Claude text gets invisible watermarking Nov 3: token-level statistical skew, not hidden chars

petesena · x · 2026-10-31

Anthropic has emailed customers that starting Nov 3, Claude-generated text carries an invisible watermark that survives copy-paste and some editing; only regulators, journalists, fact-checkers and researchers can verify it for now. It flags that Claude touched the words—even a quick proofread—not who you are. petesena explains the mechanism: generation is unchanged up to the logits; only the sampler is replaced. A PRF keyed by a secret watermark key plus short preceding context yields a deterministic seed, driving functions that assign pseudorandom scores to vocabulary tokens; tournament/Gumbel-style sampling then picks the next token, creating a statistically detectable skew in word and phrase combinations rather than any hidden characters.

Related event: Anthropic to Add Invisible Watermarks to Claude Output(4 posts)→

Original post →

More from Models

Models channel →