Why does EU law mandate AI content watermarks that any motivated attacker can simply remove?
Opportunity
EU AI Act Article 50, in force since August 2025, requires that providers mark AI-generated content with machine-detectable signals. A September 2026 arXiv analysis reviewed every deployed text watermarking scheme and found that all of them are removable through paraphrase, translation, or lightweight fine-tuning with at most moderate effort. Image and audio watermarks are similarly defeatable by post-processing that is imperceptible to the human eye. Open-source generators have no incentive to embed marks, and the technical literature has reached rough consensus that no scheme survives a motivated adversary at scale. Compliance teams are satisfying the legal checkbox, but downstream systems that depend on the provenance signal for fraud detection, disinformation labeling, or liability tracing receive no reliable signal in practice.
Why it matters
A legal mandate for content provenance built on a technically defeatable primitive produces audit theater rather than actual attribution.
How I score the opportunity
The Opportunity Score is my own read, not a measurement: how much it hurts, how often it bites, and how little exists to solve it today. Higher means I think it is more worth building.
How much pain it causes when it shows up.
How often people actually run into it.
How little good tooling exists for it today.
More problems worth solving
Why does every AI app forget me the moment I close the tab?
AIWhy is learning a new field still gated by knowing what to ask?
AIWhy can a non-expert not verify what an AI just told them?
AIWhy do we test models on benchmarks but ship them on vibes?
AIWhy do AI agents have no memory of their own mistakes?
AIWhy can't I audit what a model was actually trained on?