Research question
Can generated text be watermarked invisibly and detected without model access?
Key findings
- Green-list token biasing embeds a statistically detectable signal with negligible quality loss - Detection needs only the hash key, not the model
