Compositional Adversarial Training for Robust Visual Watermarking

ArXi:2605.16720v1 Announce Type: cross Robust watermarking is typically trained with random post-processing augmentation, but random sampling under-covers the combinatorial space of realistic attack pipelines and rarely encounters the rare compositions that actually break detection. This leads to unstable