Backward Compatibility in Zero-Bit Neural Audio Watermarking

arXiv:2610.22296 · cs.SD, cs.LG, cs.MM · Submitted 2026-10-15 · Read on arXiv

cs.SD, cs.LG, cs.MM

Submitted: 2026-10-15

Updated: 2026-10-15

License: http://creativecommons.org/licenses/by-nc-sa/4.0/

The gist: Neural watermarking systems are typically trained as tightly coupled embedder-detector pairs and implicitly assume static deployment.

Terminology

Abstract

Neural watermarking systems are typically trained as tightly coupled embedder-detector pairs and implicitly assume static deployment. In real-world deployments, embedders and detectors are frequently updated and selectively decoupled for security and versioning purposes, which can break detection in previously embedded content and, more critically, increase false-positive rates on embedders that a given detector is intentionally not intended to recognize. In this paper the concept of backward compatibility in zero-bit audio watermarking is formalized. A training framework is proposed that pairs a new detector with a sequence of frozen legacy embedders (its legacy chain), using a performance-weighted sampling strategy so that the detector retains accuracy across all earlier versions. This coupling, while necessary for backward compatibility, is shown to induce an embedder-collapse effect that catastrophically degrades the true negative rate (TNR) against out-of-chain embedders. To counteract this, a Angular Diversity Loss (ADL) is introduced that explicitly forces each new embedder to occupy a distinct region of the output space. The combined approach restores near-perfect TNR with no measurable cost to detection accuracy or perceptual audio quality.

Related papers