PaPoo
cover

The watermark idea is smaller than the real problem

The part that jumped out at me isn’t the watermark itself. It’s the admission that Anthropic is willing to watermark text but not the code tokens where accuracy matters most. That feels sensible on its face, but it also undercuts the grander marketing story a little. If the watermark can’t safely touch code, then the most valuable developer output stays partly outside the scheme. That’s not a fatal flaw, but it is a very real blind spot.

I think that’s where the article is strongest: it forces the uncomfortable question of what a watermark is actually for. If the goal is provenance, then skirting code makes sense because you don’t want to disturb behavior. If the goal is enforcement, though, this looks more like a paper wall than a hard barrier. Developers can already see the obvious move: if code is exempt, then the most security-sensitive or reusable parts of an output may remain the easiest to copy, strip, or repurpose.

The other thread, the API restriction aimed at large-scale distillation, feels more important than the watermark story, even if it’s less flashy. That’s the bit I’d watch. Watermarks are easy to talk about because they sound technical and concrete. Restrictions on distillation are more consequential because they change what people can build, and who gets to build it. Anthropic is clearly trying to make imitation more expensive. Whether that actually slows serious competitors or just annoys legitimate users is the open question.

What I don’t buy, at least not yet, is any suggestion that this fully solves misuse or model copying. It probably doesn’t. It may raise the cost a bit and give Anthropic more leverage over downstream usage, but the ecosystem around Claude, like the rest of the LLM world, is full of translation layers, wrappers, and workarounds. If a motivated developer wants to extract behavior at scale, I’d expect them to adapt pretty quickly. Maybe that’s the point: not prevention, just friction.

If I were building on Claude, I’d care less about the watermark as a technical feature and more about the direction it signals. Anthropic seems increasingly willing to shape the boundary between “using the model” and “reproducing the model.” That boundary matters. It’s also going to get argued over a lot.


Reference: Claude Fable 5.1 watermark: It has a blind spot developers can’t ignore

同じ著者の記事