven detectors flagged 61% of non-native English essays as AI17

Sources and method

As of 26 Sep 2026. Outside facts on this page come from our verified research brief of 26 Sep 2026 and the sources below, and were not re-checked for this page unless dated otherwise. The September spam update's completion was searched again on 9 Oct 2026; no notice was found.

Our runs used Google's open SynthID-Text code in Hugging Face Transformers with a key we made up. The pilot ran on 26 Sep 2026 (Gemma 4 E2B, a laptop), the site map on 27 Sep 2026, the main study on 28 Sep 2026 (Gemma 4 26B, a rented A100) and the next-word probabilities on 29 Sep 2026. The real website behind the page types is not named and appears only as aggregates. Every chart's data, the code and the raw scores are kept with the project. “Accessed” is the date our research opened the page.

An earlier interactive version appeared on 29 Sep 2026; every number on this page was recomputed from our stored results on 9 Oct 2026. Evidence marks: filled for our own runs, half for a figure others report, dashed for an illustration.

Our measurements

  1. 1 M1 Pilot: Gemma 4 E2B on a laptop, 12 articles, 17 kinds of handling, our key · run 26 Sep 2026 Chart data: pilot-vs-main, detection-trace, pilot-heat, dose-response (pilot).
  2. 2 M2 Main study: Gemma 4 26B on a rented A100, 150 pages, 18 kinds of handling, our key · run 28 Sep 2026 Chart data: study-b-tactics, dose-response, format-tactics, room-and-strength.
  3. 3 M3 Site map: room per page type on one real website (not named), scored by Gemma 4 E2B · run 27 Sep 2026 Chart data: room-by-page-type (aggregates only).
  4. 4 M4 Next-word probabilities for one sentence, Gemma 4 E2B · run 29 Sep 2026 Chart data: next-word-path.

Outside sources

  1. 5 R1 Anthropic: How Claude's text watermark works · 14 Aug 2026 · accessed 26 Sep 2026
  2. 6 R2 Claude Help Center: How Claude marks AI-generated content · updated 22 Sep 2026 · accessed 26 Sep 2026
  3. 7 R3 Dathathri et al., Scalable watermarking for identifying large language model outputs (Nature 634) · 23 Oct 2024 · accessed 25 Sep 2026
  4. 8 R4 Google DeepMind: Watermarking AI-generated text and video with SynthID · 14 May 2024 · accessed 26 Sep 2026
  5. 9 R5 Kirchenbauer et al., A Watermark for Large Language Models (ICML 2023; includes the emoji attack) · 24 Jan 2023 · accessed 25 Sep 2026
  6. 10 R6 Scott Aaronson, My AI Safety Lecture for UT Effective Altruism · Nov 2022 · accessed 25 Sep 2026
  7. 11 R7 Hou et al., SemStamp (NAACL 2024) · Oct 2023 · accessed 25 Sep 2026
  8. 12 R8 Liang et al., Watermark under Fire (WaterPark), Findings of EMNLP 2025 · Nov 2024 · accessed 26 Sep 2026
  9. 13 R9 Tamim et al., AI Watermark Evidence Fails Forensic Readiness · Jul 2026 · accessed 26 Sep 2026
  10. 14 R10 He et al., Can Watermarks Survive Translation? (ACL 2024) · Feb 2024 · accessed 25 Sep 2026
  11. 15 R11 Kirchenbauer et al., On the Reliability of Watermarks for LLMs (ICLR 2024) · Jun 2023 · accessed 25 Sep 2026
  12. 16 R12 Jovanovic et al., Watermark Stealing (ICML 2024) · Feb 2024 · accessed 25 Sep 2026
  13. 17 R13 Liang et al., GPT detectors are biased against non-native English writers (Patterns) · Apr 2023 · accessed 25 Sep 2026
  14. 18 R14 EU AI Act, Article 50 · this duty applies from 2 Aug 2026 · accessed 25 Sep 2026
  15. 19 R15 European Commission: Code of Practice on AI-generated content · final 10 Jun 2026 · accessed 26 Sep 2026
  16. 20 R16 Freshfields: EU AI Act unpacked #33, the final Code of Practice on transparency · 25 Jun 2026 · accessed 26 Sep 2026
  17. 21 R17 The Decoder: Anthropic opens Claude AI text detection to regulators, media, fact-checkers and others · about 1 Sep 2026 · accessed 25 Sep 2026
  18. 22 R18 Google Search Status Dashboard: August 2026 spam update · 18 to 21 Aug 2026 · accessed 25 Sep 2026
  19. 23 R19 Google Search Status Dashboard: September 2026 spam update · from 24 Sep 2026 · accessed 25 Sep 2026; completion searched 9 Oct 2026
  20. 24 R20 Google Search Central: Spam policies · current · accessed 26 Sep 2026
  21. 25 R21 Glenn Gabe: August 2026 Google spam update case studies · 31 Aug 2026 · accessed 25 Sep 2026
  22. 26 R22 Search Engine Land: SE Ranking impact data, August 2026 spam update · 27 Aug 2026 · accessed 25 Sep 2026
  23. 27 R23 First Page Sage: Impact of AI watermarking on SEO and GEO results · 2026 · accessed 29 Sep 2026
  24. 28 R24 Ahrefs: AI content in top-10 results · 2026 · accessed 29 Sep 2026
  25. 29 R25 Lily Ray: It works until it doesn't · 2026 · accessed 29 Sep 2026
  26. 30 R26 Google Research: SAFE (Scaled Abuse Forensics Examiner) · 2026 · accessed 26 Sep 2026
  27. 31 R27 Search Engine Journal: SAFE · Sep 2026 · accessed 26 Sep 2026
  28. 32 R28 Mistral Legal Center: AI governance, Vibe Code · current · accessed 26 Sep 2026
  29. 33 R29 OpenAI: Supporting the EU trustworthy AI ecosystem · 11 Jun 2026 · accessed 26 Sep 2026
  30. 34 R30 Hugging Face: Introducing SynthID Text · 23 Oct 2024 · accessed 25 Sep 2026
  31. 35 R31 SynthID-Text reference code · Oct 2024 · accessed 25 Sep 2026
  32. 36 R32 Claude Content Checker · about 2 Sep 2026 · accessed 25 Sep 2026
  33. 37 R33 Our verified research brief (unpublished) · 26 Sep 2026
  34. 38 R34 The Word-Choice Watermark, earlier interactive version (unpublished) · 29 Sep 2026