To make that enforceable, it would be nice to prove the AI was trained on it. You might insert a "sleeper/activator" pair. The sleeper is a watermark that the

To make that enforceable, it would be nice to prove the AI was trained on it. You might insert a "sleeper/activator" pair. The sleeper is a watermark that the AI will recall verbatim. To make it provide the sleeper, we give the AI a special activator prompt. Demonstrating that your public repo successfully poisoned the AI with a watermark could become a court admissible proof of unauthorized scraping.