{
  "id": 8030291,
  "title": "AI model watermarking changes agent behavior",
  "url": "https://urgent.news/2026/09/17/ai-model-watermarking-changes-agent-behavior-8030291",
  "topic": "ai",
  "section": "AI",
  "published": "2026-09-17T13:00:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/ai-and-ml/2026/09/17/ai-model-watermarking-changes-agent-behavior/5296998"
  },
  "original_language": "en",
  "account": "AI-generated content must include watermarks to meet European law's provenance requirements, but this may influence how AI agents behave, according to Lasso Security. These watermarks, such as Google DeepMind's SynthID-Text, alter the model's token generation process, potentially impacting safety refusals and tool calling. While the changes to responses might be imperceptible to humans, AI agents can detect the subtle differences, which could affect their decision-making. Lasso's tests revealed that watermarking reduced tool calling accuracy for six out of seven models tested. Moreover, watermarking had a more significant impact on refusal behavior under adversarial prompt injection scenarios, making AI agents less likely to refuse harmful requests. Though the watermarks' effects may not justify their implementation, Lasso argues that security evaluations should account for watermarked content to gauge agent behavior changes.",
  "summary": "Lasso Security sees differences in tool handling and model refusals",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "AI model watermarking changes agent behavior",
        "url": "https://urgent.news/2026/09/17/ai-model-watermarking-changes-agent-behavior",
        "published": "2026-09-17T13:00:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}