Post
Simon Willison
simonwillison.net
did:plc:kft6lu4trxowqmter2b6vg6z
I'm looking forward to more details, but the most likely implementation is that they bias the random token selection such that there's a detectable pattern in the token IDs.
Won’t work for short text, but longer text would have the watermark invisibly baked into the selection of words
2026-08-11T14:56:01.471Z