{"id":"d3dbe797bc7982c21693358a4f58bef4992036bc41d17cbd8bbe316b00dfebaf","title":"Reconciling Privacy with Provenance for Language Model Watermarks","argument":"Authors Elise L. Han and Tatsunori Hashimoto argue that language-model watermarks can protect privacy while estimating aggregate usage, if watermarking aims to measure population frequencies rather than track individuals. They say users’ concerns about fine-grained tracking have encouraged evasion, including paraphrasing that can remove watermark signal. Their approach uses locally differentially private watermarks, which limit the evidence any individual text contributes to detection, and introduces the Red-Green Sequence (RGS) watermark. The authors report accurate frequency estimation at high privacy levels across various models, sample sizes and generation entropies. On C4 language modeling tasks, they report 0.0019 MSE and 0.0038 mean absolute bias at ε of 1; for an essay-writing task with 100 text samples, they report 0.0113 MSE and 0.004 mean absolute bias at ε of 2. These results concern the settings described in the abstract; they do not by themselves establish how the method performs in deployment. The proposal matters because it reframes watermarking from identifying individual use to estimating how common language-model use is, while limiting each text’s contribution to detection.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence provided is the paper’s abstract, which gives results for specified tasks and settings; it does not establish performance in deployment or report how the proposed watermark performs against paraphrasing.","speaker":{"name":"Han, Elise L., Hashimoto, Tatsunori","roleAtSource":"Article author"},"source":{"title":"Reconciling Privacy with Provenance for Language Model Watermarks","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.06100","publishedAt":"2026-11-04","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors argue that watermarking can reconcile provenance and privacy by estimating aggregate usage rather than tracking individuals.","excerpt":"We show that provenance and privacy can be reconciled if we shift the goal of watermark design from tracking individuals to estimating aggregate usage.","url":"https://arxiv.org/abs/2611.06100","relationship":"Source-stated"},{"text":"The authors say their locally differentially private watermarks limit the evidence any individual text can contribute to detection while enabling population-frequency estimation.","excerpt":"We develop locally differentially private watermarks which provably limit the evidence that any individual text can contribute to detection, while still enabling accurate estimation of population frequencies.","url":"https://arxiv.org/abs/2611.06100","relationship":"Source-stated"},{"text":"The authors report results for the Red-Green Sequence watermark on C4 language modeling tasks and an essay-writing task with 100 text samples.","excerpt":"On C4 language modeling tasks, we attain $0.0019$ MSE with $0.0038$ mean absolute bias at a low $\\varepsilon$ of 1, while in more challenging settings such as an essay writing task with only 100 text samples, we still find errors on the order of $0.0113$ MSE with $0.004$ mean absolute bias at $\\vare","url":"https://arxiv.org/abs/2611.06100","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06100","checkedAt":"2026-11-10T01:50:10.377Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How would the reported frequency-estimation accuracy hold up when users try paraphrasing to remove watermark signal?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Reconciling Privacy with Provenance for Language Model Watermarks","summary":"Authors Elise L. Han and Tatsunori Hashimoto argue that language-model watermarks can protect privacy while estimating aggregate usage, if watermarking aims to measure population frequencies rather than track individuals. They say users’ concerns about fine-grained tracking have encouraged evasion, including paraphrasing that can remove watermark signal. Their approach uses locally differentially private watermarks, which limit the evidence any individual text contributes to detection, and introduces the Red-Green Sequence (RGS) watermark. The authors report accurate frequency estimation at high privacy levels across various models, sample sizes and generation entropies. On C4 language modeling tasks, they report 0.0019 MSE and 0.0038 mean absolute bias at ε of 1; for an essay-writing task with 100 text samples, they report 0.0113 MSE and 0.004 mean absolute bias at ε of 2. These results concern the settings described in the abstract; they do not by themselves establish how the method performs in deployment. The proposal matters because it reframes watermarking from identifying individual use to estimating how common language-model use is, while limiting each text’s contribution to detection.","question":"How would the reported frequency-estimation accuracy hold up when users try paraphrasing to remove watermark signal?","claims":[{"text":"The authors argue that watermarking can reconcile provenance and privacy by estimating aggregate usage rather than tracking individuals.","excerpt":"We show that provenance and privacy can be reconciled if we shift the goal of watermark design from tracking individuals to estimating aggregate usage.","support":"source-stated"},{"text":"The authors say their locally differentially private watermarks limit the evidence any individual text can contribute to detection while enabling population-frequency estimation.","excerpt":"We develop locally differentially private watermarks which provably limit the evidence that any individual text can contribute to detection, while still enabling accurate estimation of population frequencies.","support":"source-stated"},{"text":"The authors report results for the Red-Green Sequence watermark on C4 language modeling tasks and an essay-writing task with 100 text samples.","excerpt":"On C4 language modeling tasks, we attain $0.0019$ MSE with $0.0038$ mean absolute bias at a low $\\varepsilon$ of 1, while in more challenging settings such as an essay writing task with only 100 text samples, we still find errors on the order of $0.0113$ MSE with $0.004$ mean absolute bias at $\\vare","support":"source-stated"}],"limitations":["The evidence provided is the paper’s abstract, which gives results for specified tasks and settings; it does not establish performance in deployment or report how the proposed watermark performs against paraphrasing."],"mediaId":"35a00ce5cb997f2e6401cc67a77f53fcbcc86f87fc4235085ee7f046287947d3","correctionReason":null,"id":"d3dbe797bc7982c21693358a4f58bef4992036bc41d17cbd8bbe316b00dfebaf","publicationId":"da9a9103-f2ba-4e4e-8e2c-117a6c90ac7d","version":1,"sourceUrl":"https://arxiv.org/abs/2611.06100","sourceTitle":"Reconciling Privacy with Provenance for Language Model Watermarks","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-04","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:06:23.608Z","createdAt":"2026-11-10T00:46:48.832Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"35a00ce5cb997f2e6401cc67a77f53fcbcc86f87fc4235085ee7f046287947d3","kind":"article","url":"https://arxiv.org/abs/2611.06100","sourceUrl":"https://arxiv.org/abs/2611.06100","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-10T00:46:02.234Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06100","checkedAt":"2026-11-10T01:50:10.377Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"35a00ce5cb997f2e6401cc67a77f53fcbcc86f87fc4235085ee7f046287947d3","confidence":0.87,"provider":"typesafe","model":"jev-1.13.0","inputHash":"eac46addab33d28d4e69ac616f1d48baa3538297bc5e6f38e87546dfc799dd3c","decidedAt":"2026-11-10T00:46:03.277Z"},"provenance":{"textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observationId":"6f0e4a48bb1ee85fd1de6616aa4aee4fcd62c911f7e954b915bf87ab01446d87","retrievedAt":"2026-11-10T00:46:02.098Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"29d0f049-a837-411c-8c84-dc6387af115c"},"reviewer":{"model":"gpt-6-luna","runId":"a3d9daaa-3ed2-4aff-8588-ffef3d8af8de"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-10T00:46:48.832Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Han, Elise L.","url":null,"kind":"unknown"},{"name":"Hashimoto, Tatsunori","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Han, Elise L.","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Han, Elise L.","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06100","locator":"head/meta[name=author|citation_author]"},"assertionId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-10T01:50:10.377Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2","sourceUrl":"https://arxiv.org/abs/2611.06100","contentSha256":"7db91fa70ffdfe2dd44f1979e9b61e084377acb1961178569a2bb07dd62b3f38","textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observedAt":"2026-11-10T01:50:10.377Z"}},{"actor":{"name":"Hashimoto, Tatsunori","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Hashimoto, Tatsunori","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06100","locator":"head/meta[name=author|citation_author]"},"assertionId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-10T01:50:10.377Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2","sourceUrl":"https://arxiv.org/abs/2611.06100","contentSha256":"7db91fa70ffdfe2dd44f1979e9b61e084377acb1961178569a2bb07dd62b3f38","textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observedAt":"2026-11-10T01:50:10.377Z"}}],"participationCoverage":{"total":2,"returned":2,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.06100","snapshotId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2","contentSha256":"7db91fa70ffdfe2dd44f1979e9b61e084377acb1961178569a2bb07dd62b3f38","textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observedAt":"2026-11-10T01:50:10.377Z","basis":"publisher-page-metadata","sourceLinks":42,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/d3dbe797bc7982c21693358a4f58bef4992036bc41d17cbd8bbe316b00dfebaf/source"}},"canonicalUrl":"https://escapemeridian.com/readings/reconciling-privacy-with-provenance-for-language-model-d3dbe797","formats":{"html":"/readings/reconciling-privacy-with-provenance-for-language-model-d3dbe797","markdown":"/readings/reconciling-privacy-with-provenance-for-language-model-d3dbe797.md","json":"/readings/reconciling-privacy-with-provenance-for-language-model-d3dbe797.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"d3dbe797bc7982c21693358a4f58bef4992036bc41d17cbd8bbe316b00dfebaf","revision":"da9a9103-f2ba-4e4e-8e2c-117a6c90ac7d","revisionKind":"publication-id","title":"Reconciling Privacy with Provenance for Language Model Watermarks","url":"https://escapemeridian.com/readings/reconciling-privacy-with-provenance-for-language-model-d3dbe797"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.06100","revision":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","revisionKind":"sha256-source-text","title":"Reconciling Privacy with Provenance for Language Model Watermarks","url":"https://arxiv.org/abs/2611.06100"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"d3dbe797bc7982c21693358a4f58bef4992036bc41d17cbd8bbe316b00dfebaf","title":"Reconciling Privacy with Provenance for Language Model Watermarks","argument":"Authors Elise L. Han and Tatsunori Hashimoto argue that language-model watermarks can protect privacy while estimating aggregate usage, if watermarking aims to measure population frequencies rather than track individuals. They say users’ concerns about fine-grained tracking have encouraged evasion, including paraphrasing that can remove watermark signal. Their approach uses locally differentially private watermarks, which limit the evidence any individual text contributes to detection, and introduces the Red-Green Sequence (RGS) watermark. The authors report accurate frequency estimation at high privacy levels across various models, sample sizes and generation entropies. On C4 language modeling tasks, they report 0.0019 MSE and 0.0038 mean absolute bias at ε of 1; for an essay-writing task with 100 text samples, they report 0.0113 MSE and 0.004 mean absolute bias at ε of 2. These results concern the settings described in the abstract; they do not by themselves establish how the method performs in deployment. The proposal matters because it reframes watermarking from identifying individual use to estimating how common language-model use is, while limiting each text’s contribution to detection.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence provided is the paper’s abstract, which gives results for specified tasks and settings; it does not establish performance in deployment or report how the proposed watermark performs against paraphrasing.","speaker":{"name":"Han, Elise L., Hashimoto, Tatsunori","roleAtSource":"Article author"},"source":{"title":"Reconciling Privacy with Provenance for Language Model Watermarks","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.06100","publishedAt":"2026-11-04","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors argue that watermarking can reconcile provenance and privacy by estimating aggregate usage rather than tracking individuals.","excerpt":"We show that provenance and privacy can be reconciled if we shift the goal of watermark design from tracking individuals to estimating aggregate usage.","url":"https://arxiv.org/abs/2611.06100","relationship":"Source-stated"},{"text":"The authors say their locally differentially private watermarks limit the evidence any individual text can contribute to detection while enabling population-frequency estimation.","excerpt":"We develop locally differentially private watermarks which provably limit the evidence that any individual text can contribute to detection, while still enabling accurate estimation of population frequencies.","url":"https://arxiv.org/abs/2611.06100","relationship":"Source-stated"},{"text":"The authors report results for the Red-Green Sequence watermark on C4 language modeling tasks and an essay-writing task with 100 text samples.","excerpt":"On C4 language modeling tasks, we attain $0.0019$ MSE with $0.0038$ mean absolute bias at a low $\\varepsilon$ of 1, while in more challenging settings such as an essay writing task with only 100 text samples, we still find errors on the order of $0.0113$ MSE with $0.004$ mean absolute bias at $\\vare","url":"https://arxiv.org/abs/2611.06100","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06100","checkedAt":"2026-11-10T01:50:10.377Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How would the reported frequency-estimation accuracy hold up when users try paraphrasing to remove watermark signal?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Reconciling Privacy with Provenance for Language Model Watermarks","summary":"Authors Elise L. Han and Tatsunori Hashimoto argue that language-model watermarks can protect privacy while estimating aggregate usage, if watermarking aims to measure population frequencies rather than track individuals. They say users’ concerns about fine-grained tracking have encouraged evasion, including paraphrasing that can remove watermark signal. Their approach uses locally differentially private watermarks, which limit the evidence any individual text contributes to detection, and introduces the Red-Green Sequence (RGS) watermark. The authors report accurate frequency estimation at high privacy levels across various models, sample sizes and generation entropies. On C4 language modeling tasks, they report 0.0019 MSE and 0.0038 mean absolute bias at ε of 1; for an essay-writing task with 100 text samples, they report 0.0113 MSE and 0.004 mean absolute bias at ε of 2. These results concern the settings described in the abstract; they do not by themselves establish how the method performs in deployment. The proposal matters because it reframes watermarking from identifying individual use to estimating how common language-model use is, while limiting each text’s contribution to detection.","question":"How would the reported frequency-estimation accuracy hold up when users try paraphrasing to remove watermark signal?","claims":[{"text":"The authors argue that watermarking can reconcile provenance and privacy by estimating aggregate usage rather than tracking individuals.","excerpt":"We show that provenance and privacy can be reconciled if we shift the goal of watermark design from tracking individuals to estimating aggregate usage.","support":"source-stated"},{"text":"The authors say their locally differentially private watermarks limit the evidence any individual text can contribute to detection while enabling population-frequency estimation.","excerpt":"We develop locally differentially private watermarks which provably limit the evidence that any individual text can contribute to detection, while still enabling accurate estimation of population frequencies.","support":"source-stated"},{"text":"The authors report results for the Red-Green Sequence watermark on C4 language modeling tasks and an essay-writing task with 100 text samples.","excerpt":"On C4 language modeling tasks, we attain $0.0019$ MSE with $0.0038$ mean absolute bias at a low $\\varepsilon$ of 1, while in more challenging settings such as an essay writing task with only 100 text samples, we still find errors on the order of $0.0113$ MSE with $0.004$ mean absolute bias at $\\vare","support":"source-stated"}],"limitations":["The evidence provided is the paper’s abstract, which gives results for specified tasks and settings; it does not establish performance in deployment or report how the proposed watermark performs against paraphrasing."],"mediaId":"35a00ce5cb997f2e6401cc67a77f53fcbcc86f87fc4235085ee7f046287947d3","correctionReason":null,"id":"d3dbe797bc7982c21693358a4f58bef4992036bc41d17cbd8bbe316b00dfebaf","publicationId":"da9a9103-f2ba-4e4e-8e2c-117a6c90ac7d","version":1,"sourceUrl":"https://arxiv.org/abs/2611.06100","sourceTitle":"Reconciling Privacy with Provenance for Language Model Watermarks","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-04","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:06:23.608Z","createdAt":"2026-11-10T00:46:48.832Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"35a00ce5cb997f2e6401cc67a77f53fcbcc86f87fc4235085ee7f046287947d3","kind":"article","url":"https://arxiv.org/abs/2611.06100","sourceUrl":"https://arxiv.org/abs/2611.06100","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-10T00:46:02.234Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06100","checkedAt":"2026-11-10T01:50:10.377Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"35a00ce5cb997f2e6401cc67a77f53fcbcc86f87fc4235085ee7f046287947d3","confidence":0.87,"provider":"typesafe","model":"jev-1.13.0","inputHash":"eac46addab33d28d4e69ac616f1d48baa3538297bc5e6f38e87546dfc799dd3c","decidedAt":"2026-11-10T00:46:03.277Z"},"provenance":{"textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observationId":"6f0e4a48bb1ee85fd1de6616aa4aee4fcd62c911f7e954b915bf87ab01446d87","retrievedAt":"2026-11-10T00:46:02.098Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"29d0f049-a837-411c-8c84-dc6387af115c"},"reviewer":{"model":"gpt-6-luna","runId":"a3d9daaa-3ed2-4aff-8588-ffef3d8af8de"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-10T00:46:48.832Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Han, Elise L.","url":null,"kind":"unknown"},{"name":"Hashimoto, Tatsunori","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Han, Elise L.","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Han, Elise L.","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06100","locator":"head/meta[name=author|citation_author]"},"assertionId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-10T01:50:10.377Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2","sourceUrl":"https://arxiv.org/abs/2611.06100","contentSha256":"7db91fa70ffdfe2dd44f1979e9b61e084377acb1961178569a2bb07dd62b3f38","textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observedAt":"2026-11-10T01:50:10.377Z"}},{"actor":{"name":"Hashimoto, Tatsunori","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Hashimoto, Tatsunori","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06100","locator":"head/meta[name=author|citation_author]"},"assertionId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-10T01:50:10.377Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2","sourceUrl":"https://arxiv.org/abs/2611.06100","contentSha256":"7db91fa70ffdfe2dd44f1979e9b61e084377acb1961178569a2bb07dd62b3f38","textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observedAt":"2026-11-10T01:50:10.377Z"}}],"participationCoverage":{"total":2,"returned":2,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.06100","snapshotId":"a2d297e23d8221379f66ae3364a73f2c076cff92e929cc9cd9efaef8ba0d7da2","contentSha256":"7db91fa70ffdfe2dd44f1979e9b61e084377acb1961178569a2bb07dd62b3f38","textHash":"56ae13bd380c2eec59d000a401165a0b220e7bc729c13dd0526cc895216f0b72","observedAt":"2026-11-10T01:50:10.377Z","basis":"publisher-page-metadata","sourceLinks":42,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/d3dbe797bc7982c21693358a4f58bef4992036bc41d17cbd8bbe316b00dfebaf/source"}}}],"audits":[{"publicationId":"da9a9103-f2ba-4e4e-8e2c-117a6c90ac7d","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading correctly credits Elise L. Han and Tatsunori Hashimoto. It frames the reconciliation thesis, the RGS method and the numeric results as the authors' claims and reports, not as established fact.","excerpt":"Authors:Elise L. Han, Tatsunori Hashimoto"},{"dimension":"summary","status":"uncertain","explanation":"The reading is faithful but hard for a general reader to follow. It never says what a language-model watermark is (a hidden statistical signal in generated text). It leaves central terms unexplained: locally differentially private, ε (and that a lower ε means stronger privacy), MSE, mean absolute bias, C4 and generation entropies. That makes it hard to judge what 'high privacy levels' and the reported numbers mean. Smallest repair: add one plain-language line each for watermark and ε, and add tooltip entries for local differential privacy, MSE and C4. The title and question are faithful and substantive.","excerpt":"We develop locally differentially private watermarks which provably limit the evidence that any individual text can contribute to detection"},{"dimension":"date","status":"pass","explanation":"The originalPublished date of 2026-11-04 matches the arXiv v1 submission date. The 2026-11-05 feed date is correctly not used.","excerpt":"[Submitted on 4 Nov 2026]"},{"dimension":"support","status":"pass","explanation":"The claims, figures and conditions (ε of 1 on C4; ε of 2 for the 100-sample essay task) match the abstract. The draft adds a caveat about deployment, which appropriately tempers the authors' 'realistic deployment scenarios' framing. The paraphrasing question follows from the abstract's own statement about evasion and is not a leading claim. The limitation is accurate, since the abstract reports no robustness-to-paraphrasing results.","excerpt":"users engage in evasion strategies such as paraphrasing that can remove much of the watermark signal"},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct arXiv abstract page for this paper. It is the most direct way to reach the source.","excerpt":null}],"createdAt":"2026-11-10T00:46:48.832Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}