I guess the SynthID-Image paper from Oct 2025[0] was an encoder-decoder for which they tested checking a flag or a 136 bit payload in 512x512 images and the watermark's robustness after various transformations.
Presumably the deployed version is meaningfully different.
Presumably the deployed version is meaningfully different.
[0]:https://arxiv.org/html/2510.09263v1