{"id":"https://openalex.org/W7165641187","doi":"https://doi.org/10.48550/arxiv.2606.23574","title":"A Watermark for Vision-Language-Action and World Action Models","display_name":"A Watermark for Vision-Language-Action and World Action Models","publication_year":2026,"publication_date":"2026-06-22","ids":{"openalex":"https://openalex.org/W7165641187","doi":"https://doi.org/10.48550/arxiv.2606.23574"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.23574","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23574","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.23574","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139165065","display_name":"Yule Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yule","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103870133","display_name":"Liu S","orcid":"https://orcid.org/0000-0001-7255-0982"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Shuai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139129173","display_name":"Jiaheng Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Jiaheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5125054748","display_name":"X He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Xinlei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7633000016212463,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7633000016212463,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10812","display_name":"Human Pose and Action Recognition","score":0.03310000151395798,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10653","display_name":"Robot Manipulation and Learning","score":0.02590000070631504,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/suspect","display_name":"Suspect","score":0.7437999844551086},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.642799973487854},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.6164000034332275},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5776000022888184},{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.5356000065803528},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.44179999828338623},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.40939998626708984},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.4036000072956085},{"id":"https://openalex.org/keywords/a-priori-and-a-posteriori","display_name":"A priori and a posteriori","score":0.3919000029563904}],"concepts":[{"id":"https://openalex.org/C2778223634","wikidata":"https://www.wikidata.org/wiki/Q224952","display_name":"Suspect","level":2,"score":0.7437999844551086},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6449999809265137},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.642799973487854},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.6164000034332275},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5776000022888184},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.5356000065803528},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5015000104904175},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45910000801086426},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.44179999828338623},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.40939998626708984},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.4036000072956085},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3977999985218048},{"id":"https://openalex.org/C75553542","wikidata":"https://www.wikidata.org/wiki/Q178161","display_name":"A priori and a posteriori","level":2,"score":0.3919000029563904},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.376800000667572},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.3682999908924103},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.34549999237060547},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3393999934196472},{"id":"https://openalex.org/C61224824","wikidata":"https://www.wikidata.org/wiki/Q2260434","display_name":"Mixture model","level":2,"score":0.3294999897480011},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.32659998536109924},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.319599986076355},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.31700000166893005},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.3041999936103821},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.30070000886917114},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.29319998621940613},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.28600001335144043},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C2776157432","wikidata":"https://www.wikidata.org/wiki/Q1375683","display_name":"Normality","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.26429998874664307},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.26109999418258667},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.2574999928474426}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.23574","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23574","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.23574","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23574","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4663231074810028,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vision-language-action":[0],"(VLA)":[1],"models":[2,5,10,91,221],"and":[3,54,128,154,164,197,248,271,279],"world-action":[4],"(WAM)":[6],"are":[7,25,119],"the":[8,35,41,44,59,72,79,82,85,90,96,99,109,116,132,142,145,148,156,159,169,175,178,190,207,212,216,231,253,259],"generative":[9],"now":[11],"driving":[12],"general-purpose":[13],"robot":[14,160,224],"control,":[15],"turning":[16],"raw":[17],"camera":[18],"input":[19],"directly":[20],"into":[21,201],"motor":[22],"commands.":[23],"They":[24],"increasingly":[26],"deployed":[27,60],"as":[28,112],"black-box":[29],"services,":[30],"where":[31],"a":[32,49,63,105,162,183,202,239,244],"partner":[33],"runs":[34,147],"policy":[36,80],"through":[37,81],"an":[38,125,129,249],"interface":[39],"while":[40],"owner":[42,100,146],"keeps":[43],"weights":[45],"private.":[46],"Training":[47],"such":[48],"model":[50,61,150,209],"takes":[51],"proprietary":[52],"data":[53],"heavy":[55],"computational":[56],"power,":[57],"making":[58],"itself":[62],"valuable":[64],"intellectual":[65],"property.":[66],"To":[67],"address":[68],"this,":[69],"we":[70],"propose":[71],"\\emph{keyed":[73],"latent-provenance":[74],"verification}":[75],"method,":[76],"which":[77,235],"fingerprints":[78],"seed":[83,103,179],"of":[84,124,168,230,234,236,246,251],"Gaussian":[86],"noise":[87],"vector":[88],"that":[89],"draw":[92],"before":[93],"generation.":[94],"At":[95,141],"injection":[97],"stage,":[98,144],"swaps":[101],"this":[102,173],"for":[104,189],"keyed":[106],"one":[107],"with":[108,265],"same":[110],"distribution":[111],"ordinary":[113,126],"noise,":[114],"so":[115],"fingerprinted":[117],"actions":[118],"statistically":[120],"identical":[121],"to":[122,137,193,211,243,268],"those":[123],"run":[127],"adversary":[130],"watching":[131],"output":[133],"finds":[134],"no":[135],"signal":[136],"detect":[138],"or":[139],"remove.":[140],"verification":[143],"suspect":[149,208,240],"under":[151,275],"authorized":[152],"access":[153],"records":[155],"action":[157],"channels":[158],"executes,":[161],"partial":[163],"possibly":[165],"post-processed":[166],"view":[167],"policy's":[170],"output.":[171],"From":[172],"view,":[174],"verifier":[176],"recovers":[177],"by":[180],"gradient-based":[181],"maximum":[182],"posteriori":[184],"(MAP)":[185],"optimization,":[186],"tests":[187],"it":[188,272],"secret":[191],"key":[192],"score":[194],"each":[195],"rollout,":[196],"aggregates":[198],"these":[199],"scores":[200],"single":[203],"decision":[204],"on":[205,218],"whether":[206],"belongs":[210],"owner.":[213],"We":[214],"evaluate":[215],"method":[217],"two":[219,223],"representative":[220],"across":[222],"suites.":[225],"The":[226],"experiments":[227],"cover":[228],"detection":[229],"fingerprint,":[232],"identification":[233],"several":[237],"keys":[238],"carries,":[241],"robustness":[242],"range":[245],"attacks,":[247],"analysis":[250],"why":[252],"design":[254],"works.":[255],"Across":[256],"both":[257],"models,":[258],"fingerprint":[260],"can":[261],"be":[262],"detected":[263],"reliably":[264],"little":[266],"change":[267],"task":[269],"performance,":[270],"remains":[273],"detectable":[274],"output-side":[276],"removal":[277],"attacks":[278],"weight-level":[280],"edits.":[281]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-24T00:00:00"}