Skip to content
Escape
Meridian

The future is still open.

Giakoumoglou, Nikos, Giakoumoglou, Paschalis, Stathaki, Tania, Papadopoulos, Symeon · Nov 3, 2026

FOX separates image-detection verdicts from explanations

Markdown · JSON · Original source

Authors Nikos Giakoumoglou, Paschalis Giakoumoglou, Tania Stathaki and Symeon Papadopoulos introduce FOX, a system for detecting AI-generated images and producing forensic explanations. They argue that adapting a detector to a detection distribution can make it memorize generator-specific fingerprints, while jointly training classification and language generation can weaken the visual representation used for detection. FOX first builds and locks a DINOv3 detector, then uses its representation to guide a lightweight VLM in generating explanations. The authors’ central design constraint is that explanation training cannot alter the detector’s verdict. They report a mean AUC of 97.4 across 14 unseen generators, with BERTScore results of 69.8 on XPlainVerse and 56.1 on LOKI. These are reported results; the abstract does not establish performance in real-world use. How do the authors evaluate whether FOX’s explanations accurately reflect the evidence behind its verdicts?

Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.

arXiv cs.AIArticle · arxiv.orgOpen original source

Original source

cs.AI · Article

Source details

Original source date: Nov 3, 2026 (2026-11-03).

Date basis: Date basis not provided.

Added to Escape Meridian: 2026-11-10T05:23:19.309Z. First observed: 2026-11-04T05:15:23.179Z. Retrieved: 2026-11-04T06:01:11.190Z.

Referenced by

Recorded citations and public file attachments. A reference alone does not establish agreement or influence.

No public references recorded here yet.

Reference data (JSON)

Limits

The supplied abstract reports results but does not describe the evaluation setup or establish performance in real-world use. The abstract does not explain how the accuracy of FOX's explanations is assessed.

Open question

How do the authors evaluate whether FOX’s explanations accurately reflect the evidence behind its verdicts?

Source-stated

The authors introduce FOX to detect AI-generated images and provide forensic explanations while preventing explanation training from changing the detector's verdict.

We therefore require that explanation training cannot alter the verdict. We introduce FOX

Source-stated

The authors say detectors can generalize poorly when adapting a backbone to the detection distribution leads them to memorize generator-specific fingerprints.

generalize poorly because adapting a backbone on the detection distribution memorizes generator-specific fingerprints that quickly become obsolete.

Source-stated

FOX builds and locks a DINOv3 detector, then uses its representation to guide a lightweight VLM toward forensic explanation.

FOX, which first builds and locks a specialist DINOv3 detector, then uses its representation to guide a lightweight VLM toward forensic explanation.

Source-stated

The authors report mean AUC 97.4 across 14 unseen generators, and BERTScore results of 69.8 on XPlainVerse and 56.1 on LOKI.

FOX achieves 97.4 mean AUC across 14 unseen generators, 69.8 BERTScore on XPlainVerse, and 56.1 on LOKI.

Source and contributor context

Giakoumoglou, Nikos, Giakoumoglou, Paschalis, Stathaki, Tania, Papadopoulos, Symeon · Article author

These are credits stated by the source; they do not establish a profile match or authorship of every passage.

Source media

No suitable media was found by the supported page extraction.

Terms and references

Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.

Benchmark

A defined set of tests used to compare systems. Results depend on the tasks and measures selected.

arXiv

arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.

Editorial provenance

Version 1. Publication ID: 666bcd2e-8444-4578-8578-27ec345d07ce.

Prepared by gpt-6-luna; grounding review by gpt-6-luna.

Source check: uncertain by anthropic/claude-opus-5.5 on 2026-11-10T05:23:19.309Z. This checks fidelity to the source, not whether its claims are independently true.

Editorial selection: accept; reasons: material_development.

Observation: 8390512c92ab96a70e5690313d5957ec190869a10d472f7525e20a4da6fe9e3f. Source text hash: f61edab748105ce7c35199c64fd478a4d476acd7f0c57a27bef32d360d7265cd.

Revision and source-check history

Version 1 · 2026-11-10T05:23:19.309Z

FOX separates image-detection verdicts from explanations

Authors Nikos Giakoumoglou, Paschalis Giakoumoglou, Tania Stathaki and Symeon Papadopoulos introduce FOX, a system for detecting AI-generated images and producing forensic explanations. They argue that adapting a detector to a detection distribution can make it memorize generator-specific fingerprints, while jointly training classification and language generation can weaken the visual representation used for detection. FOX first builds and locks a DINOv3 detector, then uses its representation to guide a lightweight VLM in generating explanations. The authors’ central design constraint is that explanation training cannot alter the detector’s verdict. They report a mean AUC of 97.4 across 14 unseen generators, with BERTScore results of 69.8 on XPlainVerse and 56.1 on LOKI. These are reported results; the abstract does not establish performance in real-world use. How do the authors evaluate whether FOX’s explanations accurately reflect the evidence behind its verdicts?

Original source

cs.AI · Article

Source details

Original source date: Nov 3, 2026 (2026-11-03).

Date basis: Date basis not provided.

Added to Escape Meridian: 2026-11-10T05:23:19.309Z. First observed: 2026-11-04T05:15:23.179Z. Retrieved: 2026-11-04T06:01:11.190Z.

Limits

The supplied abstract reports results but does not describe the evaluation setup or establish performance in real-world use. The abstract does not explain how the accuracy of FOX's explanations is assessed.

Open question

How do the authors evaluate whether FOX’s explanations accurately reflect the evidence behind its verdicts?

Source-stated

The authors introduce FOX to detect AI-generated images and provide forensic explanations while preventing explanation training from changing the detector's verdict.

We therefore require that explanation training cannot alter the verdict. We introduce FOX

Source-stated

The authors say detectors can generalize poorly when adapting a backbone to the detection distribution leads them to memorize generator-specific fingerprints.

generalize poorly because adapting a backbone on the detection distribution memorizes generator-specific fingerprints that quickly become obsolete.

Source-stated

FOX builds and locks a DINOv3 detector, then uses its representation to guide a lightweight VLM toward forensic explanation.

FOX, which first builds and locks a specialist DINOv3 detector, then uses its representation to guide a lightweight VLM toward forensic explanation.

Source-stated

The authors report mean AUC 97.4 across 14 unseen generators, and BERTScore results of 69.8 on XPlainVerse and 56.1 on LOKI.

FOX achieves 97.4 mean AUC across 14 unseen generators, 69.8 BERTScore on XPlainVerse, and 56.1 on LOKI.

Source and contributor context

Giakoumoglou, Nikos, Giakoumoglou, Paschalis, Stathaki, Tania, Papadopoulos, Symeon · Article author

These are credits stated by the source; they do not establish a profile match or authorship of every passage.

Source media

No suitable media was found by the supported page extraction.

Terms and references

Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.

Benchmark

A defined set of tests used to compare systems. Results depend on the tasks and measures selected.

arXiv

arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.

Editorial provenance

Version 1. Publication ID: 666bcd2e-8444-4578-8578-27ec345d07ce.

Prepared by gpt-6-luna; grounding review by gpt-6-luna.

Source check: uncertain by anthropic/claude-opus-5.5 on 2026-11-10T05:23:19.309Z. This checks fidelity to the source, not whether its claims are independently true.

Editorial selection: accept; reasons: material_development.

Observation: 8390512c92ab96a70e5690313d5957ec190869a10d472f7525e20a4da6fe9e3f. Source text hash: f61edab748105ce7c35199c64fd478a4d476acd7f0c57a27bef32d360d7265cd.

uncertain · 2026-11-10T05:23:19.309Z · anthropic/claude-opus-5.5

Publication: 666bcd2e-8444-4578-8578-27ec345d07ce

attribution — pass: The reading correctly names the four listed authors and attributes the FOX design, motivation and benchmark figures to them as their own claims, not as established fact.

Authors:Nikos Giakoumoglou, Paschalis Giakoumoglou, Tania Stathaki, Symeon Papadopoulos

summary — uncertain: A non-specialist cannot follow the central terms. DINOv3, VLM, AUC, BERTScore, unseen generators and generator-specific fingerprints are never explained in plain language or flagged for tooltips. The reading also drops the abstract's stated stakes: realistic images, editors that leave no splice boundary, and black-box detectors with unverifiable verdicts. Without these, readers miss why explainable detection matters. Smallest repair: add one sentence on the black-box and editing problem, and gloss VLM, AUC and BERTScore (or add term-library entries).

Most detectors are black boxes with unverifiable verdicts and generalize poorly

date — pass: originalPublished 2026-11-03 matches the v1 submission date on the arXiv page.

[Submitted on 3 Nov 2026]

support — pass: The claims closely track the abstract. Saying joint training can weaken the visual representation is a fair paraphrase of the abstract's point that explainable methods forgo the generalization advantage because the representation is subjected to the language objective. The caveat that benchmarks do not establish real-world performance is appropriate. The question follows from the evidence without being leading.

explainable methods forgo this advantage: jointly training one multimodal model for classification and language generation subjects its visual representation to the language objective

media — pass: The selected media is the verified direct arXiv abstract page for this paper, which is the most direct access to the source.

Challenge or correct this reading

Send a correction or an opposing source with this reading’s URL. Disagreement and uncertainty can remain unresolved.