DEV Community: Michael H

What Is GPT-5.6? OpenAI's Newest Model Family, Explained

Michael H — Wed, 19 Aug 2026 20:08:12 +0000

Originally published on agent5.news.

AI models used to come one at a time. You waited for the next one, it arrived with a blog post and a set of benchmarks, and then the cycle repeated. GPT-5.6, released for general availability on July 9, 2026, breaks that pattern in a few important ways: it is a family rather than a single model, it arrived under unusual government scrutiny, and it signals that OpenAI is shifting its identity from chatbot maker to workplace-agent platform. Whether you are a curious reader, a business owner, or someone who just wants to understand what the headlines mean, this guide covers what GPT-5.6 actually is, what it can do, and how to reason about what probably comes next.

What GPT-5.6 Is and Where It Fits

GPT stands for Generative Pre-trained Transformer, the underlying architecture that powers OpenAI's language models. The version number 5.6 places this release in the fifth major generation of the GPT series, one step past GPT-5.5 (released April 2026, codenamed "Spud") and building on a lineage that stretches back through GPT-5.4, GPT-5.3-Codex, and GPT-5.2 over the preceding months. If the pace feels fast, that is because it is: OpenAI has moved from one major release per year to something closer to one every six to eight weeks.

GPT-5.6 is a large language model, meaning it takes text (and images) as input, predicts what tokens should come next based on patterns learned during training, and produces human-like text in response. What makes this generation notable is not just the raw capability jump but the structural change in how the models are packaged and sold.

Three Models in One Family: Sol, Terra, and Luna

Previous generations typically offered one flagship model with optional "thinking" or "pro" modes bolted on. GPT-5.6 ships as three genuinely distinct tiers, each designed for a different point on the cost-speed-capability curve. Ranked from most capable to most affordable, they are: Sol, Terra, and Luna.

Sol is the flagship, built for the hardest problems: complex coding agents, long-horizon research, cybersecurity work, biology, and any task where correctness matters more than cost. Terra is the balanced middle tier, delivering performance competitive with the previous generation's best while cutting costs meaningfully. Luna is the fastest and most affordable option, suited for high-volume, latency-sensitive applications like chatbots or content classification.

The naming convention itself is intentional. The number (5.6) identifies the generation, while the celestial names identify durable capability tiers that OpenAI intends to carry forward across future generations. Rather than one model with a dial turned up or down, users now pick a tier.

How It Got Here: A Launch Shaped by Government Oversight

Before GPT-5.6 reached the general public, it went through an unusually scrutinized preview period. On June 26, 2026, OpenAI began a limited preview for a small group of trusted partners, a step taken specifically as part of its ongoing engagement with the U.S. government. OpenAI stated that it previewed the models' capabilities and plans ahead of launch at the government's request, sharing which partners were participating. General availability followed on July 9, 2026.

This is a meaningful moment for anyone trying to predict how AI deployment will work going forward. Regulators are increasingly involved before models reach the public, not only after. The preview window was not a marketing move; it reflected real policy pressure around models with substantial cybersecurity capabilities. That pressure is only likely to grow as models become more powerful.

What GPT-5.6 Sol Can Actually Do

OpenAI describes Sol as setting new state-of-the-art results across coding, knowledge work, cybersecurity, and science, while using significantly fewer tokens than rival frontier models to reach those results. Token efficiency matters because it translates directly into cost and speed for anyone running the model at scale.

On independent benchmarks, Sol has been rated particularly strongly in coding tasks. On the Artificial Analysis Coding Agent Index, GPT-5.6 Sol using maximum reasoning scored 80, placing it near the top of the current tracked field. On cybersecurity-specific evaluations, Sol's ExploitBench score reached 73.5%, compared to 47.9% for GPT-5.5 at a comparable output-token budget. Its SEC-Bench Pro score came in at 71.2%, versus 45.8% for GPT-5.5.

Sol also supports a context window of approximately 1.05 million tokens, with up to 128,000 output tokens per request. For enterprise tiers, some reports put the effective context window higher still. That size matters when the model needs to read an entire codebase, a long legal document, or months of research before responding. A larger context window means the model can hold more relevant information in its working memory without losing track.

Sol is not unbeatable. On some of the hardest coding and reasoning benchmarks, competing frontier models still hold an edge. What GPT-5.6 bets on is the combination of capability and cost: pricing that makes frontier-level work economically viable for a much wider range of teams.

Pricing: How Much Does GPT-5.6 Cost?

GPT-5.6 uses per-million-token pricing across all three tiers. After a price reduction on July 30, 2026, the rate card currently sits at: Sol at $5.00 input and $30.00 output per million tokens, Terra at a meaningfully lower rate, and Luna at the most affordable end. Cached input tokens cost significantly less across all tiers, which benefits applications that repeatedly use the same system prompt or context.

For perspective, a million tokens is roughly 750,000 words of text. Most individual conversations use a tiny fraction of that. These prices matter most for developers and businesses running thousands or millions of interactions per day.

Inside ChatGPT, access follows subscription tiers. Free users gained access to Luna after an update in late July, giving the broadest audience a taste of the GPT-5.6 generation. Paid plans unlock Sol and full agentic features.

ChatGPT Work: The Agentic Leap

Launched alongside GPT-5.6 on July 9, ChatGPT Work is the product expression of where OpenAI is heading. Unlike standard ChatGPT, which responds to a single prompt, ChatGPT Work takes an outcome, gathers information across connected tools like Slack, Notion, Google Drive, and Microsoft 365, and completes multi-step tasks autonomously, delivering finished artifacts like spreadsheets, slide decks, reports, and documents. It supports a plan-review mode that lets users approve steps before execution, scheduled recurring tasks, and a large library of integrations.

The agentic shift is reflected in the model itself. Sol's Ultra reasoning mode coordinates multiple agents across parallel workstreams by default, and OpenAI expanded programmatic tool orchestration in its developer platform, allowing the model to write and run small programs that orchestrate tools and filter intermediate data rather than routing every tool response back through the model. These changes make multi-step autonomous workflows more reliable in practice.

This is the clearest signal yet that OpenAI's competitive battleground has shifted from "which chatbot gives the best one-shot answer" to "which platform can complete the most complex real-world tasks with the least human intervention."

The Cybersecurity Angle: Daybreak and GPT-5.6 Cyber

GPT-5.6 introduced the most architecturally significant approach to cybersecurity capabilities of any OpenAI release to date. The family's general-purpose models are significantly better at finding and fixing vulnerabilities than previous generations, but OpenAI's own testing suggests they are better at defensive tasks than at reliably carrying out autonomous end-to-end attacks against hardened targets.

For vetted security professionals, OpenAI operates the Daybreak program in two tiers. Daybreak Blue provides access to GPT-5.6 Sol with system-level cyber guardrails adjusted for legitimate defensive work including vulnerability discovery, secure code review, malware analysis, and incident response. Daybreak Red provides separately approved access to GPT-5.6 Cyber, a purpose-trained model for authorized vulnerability research, exploit validation, and penetration testing.

The capability gap between these tiers is stark. In internal testing covering exploit chains, authentication bypass, and privilege escalation, GPT-5.6 Cyber responded to 95% of advanced requests. Standard Sol, under its default safeguards, responded to 1.5% of the same requests. Under the Preparedness Framework OpenAI uses to assess risk, GPT-5.6 Cyber was classified as High capability but below the Critical threshold.

That Critical threshold matters because it connects directly to what comes next. OpenAI has separately acknowledged that its upcoming model, internally called Astra, may reach that Critical level, a finding that caused the company to pause some internal work and subject the model to tighter controls before any public release.

Ultrafast Mode and the Speed Frontier

On August 13, 2026, OpenAI announced a preview of Ultrafast mode, a new API service tier for GPT-5.6 Sol powered by Cerebras hardware. Ultrafast runs Sol at up to 14 times the speed of standard processing, generating up to 750 output tokens per second. The significance here is that frontier-level intelligence is available at near-real-time speeds, something that previously required trading down to a smaller or more specialized model. Ultrafast is in limited preview and not yet broadly available, but it points toward a future where speed is no longer the tradeoff you make to get a capable model.

The Agent5 Angle: Reasoning About What Comes Next

Getting smart about AI means moving from passively absorbing announcements to actively forming predictions about the trajectory. Here is how to read the GPT-5.6 picture through that lens.

First, the family-of-models structure is almost certainly permanent. The economics of running a single monolithic frontier model for every task are worse than running tiered models matched to task complexity. Expect every major lab to converge on this pattern.

Second, the government preview before general availability is a data point about how AI governance is evolving. It was not a delay caused by failure; it was a deliberate process agreed to between OpenAI and regulators. The probability that future releases of this capability tier or higher will undergo similar reviews is high and rising.

Third, the Astra situation is the most important open question. A model that may reach the Critical threshold for cybersecurity capability is being held back while OpenAI studies it under tighter controls. Its public release timing remains genuinely uncertain, and OpenAI has signaled it will not ship until it is satisfied with the safeguards. Whether Astra becomes GPT-5.7, GPT-6, or something else entirely, OpenAI itself has not yet decided.

Fourth, the shift to agentic work is the real competitive race. ChatGPT Work is not a feature; it is a business model. The question for the next 12 to 18 months is not which model scores best on a benchmark but which agent platform earns enough trust to run unsupervised inside enterprises. That trust is built slowly and lost quickly, and it depends as much on reliability and safety as on raw capability.

The pattern across every GPT-5.x release has been faster iteration, broader capability, and lower cost per unit of intelligence. GPT-5.6 fits that pattern. The interesting prediction to form is not whether the next model will be better, because it almost certainly will be. The interesting question is how quickly the gap between what AI can do and what organizations are ready to deploy will close, and which guardrails will shape that gap.

Sources

What Is a Neocloud? Why AI Chipmakers Are Becoming Cloud Providers

Michael H — Wed, 19 Aug 2026 19:48:04 +0000

Originally published on agent5.news.

Something unusual is happening in the cloud computing industry. The companies that make the chips powering the AI revolution are now investing heavily in the companies that rent those chips back to AI developers. NVIDIA, the dominant GPU maker, has poured billions of dollars into cloud startups. Those startups, in turn, use the money to buy more NVIDIA chips. The resulting web of relationships has produced an entirely new category of infrastructure business called the neocloud, and understanding it is one of the clearest windows into how AI development actually gets paid for.

What Is a Neocloud?

A neocloud is an AI-first cloud infrastructure provider that specializes in GPU compute for machine learning training and inference workloads. Unlike traditional hyperscalers such as Amazon Web Services, Microsoft Azure, and Google Cloud, which offer hundreds of managed services ranging from databases to serverless functions, neoclouds keep their catalog deliberately narrow. Their primary product, and often their only product, is raw GPU compute delivered over fast networking. Dense GPU clusters, high-bandwidth interconnects such as InfiniBand and NVLink, and NVMe storage tuned for AI workloads are the defining features of the category.

The term itself is relatively new. It gained traction in late 2024 and spread through 2025 primarily through analyst research, particularly from firms like SemiAnalysis and McKinsey, as a way to distinguish GPU-first cloud companies from hyperscalers that simply added GPU instances to an existing general-purpose platform. Before the label stuck, these companies were typically called "GPU cloud" or "GPU-as-a-Service" providers. The category itself, however, is older than the name. CoreWeave launched in 2017 as a cryptocurrency-mining operation called Atlantic Crypto, then pivoted its GPU fleet toward rendering and AI compute starting around 2019. Lambda Labs was building machine learning hardware as far back as 2012 before shifting to cloud rental as research demand grew.

Why Neoclouds Exist: The Compute Gap

The neocloud category emerged from a specific market failure. When generative AI exploded in 2023, demand for high-end GPU capacity surged faster than established cloud providers could respond. Hyperscalers had secured much of the available advanced GPU supply for their own priorities, leaving startups, research labs, and enterprises scrambling. Pricing reached levels that were, for many organizations, prohibitively expensive.

Neoclouds stepped into that gap with a different value proposition: faster provisioning, simpler pricing structures, and configurations optimized for high-performance AI workloads at significantly lower cost than what hyperscalers were charging for the same silicon. Companies like CoreWeave and Lambda Labs had cultivated supplier relationships with NVIDIA before the boom and could provision hardware that hyperscalers were quoting customers months out. The cost advantage was substantial enough to shift serious workloads.

Hyperscalers built their platforms around general enterprise computing, and that history creates real friction for AI teams. When a machine learning team needs only to run a large training job or a batch inference pipeline, the complexity and pricing overhead of a hyperscaler ecosystem does not serve them. Neoclouds strip that overhead away. The tradeoff is that when a team needs a managed database, a message queue, a load balancer, and GPU access under a single identity and billing system, a hyperscaler remains the more practical choice.

Who the Major Players Are

The neocloud landscape has a handful of prominent names and a much longer tail of smaller operators.

CoreWeave has emerged as the largest and most prominent company in the category. It operates as a specialized NVIDIA partner and went public on Nasdaq in March 2025 under the ticker CRWV. Since its IPO, the stock has dramatically outperformed initial expectations. The company reported Q1 2026 revenue of approximately $2.08 billion, up 112 percent year over year, and holds a contracted revenue backlog of $99.4 billion as of March 31, 2026. Its customers include OpenAI, Microsoft, Meta, Google, and Anthropic. Microsoft alone accounted for a large share of CoreWeave's early revenue, creating a notable customer concentration risk that management has been working to diversify.

Lambda Labs has built a developer-first identity, maintaining a broad GPU fleet and emphasizing transparent pricing and strong Kubernetes-based orchestration tools. NVIDIA is an investor. The company also offers on-premises, private cloud GPU clusters with InfiniBand networking and storage, and has pursued leaseback arrangements with NVIDIA to maintain access to cutting-edge hardware.

Nebius, headquartered in Amsterdam, secured $700 million in funding in December 2024 followed by further financing in 2025, and has been building a global presence across North America, Europe, and the Middle East. It targets developers and enterprises seeking alternatives to both hyperscalers and CoreWeave's dominant position.

Other notable players include Crusoe, which focuses on sustainable GPU computing powered by stranded and renewable energy sources, RunPod, Together AI, and Vultr. The list is growing. ABI Research projected in 2025 that more than 2,200 neocloud-operated data centers could be in operation globally by 2035, up from roughly 558 facilities in 2025.

Why NVIDIA Is Becoming a Cloud Kingmaker

The most structurally interesting dynamic in the neocloud world is NVIDIA's role. The chipmaker has not just supplied hardware to neoclouds. It has actively invested in them, creating a web of financial relationships that analysts have described as circular financing.

NVIDIA first invested $100 million in CoreWeave back in 2023. It added to that position around the time of CoreWeave's IPO, then invested roughly $2 billion more for additional shares in a purchase disclosed in early 2026, bringing its disclosed stake to approximately 47.2 million shares. NVIDIA also invested $2 billion in Nebius in March 2026. It has separately backed Lambda Labs, Nscale, and Crusoe. NVIDIA's own regulatory filings acknowledge neocloud builders as a recognized customer category within its business.

The logic from NVIDIA's perspective is straightforward: investing in the companies most likely to buy enormous quantities of NVIDIA hardware for years to come is a way to lock in future chip demand. The neoclouds, for their part, use the investment capital to purchase more NVIDIA GPUs. Some portion of the money NVIDIA invests flows directly back to NVIDIA in the form of chip purchases. Critics have noted this loop explicitly. Supporters argue the arrangement reflects genuine mutual interest in expanding the AI infrastructure ecosystem.

NVIDIA has also provided more direct backstops. A signed take-or-pay capacity arrangement with CoreWeave, for instance, obligates NVIDIA to purchase GPU cloud capacity from CoreWeave if that capacity goes unsold, providing a financial floor under CoreWeave's utilization risk.

How Hyperscalers Became Neocloud Customers

One of the more counterintuitive facts about the neocloud market is that the traditional cloud giants have become among the biggest buyers of neocloud capacity. Microsoft has struck commitments worth tens of billions of dollars with CoreWeave, Nebius, and Nscale. Meta has signed multi-billion-dollar deals with CoreWeave and Nebius. OpenAI committed to over $22 billion in total capacity from CoreWeave through a series of expanding agreements.

The reason relates to balance sheet mechanics and speed. Building and operating data centers requires enormous capital expenditures. Purchasing capacity from a neocloud on a multi-year operating contract allows hyperscalers to secure AI compute without immediately loading their own balance sheets with the same level of hard assets. Neoclouds, meanwhile, carry the infrastructure risk and the debt load required to build it.

This arrangement also functions as an overflow valve. Hyperscalers face their own GPU allocation constraints and construction timelines. Neoclouds that already have clusters online and contracted relationships with NVIDIA can deliver capacity faster. As long as the economics of outsourcing compute are more attractive than building it in-house, the relationship persists.

The Real Economics: Capital Intensity and Concentration Risk

The business model of a neocloud looks straightforward on the surface: buy GPUs, rack them in dense clusters, rent access at a markup, and expand capacity as contracts grow. The underlying economics are considerably more demanding.

Neoclouds operate in a capital-intensive environment where hardware must be purchased, data centers powered, and networking installed long before revenue arrives. CoreWeave guided for capital expenditures of $31 billion to $35 billion in 2026, roughly double its 2025 spending. The company has raised approximately $28 billion in combined equity and debt over the 12 months through March 2026 to finance that expansion. The debt load is substantial, and GAAP profitability remains a future goal rather than a present reality despite strong revenue growth.

Customer concentration is an equally significant risk. Microsoft accounted for approximately 67 percent of CoreWeave's full-year 2025 revenue. While the backlog is diversifying toward OpenAI, Meta, Anthropic, Jane Street, and others, the dependence on a small number of very large customers means that a renegotiation, cancellation, or decision by one of those customers to expand in-house compute capacity could materially reshape CoreWeave's revenue picture.

Hardware obsolescence adds another layer of complexity. AI chip generations are shortening. The transition from NVIDIA's Hopper architecture to Blackwell accelerators illustrates the speed of these cycles. A neocloud that took on debt to deploy a large H100 cluster may find the residual value of that hardware under pressure sooner than originally underwritten.

The Pricing Advantage (And Its Limits)

Neoclouds have competed primarily on price and speed of access. Without the overhead of hundreds of enterprise services and the organizational complexity of hyperscale cloud providers, specialized operators can undercut the majors on raw GPU hourly rates. Companies like CoreWeave and Lambda leverage volume commitments and direct supplier relationships to negotiate discounts that they can pass through to customers.

That pricing advantage, however, is not guaranteed to persist. Hyperscalers are not standing still. AWS cut prices on certain H100 instance types in mid-2025, applying direct margin pressure to neocloud offerings. Google, Microsoft, and Amazon have all been investing in custom AI accelerators, including Google's TPUs, AWS's Trainium chips, and Microsoft's Maia architecture, that could reduce their dependence on NVIDIA silicon and give them more pricing flexibility over time. If hyperscalers bundle AI compute cheaply or migrate their best customers to proprietary hardware, the neocloud pricing advantage narrows.

The shift from AI model training toward inference workloads may also reshape the competitive dynamics. Training runs require enormous, sustained GPU clusters and favor the kind of dense, bare-metal infrastructure that neoclouds excel at delivering. Inference workloads are more distributed, more latency-sensitive, and more amenable to the managed-service layers that hyperscalers already operate. ABI Research analysts have forecast that inference workloads will account for roughly 80 percent of the neocloud market by 2030, which means neoclouds will need to evolve their platforms to serve a substantially different kind of customer demand.

What Happens Next: The Agent5 View

Reasonable people following the neocloud space make widely varying predictions about where this ends up, and that uncertainty is itself informative. The range of plausible futures is wide.

In one scenario, AI compute demand remains structurally supply-constrained for the rest of the decade. Hyperscalers cannot build fast enough on their own, neoclouds lock in long-term contracts and use them to service their debt, and the GPU-first cloud model becomes a durable fourth pillar of global cloud infrastructure alongside AWS, Azure, and GCP. CoreWeave's contracted backlog of $99.4 billion as of early 2026, backed by some of the largest AI spenders in the world, is the primary evidence for this view.

In a second scenario, the AI infrastructure build-out is running ahead of actual end-user demand. Hyperscalers eventually bring enough capacity online, custom silicon reduces NVIDIA's dominance, and the neocloud segment undergoes significant consolidation as smaller operators cannot service their debt at lower utilization rates. Providers competing on generic GPU rental rates without meaningful software or vertical differentiation face existential margin pressure. The risk profile of these businesses, as some analysts have noted, resembles infrastructure rather than software.

A third and perhaps most likely scenario is something in between: the market bifurcates. A small number of well-capitalized neoclouds with strong supply relationships, deep customer diversification, and genuine software capabilities survive and scale. The longer tail of smaller GPU rental businesses consolidates or exits. The winners become embedded partners in the global AI supply chain, functioning as a kind of permanent overflow and specialty layer beneath the hyperscalers.

Getting smart about AI means holding all three scenarios simultaneously and updating your probability weights as new signals arrive. When CoreWeave announces a new multi-billion-dollar contract, that is a signal toward the durable model. When a major customer signals it may build in-house capacity, that shifts weight toward consolidation. When NVIDIA reports that neocloud builders represent a growing slice of its indirect customer base, that tells you the chipmaker is structurally committed to this channel.

The neocloud story is, at its core, a story about where the AI economy is placing its highest-confidence bets on infrastructure. The companies and capital flows building this layer are making predictions, in the tens of billions of dollars, that AI workloads will remain compute-hungry and that purpose-built GPU clouds will remain the most efficient way to serve that hunger. Watching which of those predictions are vindicated over the next two to three years is one of the clearest indicators of how the broader AI industry is actually maturing.

Sources

How AI Watermarks Work: Gemini, Claude, and Can You Remove Them?

Michael H — Wed, 19 Aug 2026 19:48:00 +0000

Originally published on agent5.news.

Every time you generate an image in Gemini or ask Claude to draft a memo, there is a good chance an invisible signature is now woven into the output before it reaches you. You cannot see it, hear it, or read it. But a machine can. As AI-generated content floods every corner of the internet, watermarking has moved from an academic curiosity to a regulatory requirement and a genuine infrastructure challenge. Understanding how it works, who controls it, and what it cannot do is quickly becoming a basic form of AI literacy.

What an AI Watermark Actually Is

The word "watermark" conjures a faint logo stamped on a stock photograph. AI watermarks are different in kind. Instead of a visible overlay, they are statistical or cryptographic signals embedded in the very structure of the content at the moment of generation. For images, that means subtle, imperceptible adjustments to pixel values. For audio, it means tiny modifications to waveform patterns. For text, it means nudging the probability that the model selects one word over a near-synonym, creating a detectable pattern spread across hundreds of choices.

The goal in every case is the same: a trained detection system can later find the signal and confirm the content came from a specific AI system, while a human reader, viewer, or listener notices nothing at all.

There are also two distinct families of marking technology. The first is the embedded or statistical watermark, baked into the content itself. The second is provenance metadata, a cryptographically signed record attached to a file but separate from its pixels or words. Both approaches are in active use, and as you will see, they have different strengths and different failure modes.

How Google's SynthID Works

Google DeepMind began developing SynthID in 2023, initially for AI-generated images. The system has since expanded to cover audio, video, and text, making it one of the broadest watermarking deployments in the industry. As of 2025, Google reported that SynthID had been used to watermark over 10 billion pieces of content, including images created with Imagen, audio from Lyria, videos from Veo, and text generated through the Gemini app.

For images and video, SynthID embeds its signal directly into the visual or audio data. The watermark is designed to persist through compression, resizing, cropping, re-encoding, and ordinary post-production work, and it can even survive screenshots and image format conversions. It does not change the appearance or sound of the content.

For text, SynthID uses a more sophisticated approach called tournament sampling. The model runs a multi-round pairwise elimination process among candidate tokens, weighting choices by pseudorandom scores. The result is that the model's word selections carry a hidden statistical fingerprint. Google published this method in the journal Nature in 2024 and later open-sourced the watermarking code through its Responsible Generative AI Toolkit. The technique embeds an imperceptible watermark without impacting the quality, accuracy, creativity, or speed of the text generation process.

Detection works in reverse: SynthID's algorithm scans a piece of content for the statistical pattern it would have left. For images and video, users can now upload files directly to Gemini and ask whether they were created or edited by Google AI. Google also launched a dedicated SynthID Detector portal for journalists and researchers who want to verify content at scale. Crucially, the system can only confirm the presence of Google's own watermark. If a SynthID watermark is not detected, it means the content was not created by Google AI, but it may still have come from another AI system entirely.

How Claude's Watermarking Works

Anthropic announced in August 2026 that supported Claude models would embed imperceptible watermarks in generated text and attach signed provenance metadata to supported files. The move was triggered by the EU AI Act's transparency requirements, but Anthropic chose to apply the marking globally rather than limit it to European users, citing the practical difficulty of scoping it by region.

For text, Claude weaves an imperceptible watermark directly into the words it generates. The watermark travels with the text when it is copied and pasted elsewhere, and it may persist through some light editing. A complete rewrite where every word is replaced will remove it, and the detection signal becomes less reliable with very short passages because there are fewer word choices for the detector to analyze.

For files, Anthropic takes a different approach. Generated PNG, JPG, and SVG files receive cryptographically signed C2PA provenance metadata rather than an in-file statistical mark. This metadata records that the file was created or processed by Claude and can indicate whether it has been tampered with afterward.

The marking applies across Claude's full product surface: the consumer apps, the API, and developer surfaces like Claude Code, as well as versions of Claude accessed through AWS, Google Cloud, and Microsoft Foundry, though signed file metadata may not be available on every platform. Anthropic says the watermarking is designed to have no practical impact on the quality or readability of Claude's output. Notably, Anthropic has not published the specific technical method it uses for text watermarking, and independent observers have noted that without technical documentation it is difficult to assess how robust the marks will be against removal attempts.

The C2PA Standard: A Shared Language for Provenance

Both Anthropic's file metadata and a growing number of other AI tools rely on the C2PA standard, which stands for Coalition for Content Provenance and Authenticity. C2PA is an open technical standard that attaches cryptographically signed provenance metadata to digital media, and it is supported by Adobe, Microsoft, Google, OpenAI, Sony, and many other industry members.

The core data structure is called a C2PA Manifest, or Content Credential. It records who created the content, when, what tools were used, whether AI was involved, and every meaningful edit since capture. Assertions within the manifest are cryptographically signed using public key infrastructure, so any compliant viewer can verify authenticity. Tampering with the file breaks the signature and is immediately detectable.

The C2PA approach has been compared to a nutrition label for digital media: it does not make a value judgment about whether content is good or bad, only whether the provenance record is well-formed and has not been modified. The standard's major limitation is that it lives in the file container, not in the content itself. Strip the metadata, convert the file to a different format, or upload it to a social platform that discards metadata, and the provenance record disappears. The watermark is gone but the content looks identical.

The EU AI Act: Why Regulation Is Driving Deployment

The EU AI Act's transparency obligations under Article 50 took effect on August 2, 2026. They require that AI-generated synthetic images, videos, and audio be marked with watermarks or AI symbols, and that users be informed when they are interacting with AI. Non-compliance can trigger fines of up to 15 million euros or 3 percent of total global annual turnover, whichever is higher.

The regulation is deliberately technology-neutral. It requires machine-readable marking but does not mandate any single technique, which is why the European Commission has indicated that a multi-layered approach combining metadata and embedded watermarks is likely necessary to meet the standard. There are narrow exemptions, for example for AI systems that only perform an assistive or standard-editing function.

Generative AI systems already on the market before August 2, 2026, have until December 2, 2026, to meet the machine-readable marking requirement under Article 50(2). Systems launched on or after that date must comply immediately. The EU's enforcement posture is already reshaping global practices: Anthropic's decision to apply Claude's watermarking worldwide rather than only in Europe is a direct example of what regulators call the "Brussels effect," where one jurisdiction's standards ripple outward across the entire market.

Can You Turn AI Watermarks Off?

This is the question most people want answered, and the honest answer is: it depends on what you mean.

As a user, you generally cannot opt out. For Gemini, watermarks are applied automatically to images and videos generated on AI Plus, Pro, and Ultra plans with no user-facing toggle. For Claude, the marking applies at the model level, meaning it is present regardless of which product interface or API endpoint you use. There is no setting to disable it.

As a developer building on top of these models, the situation is similar. The watermarking happens inside the model itself, before output reaches your application layer.

However, "turning off" and "removing" are not the same thing. A determined actor can degrade or destroy a watermark after the fact through several known methods. For text watermarks, heavy paraphrasing or a complete rewrite will eliminate the statistical signal. For image watermarks, certain adversarial image processing techniques, including regeneration through a second AI model, can strip embedded signals while preserving visual quality. Research published in 2024 demonstrated that strong robustness against ordinary distortions does not preclude removal by a sufficiently capable adversary with access to quality and perturbation testing tools.

The practical takeaway is that watermarks are not locks. They are signals designed to survive accidental or casual modification, not determined adversarial attack. Google's SynthID for images is designed to survive compression, resizing, and format conversion. Claude's text watermark is expected to survive light editing. Neither is designed to be undefeatable by someone who knows what they are doing and has the right tools.

Deliberate removal of an AI watermark is, however, a legally distinct act under the EU AI Act. The regulation prohibits deliberately removing or altering a watermark, so even if the technical act is possible, the legal risk associated with doing it intentionally is real and growing.

What Watermarks Cannot Do

It is tempting to treat watermarking as a solution to the AI-content problem. It is not, and the organizations building these systems say so directly. Google DeepMind has stated that SynthID is not a silver bullet for identifying AI-generated content but is an important building block for developing more reliable identification tools.

Several genuine limitations are worth knowing. First, the absence of a watermark does not prove content is human-made. It could mean the content was created by an AI system that does not watermark, was created before watermarking was deployed, or had its watermark successfully removed. Second, watermarks are proprietary by design. SynthID can only detect Google's own mark. Claude's detector will only find Anthropic's mark. There is no universal cross-platform reader today, though interoperability frameworks are under development. Third, short content is harder to mark reliably because the statistical signal depends on accumulating enough word or pixel choices. Fourth, academic research has found that metadata-based provenance and machine-learning watermarking each have weaknesses the other does not: metadata is publicly detectable but fragile to accidental stripping, while embedded statistical marks are more robust to ordinary transformations but harder to verify without access to the original key.

There is also a fairness concern worth watching. Research has documented that statistical AI-detection systems, the predecessor to watermarking, show systematic bias against non-native English speakers. Watermarking schemes are theoretically less vulnerable to this problem because they depend on a keyed signal rather than writing style, but the field is still young and real-world performance across diverse languages and writing contexts deserves scrutiny.

The Agent5 Angle: Thinking in Probabilities About What Comes Next

Getting smart about AI means treating watermarking not as a solved problem but as an evolving system with known failure modes, regulatory tailwinds, and significant open questions. Here is a useful framework for thinking about what is likely to happen.

The probability that watermarking becomes a baseline expectation across major AI platforms is high and rising. The EU AI Act is already law, Anthropic is deploying globally, and Google has been building SynthID infrastructure for years. The trend line is clear.

The probability that watermarks alone will solve the problem of AI-content authenticity is low. Every technical standard creates a corresponding incentive to circumvent it, and the research literature on watermark removal is substantial and active. The more credible prediction is that watermarks will become one layer in a multi-signal system, combined with platform-level disclosure, human content policies, and forensic tools that no single actor controls.

The probability that interoperability will improve is moderate, with regulators providing the pressure and industry coalitions like C2PA providing the mechanism. The EU has already set a February 2027 deadline for watermark-detection interoperability requirements, which means the ecosystem is not static.

The most intellectually honest position is this: AI watermarks matter, they are being deployed at scale right now, and they are a meaningful step toward transparency. They are also imperfect, circumventable by motivated actors, and not yet standardized across the industry. The people building this infrastructure say the same thing, and that candor is itself a useful signal about where the technology actually stands.