Minimax bounds for watermarked and masked recursive discrete distribution estimation
cs.IT, cs.LG, math.IT, math.ST, stat.TH
Submitted: 2026-08-31
Updated: 2026-08-31
Comments: Shorter version to be published at the IEEE Information Theory Workshop 2026
License: http://creativecommons.org/licenses/by/4.0/
The gist: Watermarking has been proposed as a way to identify synthetic samples in estimation settings where no metadata is available to distinguish them from real samples, but its precise effects remain
Terminology
Abstract
Watermarking has been proposed as a way to identify synthetic samples in estimation settings where no metadata is available to distinguish them from real samples, but its precise effects remain unexplored. In the absence of a distinguishing mechanism, it has been shown that adding synthetic samples significantly reduces the marginal efficacy of new real samples. In this work, we study the minimax loss of such recursive discrete distribution estimation in the presence of watermarks in contrast to the unassisted and oracle-assisted losses. When the fraction of real samples vanishes asymptotically, we provide a lower bound that shows that it is impossible to improve performance by adding watermarks unless the false negative rate of detection also vanishes. Additionally, we show that in most regimes, the worst-case losses of a sequence of simple deterministic estimators match the corresponding lower bounds up to constants. Finally, we propose masking, a randomization procedure that narrows the gap in the remaining regimes to a Jensen gap. We conjecture that a tighter lower bound argument can close this gap.
Sources
- SynthID-Image: Image watermarking at internet scale
- The Curse of Recursion: Training on Generated Data Makes Models Forget
- Self-Consuming Generative Models Go MAD
- Collapse or Thrive? Perils and Promises of Synthetic Data in a Self-Generating World
- How Bad is Training on Synthetic Data? A Statistical Analysis of Language Model Collapse
- Rate of Model Collapse in Recursive Training
- On the Stability of Iterative Retraining of Generative Models on their own Data
- Heat Death of Generative Models in Closed-Loop Learning
- A Probabilistic Perspective on Model Collapse
- Towards Theoretical Understandings of Self-Consuming Generative Models
- Model Collapse Demystified: The Case of Regression
- Is Model Collapse Inevitable? Breaking the Curse of Recursion by Accumulating Real and Synthetic Data
- Beyond Model Collapse: Scaling Up with Synthesized Data Requires Verification
- Strong Model Collapse
- What happens when generative AI models train recursively on each others' outputs?
- Preventing Model Collapse Under Overparametrization: Optimal Mixing Ratios for Interpolation Learning and Ridge Regression
- Quantifying Error Propagation and Model Collapse in Diffusion Models
- A Theoretical Perspective: How to Prevent Model Collapse in Self-consuming Training Loops
- Recursive Learning Without Collapse: A Weighting-Based Stabilization Framework
- Language Generation with Replay: A Learning-Theoretic View of Model Collapse
Related papers
- Task-Sufficient Contraction: Source Selection for Machine Information Interfaces
- Language Modeling is Monotone Compression
- Clipped Affine Policy: Low-Complexity Near-Optimal Online Power Control for Energy Harvesting Communications over Fading Channels
- Discrepancy for Random Linear Codes
- A New Approach to Code Smoothing Bounds
- Contextual Memory-Enhanced Source Coding for Low-SNR Communications