Match each safety claim to the evidence that survives the handoff

A repainted image may still resemble its source after an invisible ownership mark weakens. A coding agent may likewise carry a plausible summary or file forward after losing the origin of a request. The result alone leaves a gap in what a later check can establish.

Across the studied settings, evidence has to travel with the claim it supports. Speaker and artifact history matter for later actions; component records matter for runtime identity; build inputs matter for exact reproduction. Each study tests a different link in that chain.

Imagine an artist sharing a painting online with an invisible ownership mark. Someone downloads it and posts a version that still looks recognizably like the painting.

A viewer can judge the resemblance, but that visual judgment does not tell them whether the mark remains detectable. The repainting study begins with precisely this tension: the attacker wants an output that looks like a copy while the detector can no longer find the mark. Appearance and evidence of ownership are two different things to check.

The attacker in that study has one marked image and does not know the marking method, its key, or its hidden message. Repainting is a plausible route because a painting can tolerate some visible change in texture while still being recognizable.

That creates a concrete problem for someone relying on the mark: the feature a person notices may survive even if the signal a detector reads does not. The study therefore treats the look of the result and detection of the mark as separate concerns.

That problem raises a question that extends beyond pictures: what evidence must remain attached to an artifact or its history for a later safety check to support its claim? For the painting, the claim concerns an invisible mark after transformation.

A check of visual similarity answers a narrower question about appearance. The distinction matters because the same object can pass one inspection while the feature needed by another inspection has changed.

The studies that follow examine other kinds of handoff where the missing evidence takes a different form.