Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces CORE-BREW, a novel watermarking technique for large language models (LLMs) that enhances robustness against editing while ensuring strict control over false positives. By leveraging Constant-hit-Rate Embedding and soft-decision decoding, CORE-BREW provides a principled approach to watermark calibration, allowing for effective detection modes that balance false positive and true positive rates. Experimental results show that CORE-BREW outperforms existing multi-bit watermarking methods in terms of low false positive rates and resilience to token-level modifications, all while preserving semantic quality.
CORE-BREW achieves robust multi-bit watermarking that withstands editing, outperforming traditional methods in both accuracy and resilience.
Reliable provenance for LLM outputs requires multi-bit watermarks that remain robust under editing while maintaining strict false-positive control. Existing ECC-based LLM watermarks rely largely on hard-decision decoding, discarding token-level reliability information. We propose CORE-BREW, a Constant-hit-Rate Embedding extension of block-wise BREW for robust multi-bit watermarking. CORE-BREW calibrates the watermark channel by targeting a fixed hit rate p-star, yielding closed-form per-token log-likelihood ratios (LLRs) for principled soft-decision decoding. It supports two detection modes: Strict-Safe, which preserves the bounded-distance designated-codeword acceptance region, and FPR-Calibrated, which uses likelihood-based scoring and lightweight list decoding to characterize the FPR-TPR trade-off. Experiments on open-source LLMs under token-level edits and paraphrasing demonstrate improved low-FPR discrimination and robustness over prior multi-bit watermarking baselines while maintaining comparable semantic quality.