{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-10-23-004",
    "source_story_id": "tmp-story-spectral-canary-dataset-audit",
    "edition_id": "mp-2026-10-23-morning-0105",
    "edition_url": "https://themachinepress.com/edition/2026-10-23",
    "position": 4,
    "story_type": "dispatch",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "A Faint Image Trace Survives Model Training",
    "slug": "a-faint-image-trace-survives-model-training",
    "dek": "SpectralCanary blends one low-frequency signal through a collection, then looks for its transfer into a fine-tuned image model's outputs.",
    "summary": "SpectralCanary blends one low-frequency signal through a collection, then looks for its transfer into a fine-tuned image model's outputs.",
    "body_text": "Dataset-use audits usually struggle when a model absorbs a collection's style without copying individual images. SpectralCanary plants a smooth low-pass version of a fixed canary image into every released image while leaving captions untouched. A lightweight verifier then checks generated outputs for the transferred signal. Across the reported tests, per-generation detection averaged 92.4 percent at a 1 percent false-positive rate over five datasets with SD3.5, while SSIM remained 0.989. The strongest evaluated removal attack caused more than 25 FID points of degradation. The claims are limited to the architectures, transformations, datasets and attack strategies tested.",
    "why_it_matters": "SpectralCanary blends one low-frequency signal through a collection, then looks for its transfer into a fine-tuned image model's outputs.",
    "limitations": [],
    "importance": 9,
    "canonical_url": "https://themachinepress.com/story/mp-2026-10-23-004/a-faint-image-trace-survives-model-training",
    "json_url": "https://themachinepress.com/story/mp-2026-10-23-004.json",
    "first_published_at": "2026-10-23T09:00:00.000-04:00",
    "modified_at": "2026-10-23T09:00:00.000-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-10-23-004-001",
        "text": "SpectralCanary blends one low-frequency signal through a collection, then looks for its transfer into a fine-tuned image model's outputs.",
        "source_ids": [
          "source-2026-10-23-004"
        ],
        "qualification": null
      }
    ],
    "source_ids": [
      "source-2026-10-23-004"
    ],
    "tags": [
      "dataset auditing",
      "image models",
      "training data"
    ],
    "image_url": null,
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-10-23-004",
      "title": "arXiv preprint 2610.31659, original v1",
      "publisher": "arXiv",
      "url": "https://arxiv.org/abs/2610.31659v1",
      "canonical_url": "https://arxiv.org/abs/2610.31659v1",
      "source_type": "primary_research",
      "is_primary_source": true,
      "published_at": "2026-10-22T13:59:03.000-04:00",
      "accessed_at": "2026-10-23T08:21:38.024-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-10-23-004-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "A Faint Image Trace Survives Model Training",
    "publisher": "The Machine Press",
    "published_at": "2026-10-23T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-10-23-004/a-faint-image-trace-survives-model-training"
  }
}
