CalvinBackup/remove-ai-watermarks
1
0
Fork 0
mirror of https://github.com/wiltodelta/remove-ai-watermarks.git synced 2026-08-31 17:50:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

Keep 2026-08-22 SynthID campaign results in research docs only

Browse Source 
Drop Bayer, Model 1, and lattice re-check numbers from user guides and
module internals. The library surface is unchanged.
This commit is contained in:
Victor Kuznetsov
2026-08-22 21:05:49 -07:00
parent 99146cf2de
commit 2445086fa4
5 changed files with 13 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/known-limitations.md
+2 -14
View File
@@ -64,14 +64,6 @@ identity or exact texture, and each then runs the same face stage.
`qwen-zimage` is the higher fidelity of the two. Both are large, slow, and may
still alter small text or difficult faces.
Camera-pipeline tricks and mild geometry do not replace regeneration for
OpenAI SynthID. On 2026-08-22 the official verifier still returned
`detected` after Bayer mosaic plus bilinear or VNG demosaic, an upscale-
then-Bayer round trip, barrel distortion, and scanline jitter. 16-32 px
phase scramble still flipped the same seeds at similar or better PSNR.
Those attacks are closed as quiet removers. Numbers:
[synthid-removal-research.md](synthid-removal-research.md).
### The experimental pixel route reads a pipeline lattice, not the watermark
Signed provenance is the primary and supported route for SynthID in this
@@ -102,12 +94,8 @@ The published control rates for this route were all measured on photographs.
Against other generators' output, which is the population a provenance tool is
actually pointed at, the shipped runtime accepted 29 of 223 signed non-Google
images on 2026-08-16: 13.0% overall, 24.1% on Adobe Firefly, with a top score
of 3.01 against a threshold of 1.0. A 2026-08-22 re-check of the same
production entry point on frozen holdouts found Firefly 15/84 and PixelBin
11/80, with photographs at 0/24 Kodak and 0/60 Open Images, and a two-pixel
crop removing every sampled positive. Treat a positive as evidence of the
Google-lineage renderer family, not Gemini and not a watermark, and only
when the alternative generators have been ruled out by other means.
of 3.01 against a threshold of 1.0. Treat a positive as evidence only when the
alternative generators have been ruled out by other means.
Sensitivity has only ever been reported on images the route was calibrated
against. The first out-of-distribution measurement was taken on 2026-08-16: 11