I wrote about how this might work here without invisible characters:

https://www.jrzs.dev/blog/claude-watermarking-ai-text