As AI models become easier to copy, verifying their origin becomes increasingly important.
Sentient’s Fingerprinting Leaderboard evaluates fingerprinting schemes across three dimensions: preserving model performance, resisting fingerprint removal, and reliably verifying a model’s origin.
Because a fingerprint is only useful if it doesn’t compromise model quality, can withstand attempts to remove it, and can be reliably recovered for verification.
The challenge isn’t just embedding a fingerprint. It’s making it resilient, detectable, and reliable.
Explore the 15 evaluated schemes:
fingerprint.sentient.foundat…
@SentientAGI
Why are there three leaderboard scores?
Model provenance carries clues about the history, training data, development process, and later modifications. Fine-tuning and distillation obscure provenance to the point where it’s virtually impossible to track the origin of the model back to its creator.
And if you as an owner want to reliably prove attribution and claim ownership of your open weights, you should choose a fingerprinting scheme based on these three dimensions:
>> Retention: whether the fingerprint is detectable without sacrificing normal model quality.
In other words, how embedding fingerprints affects model performance compared to the unfingerprinted model's nominal performance.
>> Robustness: whether the fixed attack can remove the fingerprint, preserving output quality.
In other words, how resistant the fingerprinted model is to malicious attempts to obscure its origin.
>> Verification: whether model owner/creator can reliably read the fingerprint back from a suspected copy and verify his IP property.
In other words, how reliable model attribution would be under scrutiny/inspection.