Guillaume Meyer writes about watermarks-remover, a privacy-first open-source tool (MIT, Python stdlib) that strips multi-vendor machine-learning provenance marks from text and files the user owns. It operates across three layers: a deterministic Unicode and metadata scrub (Layer A), a best-effort LLM rewrite for statistical token-sampling watermarks (Layer B), and file-format-specific metadata stripping for C2PA, EXIF, XMP, and document properties across dozens of formats including images, video, audio, PDF, DOCX, EPUB, and more.
- 20.9k GitHub stars; formerly named "remove-claude-marks"
- Ships as a Claude Code plugin with a deterministic PostToolUse hook that auto-cleans files the agent writes without requiring model cooperation
- Includes a black-box watermark-stealing module (stealer/) and pre-commit hooks for CI gating
- The README carries an explicit disclaimer: Layer B rewriting degrades copy quality, and no tool can certify that a vendor detector will fail
- Optional external backends: CtrlRegen (ICLR 2025 pixel regeneration), MarkDiffusion, MarkLLM, and a model-free keyed-Gumbel (Aaronson EXP) detector
- Google retired its SynthID text watermarking API in August 2026
- 20.9k GitHub stars; formerly named "remove-claude-marks"
- Ships as a Claude Code plugin with a deterministic PostToolUse hook that auto-cleans files the agent writes without requiring model cooperation
- Includes a black-box watermark-stealing module (stealer/) and pre-commit hooks for CI gating
- The README carries an explicit disclaimer: Layer B rewriting degrades copy quality, and no tool can certify that a vendor detector will fail
- Optional external backends: CtrlRegen (ICLR 2025 pixel regeneration), MarkDiffusion, MarkLLM, and a model-free keyed-Gumbel (Aaronson EXP) detector
- Google retired its SynthID text watermarking API in August 2026
