Watermarking algorithms for text divide the language model’s vocabulary into words on a green list and a red list. The more words in a sentence that are from the green list, the more likely it is that the text was generated by a computer. Researchers tampered with five different watermarks that work in this way. They were able to reverse-engineer the watermark by using an API.