SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking
Researchers propose SWAP, a sequential watermarking technique to protect copyright of soft prompts used in vision-language models like CLIP. The method embeds watermarks through ordered out-of-distribution classes, addressing fundamental limitations of existing auditing approaches that fail due to conflicting objectives between watermarking and primary task performance.