Skip to content

Retrosynthesis of Synthetic Media for Explainable AI Provenance Forensics

Sep 2026 · 0 citations
Computer Science

TL;DR

A self-referential retrosynthesis framework for explainable AI provenance forensics under a fixed-generator setting that leverages a jointly optimized encoder-decoder pair to implement a self-embedding mechanism that enables round-trip consistency verification.

Abstract

With the rapid proliferation of generative models on Machine Learning as a Service (MLaaS) platforms, reliably tracing the provenance of synthetic media without modifying generator architectures or parameters remains a major challenge. In this work, we propose a self-referential retrosynthesis framework for explainable AI provenance forensics under a fixed-generator setting. The framework leverages a jointly optimized encoder-decoder pair to implement a self-embedding mechanism that enables round-trip consistency verification. During inference, client inputs are first encoded and then processed by the generator to produce outputs with high visual fidelity. For forensic verification, the consistency between the resynthesized image and the query image is analyzed to determine whether the image originates from the target generative model. Our approach eliminates the need for watermark embedding or modifications to the generation process. Experimental results show that images generated from encoded inputs maintain visual quality comparable to original generator outputs, while decoded images reliably trace back to their corresponding source inputs. Furthermore, the framework provides interpretable evidence for generative content provenance, establishing a practical tool for explainable generative AI forensics.

View source

Similar papers

Preprint Oct 2026

Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering

AI systems create images and videos with image/video generation models or by writing code and graphics descriptions that are then rendered. These routes can produce similar visible artifacts but expose different representations, intervention points, and provenance evidence. We develop a production-centered framework th...

Zheng Gao, Xiao-Yu Li, Zhi-Cheng Bao et al. · 0 citations
Preprint Oct 2026

Certification of Real Images through Calibrated Content Authentication

Generative models can synthesize high-quality inauthentic multimedia content that is already being misused at scale. We evaluate twenty deepfake detectors against ten generators released in the last four years and find accuracy decreasing over time, from near-perfect 99.5% to 76%. Adversarial perturbations further redu...

Sarim Hashmi, Abdelrahman W. A. Elsayed, Mohammed Talha Alam et al. · 0 citations
#generative ai Review Open access Aug 2026

A semantic firewall for proactive governance of synthetic tabular data in generative AI pipelines

A Semantic Integrity Risk Score is proposed: a learned, generator-agnostic measure of the degree to which a record violates the functional and logical dependencies mined from trusted data, which is positioned as a practical, proactive complement to statistical monitoring rather than a replacement for it.

Waleed A. Al Shehri · 0 citations
Preprint Aug 2026

Conjunctive Poisoning in AI Supply-Chain Applications

This work shows that a malicious developer can pair a benign-looking wrapper with crafted metadata to deterministically alter post-generation behavior without modifying model weights, training data, or inference backend, and introduces TIF-BAH, a lightweight middleware defense that verifies wrapper integrity and record...

Nokimul Hasan Arif, Qian Lou, Meng Zheng · 0 citations
Preprint Oct 2026

MARCO: The Radioactive Watermark for Protein Generative Models

Protein Generative Models (PGMs) have revolutionized structural biology by enabling the design of complex 3D protein structures from sequence data. However, this breakthrough introduces a dual-use challenge, exposing high-value PGMs to economic risks like unauthorized model extraction and biosecurity threats such as bi...

Hua-Jie Chen, Xin Guo, Yuchen Shi et al. · 0 citations
Preprint Aug 2026

Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation

A non-invasive model fingerprinting framework based on collapsed generation, a phenomenon where certain input conditions produce highly consistent images across multiple stochastic seeds, is presented, establishing collapsed generation as a reliable intrinsic evidence source for non-invasive diffusion model ownership v...

Yuanmin Huang, Chen Chen, Geng Hong et al. · 0 citations

Related blog posts

Microsoft Research Blog Oct 6, 2026

What AI gets wrong and what failure teaches us

Jennifer Neville did not want to go into computer science—but that’s exactly where she landed. Neville discusses the starts and stops that led to her professional sweet spot and her work identifying “surprising failures” making it hard for AI to handle complexity.  The post What AI gets wrong and what failure teaches us appeared first on Microsoft Research.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.