Invisible Watermarking

Paint writes a server-issued ID into locally generated pixels, and egress logs will never see it

A reverse engineer says Cocreator embeds a 16-byte GUID handed out by a Microsoft moderation endpoint into images the NPU generates locally. Local inference and private inference are not the same purchase.