Paper page - Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs
… Experiments across six watermarking schemes and three LLMs show that averaging across 3 models suppresses detection z-scores from 5-300 to below 2 below the detection threshold of 4 and reduces TPR at 5% FPR to below 50%, while improving quality by 27.5% and running 6 times faster than the best bas… …