Paraphrase · rewrite · SynthID-Text
MarkdownSwapping synonyms keeps the trail. A rewrite has to choose different words.
A keyed text watermark lives in the path through the vocabulary, not in any one word you can delete. Synonym substitution, sentence shuffling and light paraphrase usually keep that path. SynthID-Text was designed for that. A rewrite picks new words. One credit buys one candidate. The prose will change. We still cannot certify a vendor detector, because we cannot see the key.
Reviewed by Can Balkaya · Published
Process
How to verify the job
01
Confirm the mark is in the words
If the problem is hidden Unicode or file metadata, paraphrase is the wrong tool. Inspect first.
02
Skip the synonym pass
Replacing “utilise” with “use” does not rebuild the keyed sequence. Treat that as an edit, not a removal.
03
Spend the credit on new wording
A rewrite candidate is the paid job. Read it. The original meaning should survive; the original word choices should not.
Scope
Supported and unsupported surfaces
| Surface | Gifi action | Verification limit |
|---|---|---|
| Named metadata or invisible Unicode | Inspect, remove, and report named actions | Reinspect the returned bytes independently |
| Statistical patterns in ordinary words | Rewrite the prose | No certificate against a private detector |
| Visible logos, pixels, audio, or video | Unsupported | No removal claim |
Why light edits fail
The mark is not stored in a reserved vocabulary. It is a bias across many ordinary choices. Change a few of those choices and most of the evidence remains. Anthropic said light editing probably keeps Claude’s signal. The SynthID-Text paper treats paraphrase as a robustness case, not as a wipe.
Reordering sentences shuffles the same material. It does not draw a new path.
What “rewrite” means here
Gifi sends the passage to a different model family when it can, so the rewrite is not stamped with the same sampling bias that produced the source. The result is new prose. It is not a stealth mode. It is not a human-authorship certificate.
Short text, code and tightly factual passages have fewer forks. There was less mark to begin with, and less room to rewrite without inventing facts. Those jobs often fail on purpose rather than guess.
What a credit does not buy
A credit is one rewrite candidate, or one file cleaned. It is not a promise that Gemini’s detector, Anthropic’s future detector, or any classifier will agree with you.
If the only problem was a zero-width space, you should not have spent the credit. That is why the home-page inspect is free.
Questions this usually raises
- Is a paraphrase mode enough?
- Not against a statistical mark. Treat paraphrase as an edit. If you need the trail disturbed, you need different words.
- Will the rewrite sound like me?
- It will sound like the rewriting model, pointed at your meaning. Tone and precision can drop. That is the cost of changing the words.
- Can you certify the detector will fail?
- No. The key is private.