> The system is fragile, and small edits (or rewrites by a local model) can fool the detection. Well no, small edits wouldn’t fool the detection as long as the

> The system is fragile, and small edits (or rewrites by a local model) can fool the detection. Well no, small edits wouldn’t fool the detection as long as the seeding only uses a small run of previous tokens. And yeah full rewrites breaking it is by design. The watermark is just meant to tell you whether the text was generated by a watermarked model, not whether the ideas came from AI or something like that.