SenseDefend

Synthetic-media instruments, by article and effective date

Reading route: who can read the mark after delivery

Reading route is the row recording who a vendor says can verify its mark. The answers run from a public verification site to tools the vendor describes as internal, and the distance between those two is the whole of interoperability. As of 2026-09-12.

How far a mark travels depends on who can read itA published specification with a public checking site reaches a platform or a newsroom. A detector held inside the vendor reaches only files whose origin is already known. Between those two sits the interoperability the clause asks for.Who the page says can check, widest reach firstA public siteCredentials can be inspected by dropping the file into a toolanyone can open.A named coalitionMembers of a specification body read the same manifest acrossproducts.A detector for its ownmarksWorks on files this vendor made; another platform's marks arenot found.Tools kept in-houseThe vendor can answer the question; a viewer holding the filecannot.
Fig. 1 Interoperability is the one quality in the marking paragraph that a single vendor cannot supply on its own.
Who each entry says can read its mark, quoted from the page that says it. Recorded 2026-09-12.
GeneratorWho the page says can read it
Adobe FireflyA coalition the vendor gives as over 3,300 members
Amazon Nova ReelA vendor detector, plus public tools for the credentials
ElevenLabsThe vendor's own detector, for marks it wrote itself
Google SynthIDNot recorded here; the entry states scope and robustness
Meta AudioSealA detector published together with the generator
Microsoft DesignerThe Content Credentials site
OpenAI SoraDetection tools the vendor describes as internal

Inclusion rule. Entries describing a mark that something has to read, including the one whose pages describe the mark without naming a reader. Entries describing only a visible mark carry no row here, because the reader of those is a person. Order. Alphabetical by generator name.

1The clause asks for four qualities and this is the awkward one

The marking paragraph wants technical solutions that are effective, interoperable, robust and reliable as far as is technically feasible. Three of those a vendor can engineer on its own. Interoperability is not that sort of property: a mark is interoperable when parties other than its author can read it, which makes it a fact about an ecosystem rather than about a product.

This row is where that shows. Cells naming a published specification and a public site are describing something a platform or a newsroom could act on. A cell naming tools held inside the vendor is describing a capability that does not travel with the file, however good it is.

2Two cells are honest about a boundary rather than hiding it

One entry states plainly that its detector finds only the marks its own systems wrote, and will not find another platform's. Another states that models from other providers offered through the same product are generally not marked unless the page says otherwise. Both sentences narrow the claim their own vendor could have made, and both are more useful to a reader than a broader statement would have been.

They also point at the practical failure mode. A checking step that only works when the file came from the platform doing the checking answers the question after the answer is already known. The interesting case is always the file whose origin is in doubt.

3Why one cell records a gap instead of borrowing an answer

The entry for the widest-deployed invisible mark in this record has no reader named in its rows. Its pages describe where the mark is applied and what it is meant to survive, and this record does not fill the reader cell from a neighbouring paragraph or from anything written about the scheme elsewhere.

That is the same rule the rest of the record follows, and it is the rule that makes the filled cells worth something. A column where every row is populated tells a reader nothing about which populations were read and which were reasoned; a column with a visible hole tells them exactly that.

  • OpenAI Sora
    Internal detection tools to help assess whether a video or audio was created by the vendor's productsthird item on the same listSora 2 System Card, OpenAI / recorded 2026-09-22
  • ElevenLabs
    The detector can only find watermarks embedded by this vendor and will not find those of other platformsthe reach of the checking routeElevenLabs, documentation / recorded 2026-09-22
  • Amazon Nova Reel
    Credentials can be inspected by dropping a generated video into publicly available verification toolswho can read the markAWS AI Service Card, Amazon Nova Reel / recorded 2026-09-22
  • Microsoft Designer
    Provenance metadata can be viewed on the Content Credentials sitethe route a viewer uses to read itMicrosoft Support, Designer FAQ / recorded 2026-09-22
  • Adobe Firefly
    The vendor co-founded the Content Authenticity Initiative in 2019, described as a coalition of over 3,300 membersthe ecosystem the credentials are read byAdobe, Firefly product page / recorded 2026-09-22
  • Meta AudioSeal
    A perceptual loss inspired by auditory masking, presented as achieving better imperceptibilitythe stated quality trade-offMeta AI, research publication / recorded 2026-09-22
  • SynthID
    An invisible watermark is embedded across Google's generative AI consumer products, added at the moment content is createdthe marking layer behind Google's video modelsGoogle DeepMind, SynthID / recorded 2026-09-12

4Sources

Reader descriptions from the pages on each generator entry. Read 2026-09-12. The cells themselves stay on the entries they were taken from; the other rows are listed on the fields page. Next to this one: What survives, Recorded silence.