Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper addresses the EU AI Act's requirement for detectable synthetic text by developing an auditable watermarking alternative to strong, but impossible, methods. It introduces a description-length robustness profile with a finite-sample bound that replaces Shannon entropy with collision entropy, and constructs label-conditional conformal prediction sets to report watermark status as "supported," "not supported," or "inconclusive." A simulation of a tournament watermark confirms theoretical claims and highlights overestimation of edit tolerance by existing rules, operationalizing compliance without claiming universal robustness.
Auditable text watermarking is now feasible, offering a practical compliance path for generative AI by quantifying detection uncertainty rather than claiming impossible robustness.
Article 50 (2) of the EU Artificial Intelligence Act requires providers of generative systems to make synthetic outputs machine-readable and detectable, while qualifying the effectiveness, interoperability, robustness, and reliability by technical feasibility, cost, content-specific limits, and the state of the art. For free-form text, one important implementation route is the implementation of a generative watermarking procedure, which poses a compliance problem that is hard to address. Strong watermarking is impossible against adaptive removal, while ordinary edits attenuate statistical evidence, and unmarked human text may overlap distributionally with machine output. This article develops an auditable alternative. First, it defines a description-length robustness profile. A finite-sample bound shows that detectable bias decays and that the required sample size grows with the inverse square of the decay rate. This replaces an unidentified Shannon-entropy constant with collision entropy. Second, it constructs label-conditional conformal prediction sets with separate false-attribution and false-exclusion levels, reporting ``watermark supported,'' ``not supported,'' or ``inconclusive''. Coverage is obtained as a finite-sample result and is class-conditional under exchangeability. A small reproducible simulation of a tournament watermark confirms both claims and shows that the surviving-token rule overstates the tolerable edit rate roughly twofold. The resulting premarket certificate, signed detector report, and postmarket recalibration protocol operationalize the Commission's 2026 Code of Practice without claiming universal robustness.