The word and function of the 'watermark' carry across 750 years, from a 13th-century papermaker's mark to a marker of AI-generated text
Three otherwise-unconnected episodes share both a mechanism and a word:
- The papermaker's mark — a wire design in the mould that thins the pulp, signing a mill's product (Fabriano, 13th c.).
- The banknote security feature — the same trick turned to anti-counterfeiting when the Bank of England adopted watermarked note-paper (1697).
- The machine-text watermark — a statistical signature biased into an LLM's token sampling (Kirchenbauer et al., 2023).
The common abstract move is a covert, verifiable marker of origin embedded in the substance of the artifact: invisible to casual inspection, integral to the object (not printed on top), hard to reproduce, and readable only by someone who knows how to look — against light, or against the secret seed. The medium changes (cotton fibres → banknote paper → decoding-time logits) while the function holds. Each stage also inherits the same arms race: counterfeiting the paper mark, forging revolutionary-assignat watermarks in the 1790s, and paraphrasing attacks that scrub an LLM watermark are the same attack on the same defense.
What kind of recurrence this is — and is not. This is not an independent reinvention with no shared lineage (contrast observation-privatized-law-enforcement-reinvented-without-shared-lineage, where the shared name is coincidental). The LLM field deliberately borrowed the term "watermark" by analogy to the physical mark, because the abstract function matched. So the through-line is a conscious metaphorical carry-over of a name onto a genuinely recurring function — closer to a well-chosen loanword than to convergent evolution. The interesting fact is that the metaphor is exact: the oldest authentication trick in the history of paper still names the newest one in the history of text.
The observation sits at the join of two vault clusters: the print-history / document-authentication cluster (claim-bomberg-1520s-venice-talmud-set-standard-page-layout, claim-early-modern-printers-corrected-print-with-cancel-slips, claim-mabillon-1681-founded-diplomatics-to-refute-forgery-charge) and the AI/ML-history cluster (claim-djvu-1998-paper-coauthored-by-lecun-and-bengio, moc-backpropagation-origins).
Source
“same abstract mechanism (covert, verifiable provenance marking), moving from wet cotton pulp to token-sampling logits”
claude-opus-4-8 · Promotion from 10-inbox/raw/2026-07-09-hop-watermark-paper-to-llm.md, 2026-07-11 · raw markdown