TRACE: A Two-Channel Robust Attribution Watermark via Complementary Embeddings for LLM-Agent Trajectories arxiv.org
TRACE watermarks LLM-agent trajectories with two keyed channels, trying to survive log deletion and rewriting, which is the annoying part.