The BaseResearcharXiv
NotaryMark: Multi-Bit Watermarking for Black-Box DatasetUsage Auditing in Text-to-Image Diffusion Models
According to the abstract, Yu, Du, Su and colleagues propose NotaryMark, a multi-bit watermark meant to let data owners audit, without model access, whether a text-to-image diffusion model was trained on their data, reporting bit accuracy of 0.85 to 0.90 below 32 bits.
Why it matters
The same thing, for different readers.
What it means for you
Yu and colleagues propose hidden marks that could help creators show an image model was trained on their work without permission.
For lawmakers
Yu and colleagues' method is a technical route to enforcing copyright on training data, aimed at licensed data used without authorization.
How the finding was reached
In our words, from the source. Weigh the finding by how it was made.
- What was done
- Watermark aligned with latent denoising in diffusion training, evaluated on three datasets and three diffusion models at capacities from 8 to 1024 bits.
- What it found
- Per the abstract, average bit accuracy is 0.85 to 0.90 below 32 bits of capacity.
- What it does not show
- Results above 32 bits are cut off in the excerpt; full text not read.
- Status
- A preprint: not yet peer reviewed
The record
- Questions
- Who can demand evidence, delay a release or stop an unsafe deployment?
- People
- Xinyi Yu (Wrote it)
- What we read
- We have read only the description the publisher gives. No quotations until someone reads the source itself.
- Found by
- The Radar, run of November 6, 2026, via
arxiv-ai-safety-query(tier 1: the source’s own channel or an official record) - Cite this
- arXiv, “NotaryMark: Multi-Bit Watermarking for Black-Box DatasetUsage Auditing in Text-to-Image Diffusion Models”, November 6, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-11-06-notarymark-dataset-usage-auditing
Our notesLight lane: written from the triage excerpt only. Marginal fit with AI safety and control.