Am I missing something, or did they actually completely misunderstand how this technology works?
Second paragraph:
> Watermarking is designed for provenance, but SynthID-Text changes the process by which the model generates each next token.
This is a stretch. True, but barely. The LLM is making slightly different choices near the end of the token generation process.
> At the model level, this can change safety behavior, including whether the model refuses a harmful request and whether that refusal holds under prompt injection.
Claim support, if it appears, is pages later.
> At the agent level, the same sampled tokens can determine which tool is called and what arguments are passed to it.
?
> Prompt injection connects these two settings because a weakened refusal becomes more consequential when the model can also act through tools.
Wtf. Non-sequitor. Where does this come from?
> Such a watermarking procedure can therefore affect both what the model says and what an agent does.
Duh? In the literal sense of outputting different tokens.
> We call this behavioral effect sampling drift.
I think they should have used an LLM for writing help, or paid more for the one they used.
The article reads to me as largely LLM generated. I checked several sections with Pangram and it appears to agree that it’s either entirely AI generated, or at least 100% AI assisted.
I’m fine with the idea of AI assistance, but I agree the quality is low and this needed a bit more editing. I have my own list of gripes that include not defining terms that are used, text for tables and figures being repeated in the body and the captions, contradictions and non-sequiturs, and just AI’s real watermark of getting lost in details, using clever terminology, having a hard time being concise, and being unable to use plain and clear language.
I think they goofed on the conclusion: “These results do not argue against watermarking for provenance. They show that provenance and behavioral stability are separate properties.”
The article’s entire point is that stability depends on provenance techniques, therefore the results purport to show they are not separate properties. Oops.
Also, it’s not AI’s fault that URLs in the references section aren’t clickable. Come on.