reverse-SynthID maps Gemini watermark signal

This is a sharp piece of watermark red-teaming: if a provenance system leaks a stable spectral fingerprint, motivated outsiders will eventually profile it.

• –The repo claims it isolated SynthID by averaging pure black and white Gemini images until the watermark pattern emerged from the noise
• –Its core finding is that the image watermark behaves like a fixed frequency-domain signature with highly consistent carrier phases across samples
• –The project ships real code, not just theory: a detector, benchmarking scripts, and a V3 spectral subtraction pipeline aimed at preserving image quality
• –Even if the bypass does not fully defeat detection, it raises a serious robustness question for watermark-based provenance systems deployed at scale
• –For AI developers, the bigger story is that content authenticity tooling now needs adversarial testing on par with model safety and security features