The Watermark You Cannot See
Visible AI watermarks are disappearing while invisible, machine-readable provenance becomes mandatory. That is mostly the right trade, as long as you remember the new mark is evidence an adversary can quietly remove, not proof.
- #governance
- #security
- #ai
The little sparkle in the corner of AI images is on its way out. Google just made the visible watermark on Gemini and Flow output optional, so you can toggle it off; the content still carries invisible SynthID and C2PA provenance underneath. In the same week, Anthropic committed to weaving invisible marks into Claude output, images via C2PA and text via an embedded watermark, to line up with the EU AI Act’s transparency rules.
Two things are happening at once, and they point in opposite directions. The label a human can see is disappearing. The label a machine can read is becoming mandatory. Provenance is moving from a badge on the surface to a signal under the hood.
That is mostly the right trade. A visible sparkle is easy to crop, trains people to distrust the wrong things, and does nothing once someone takes a screenshot. Machine-readable provenance, in principle, travels with the file and survives copy and paste. Anthropic even claims its text watermark rides along when the text is pasted elsewhere, and, notably, that it applies when Claude is accessed through Microsoft Foundry, AWS, or Google Cloud. Provenance that follows content across clouds is a real step.
Do not oversell it, though. C2PA metadata is notoriously easy to strip, sometimes by accident, just by uploading through a platform that rewrites the file. Text watermarking is shakier still; editing, paraphrasing, or passing the text through another model can wash it out, and every vendor is hedging that “no mark” does not mean “not AI.” So the honest state of provenance is present, useful, and defeatable.
For anyone building on this, the takeaway is architectural, not decorative. Do not treat an absent watermark as proof of anything, and do not treat a present one as unforgeable. If provenance matters to your product, emit it on the way out, verify it on the way in, and log what you saw, because the mark is evidence, not a guarantee. The visible sparkle was a UX cue. The invisible one is a supply-chain signal, and you should handle it like any other signal an adversary can silently remove.