Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks

Dual-signal watermarking embeds both robust and fragile signals into LLM tokens using independent keys and distinct seeding windows. This method enables detection of three states—Intact, Tampered, or No-Watermark—preventing piggyback spoofing where adversaries alter content while retaining original provenance. Tournament reweighting preserves the expected generation distribution during implementation.