Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering
cs.CR, cs.CV
Submitted: 2026-10-06
Updated: 2026-10-12
Comments: 46 pages, 6 figures, 4 tables. Conceptual research agenda; no experiments. Video: https://youtu.be/14SMl0d_e48. Project page: https://zhenggao-30.github.io/Rethinking-Visual-Provenance/
Code: https://github.com/remotion-dev/remotion
Project page: https://zhenggao-30.github.io/Rethinking-Visual-Provenance
License: http://creativecommons.org/licenses/by/4.0/
The gist: AI systems create images and videos with image/video generation models or by writing code and graphics descriptions that are then rendered.
Terminology
Abstract
AI systems create images and videos with image/video generation models or by writing code and graphics descriptions that are then rendered. These routes can produce similar visible artifacts but expose different representations, intervention points, and provenance evidence. We develop a production-centered framework that compares detection and watermarking across both routes. An explicit verification specification distinguishes passive inference, message recovery, and authenticated provenance. We organize image, video, source-code, and rendering-aware watermarks by production stage. We examine the different requirements of generated images and video, plots and SVG, programmable video, and agent-composed workflows. Documented Claude, OpenAI, and rendering-tool interfaces connect the framework to concrete systems. We pose ten scoped research questions on identifiability, observability, fair comparison across stages, recoverable payload, reconstruction, synchronization, composition, hybrid local contribution, and private production-event authentication. The result is a conceptual research agenda grounded in published methods, inspected interfaces, and elementary boundary examples. It reports no experiments and claims no new theorems; its appendix results are elementary calculations, and documentation and source inspection establish interfaces, not empirical robustness.
Sources
- Video Diffusion Models
- High-Resolution Image Synthesis with Latent Diffusion Models
- Video Seal: Open and Efficient Video Watermarking
- CopyRNeRF: Protecting the CopyRight of Neural Radiance Fields
- State of the Art on Neural Rendering
- Watermark Forensics for Generative Models: An Information-Theoretic Perspective
- HiDDeN: Hiding Data With Deep Networks
- StegaStamp: Invisible Hyperlinks in Physical Photographs
- TrustMark: Universal Watermarking for Arbitrary Resolution Images
- Watermark Anything with Localized Messages
- Robust Invisible Video Watermarking with Attention
- DVMark: A Deep Multiscale Framework for Video Watermarking
- ItoV: Efficiently Adapting Deep Learning-based Image Watermarking to Video Watermarking
- A DTCWT-SVD Based Video Watermarking resistant to frame rate conversion
- FlowMark: Mask-Guided Video Watermarking
- Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust
- Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models
- SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking
- VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking
- VideoMark: A Distortion-Free Robust Watermarking Framework for Video Diffusion Models
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills
- Token Composition: A Graph Based on EVM Logs