Skip to content

Retrosynthesis of Synthetic Media for Explainable AI Provenance Forensics

Sep 2026 · 0 citations
Computer Science

TL;DR

A self-referential retrosynthesis framework for explainable AI provenance forensics under a fixed-generator setting that leverages a jointly optimized encoder-decoder pair to implement a self-embedding mechanism that enables round-trip consistency verification.

Abstract

With the rapid proliferation of generative models on Machine Learning as a Service (MLaaS) platforms, reliably tracing the provenance of synthetic media without modifying generator architectures or parameters remains a major challenge. In this work, we propose a self-referential retrosynthesis framework for explainable AI provenance forensics under a fixed-generator setting. The framework leverages a jointly optimized encoder-decoder pair to implement a self-embedding mechanism that enables round-trip consistency verification. During inference, client inputs are first encoded and then processed by the generator to produce outputs with high visual fidelity. For forensic verification, the consistency between the resynthesized image and the query image is analyzed to determine whether the image originates from the target generative model. Our approach eliminates the need for watermark embedding or modifications to the generation process. Experimental results show that images generated from encoded inputs maintain visual quality comparable to original generator outputs, while decoded images reliably trace back to their corresponding source inputs. Furthermore, the framework provides interpretable evidence for generative content provenance, establishing a practical tool for explainable generative AI forensics.

View source

Similar papers

Preprint Oct 2026

Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering

AI systems create images and videos with image/video generation models or by writing code and graphics descriptions that are then rendered. These routes can produce similar visible artifacts but expose different representations, intervention points, and provenance evidence. We develop a production-centered framework th...

Zheng Gao, Xiao-Yu Li, Zhi-Cheng Bao et al. · 0 citations
Preprint Oct 2026

Certification of Real Images through Calibrated Content Authentication

A detection paradigm is proposed that outputs a calibrated prediction of whether authenticity is plausibly deniable: a faithful reconstruction by any known generator establishes plausible deniability, while calibration bounds how often content from known generators fails to be reproduced.

Sarim Hashmi, Abdelrahman W. A. Elsayed, Mohammed Talha Alam et al. · 0 citations
#generative ai Review Open access Aug 2026

A semantic firewall for proactive governance of synthetic tabular data in generative AI pipelines

A Semantic Integrity Risk Score is proposed: a learned, generator-agnostic measure of the degree to which a record violates the functional and logical dependencies mined from trusted data, which is positioned as a practical, proactive complement to statistical monitoring rather than a replacement for it.

Waleed A. Al Shehri · 0 citations
Preprint Aug 2026

Conjunctive Poisoning in AI Supply-Chain Applications

This work shows that a malicious developer can pair a benign-looking wrapper with crafted metadata to deterministically alter post-generation behavior without modifying model weights, training data, or inference backend, and introduces TIF-BAH, a lightweight middleware defense that verifies wrapper integrity and record...

Nokimul Hasan Arif, Qian Lou, Meng Zheng · 0 citations
Preprint Oct 2026

MARCO: The Radioactive Watermark for Protein Generative Models

MARCO establishes a Dual-Layer defense that simultaneously protects intellectual property and ensures the forensic traceability of potential biosecurity misuses, and achieves superior fidelity and robustness while successfully validating watermark transferability.

Hua-Jie Chen, Xin Guo, Yuchen Shi et al. · 0 citations
Preprint Aug 2026

Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation

A non-invasive model fingerprinting framework based on collapsed generation, a phenomenon where certain input conditions produce highly consistent images across multiple stochastic seeds, is presented, establishing collapsed generation as a reliable intrinsic evidence source for non-invasive diffusion model ownership v...

Yuanmin Huang, Chen Chen, Geng Hong et al. · 0 citations

Related blog posts

Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

GPT-Lab Oct 30, 2026

Black October? The Week AI Changed the Cybersecurity Conversation

Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.