跳到正文
The Verge:AI· Jess Weatherbed·· 2026-08-17AI 评分50

Anthropic 详解 Claude 隐形文本水印如何运作

Anthropic explains how Claude’s invisible text watermarks will work

AI 导读

Anthropic 为遵守欧盟《人工智能法案》透明度要求,将采用 Google DeepMind 开源 SynthID-Text 技术的“一个版本”为 Claude 生成文本添加隐形水印。该水印利用低风险词汇选择的随机性模式标记内容,读者无感但持有密钥者可检测,且不会增加用户成本或影响输出质量。Anthropic 同时为 Claude 处理的图片引入 C2PA 支持。

正文 · 原文

It’s using ‘a version’ of the open-source SynthID-Text system Google developed.

It’s using ‘a version’ of the open-source SynthID-Text system Google developed.

STKB364_CLAUDE_2_C_96d15c STKB364_CLAUDE_2_C_96d15c Jess Weatherbed

Anthropic has clarified how it’s planning to apply invisible watermarks to Claude-generated text in order to comply with Europe’s AI transparency rules. On Friday, Anthropic announced that Claude’s text marking system is “a version of the SynthID-Text approach” — an open-source watermarking technology developed by Google DeepMind that creates detectable patterns using wording probabilities.

This watermarking feature, alongside C2PA support for Claude-processed images, is being introduced to meet Anthropic’s obligations under the European Union’s AI Act, which requires synthetic audio, image, video, and text to include machine-readable marks that enable the content to be detected as artificially generated or manipulated. Anthropic says the text watermarks won’t make Claude more expensive for users, or “have any practical impact on the quality or content of Claude’s outputs.” Here’s Anthropic’s explanation for how it works:

Take the sentence “The weather today was cold and…”. The next word is very unlikely to be “sugary.” But it is quite likely to be “overcast” or “grey.” Under most circumstances, it doesn’t matter much to the reader which of these latter two words the model ultimately chooses—the meaning of the sentence is largely the same either way. In cases like this, the choice is settled by a random number.

Watermarking uses low-stakes choices like these—which occur many times over a piece of generated text—to leave a pattern in Claude’s responses. That pattern is undetectable to the reader, but is detectable to anyone who has a key that encodes it. When watermarking is used, choices are still made at random, but the source of the randomness is different. Instead of using an arbitrary random number generator to pick the next word, watermarking uses the key and a few words that come before to settle what word the model should pick.

As Anthropic notes, the EU’s AI transparency requirements also impact other major AI developers, so Claude won’t be the only model introducing text watermarks. Google’s Gemini chatbot has supported the SynthID-Text solution since 2024, and while OpenAI hasn’t detailed any text watermarking plans for ChatGPT in its AI Act compliance roadmap, it will also be subject to the law’s requirements.

来源:The Verge:AI · theverge.com