cd /news/ai-tools/i-built-an-open-source-toolkit-for-a… Β· home β€Ί topics β€Ί ai-tools β€Ί article
[ARTICLE Β· art-109203] src=dev.to β†— pub= topic=ai-tools verified=true sentiment=↑ positive

I Built an Open-Source Toolkit for AI Watermark & Provenance Forensics

Developer Karthik R. Shet has released ClaudeMark, an open-source, local-first toolkit for AI watermark and provenance forensics. The tool analyzes multiple signals, including statistical patterns, Unicode characteristics, and metadata, to present forensic evidence rather than definitive claims about AI authorship. It is designed for zero-egress operation, keeping files on the user's machine, and includes defensive security checks and sanitization capabilities.

read3 min views3 publishedAug 24, 2026

AI-generated content is becoming increasingly common.

But when you receive an AI-generated image, document, or other digital artifact, an interesting question remains:

What can we actually learn from the file itself?

There may be metadata, provenance information, invisible Unicode characters, statistical signals, or other artifacts that aren't visible from the surface.

I wanted a developer-friendly way to investigate those layers locally.

So I built ClaudeMark.

πŸ”— GitHub: https://github.com/karthikrshet/ClaudeMark

ClaudeMark is an open-source, local-first toolkit for AI watermark and provenance forensics.

The goal isn't to make an overconfident binary claim like:

"This file was definitely generated by AI."

Instead, ClaudeMark analyzes multiple types of signals and presents them as forensic evidence.

That distinction matters.

A statistical signal isn't automatically proof of authorship, and the absence of a signal doesn't necessarily prove that AI wasn't involved.

ClaudeMark currently brings several different analysis layers together.

ClaudeMark can analyze supported content for statistical patterns that may be associated with AI-generated material.

These results are treated as signals rather than definitive proof.

Text can contain characters that aren't visually obvious.

ClaudeMark can inspect Unicode characteristics and help visualize suspicious or invisible characters that may otherwise be overlooked.

This is particularly useful when investigating text that appears completely normal to a human reader.

Digital files can contain metadata and provenance information such as:

ClaudeMark provides tooling to inspect these layers and, where supported, sanitize them.

Forensics isn't only about provenance.

Files can also contain potentially dangerous or unexpected structures.

ClaudeMark includes defensive security-oriented checks so that analysis isn't limited to simply asking whether content is AI-generated.

For supported formats, ClaudeMark can remove selected metadata and provenance artifacts.

The important part is that the workflow is designed around inspection first.

You can understand what is present before deciding what to clean.

This was one of the most important design decisions.

A forensic tool may be used with sensitive:

Sending those files to an external service isn't always desirable.

ClaudeMark therefore follows a zero-egress/local-first approach.

The goal is simple:

Your files stay on your machine.

The project is designed as a collection of focused analysis and processing components rather than one giant detector.

At a high level:

                 β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
                 β”‚     Input       β”‚
                 β”‚ Files / Content β”‚
                 β””β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                          β”‚
                          β–Ό
                β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
                β”‚ Detection Pipelineβ”‚
                β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                          β”‚
        β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
        β–Ό                 β–Ό                 β–Ό
   AI Signals       Unicode Analysis   Metadata /
                                      Provenance
        β”‚                 β”‚                 β”‚
        β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                          β–Ό
                β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
                β”‚ Forensic Results   β”‚
                β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                          β”‚
                β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
                β–Ό                   β–Ό
             Audit              Sanitize

The project also provides developer-facing CLI/API capabilities and is designed to be extended with additional detectors and integrations.

I wanted developers to be able to inspect the implementation instead of treating AI-content analysis as a black box.

Open source also makes it possible to:

This is an important distinction.

ClaudeMark does not claim that every AI-generated file can be reliably identified.

AI detection is inherently difficult, and different signals have different levels of reliability.

ClaudeMark is intended as a forensics and analysis toolkit, not an infallible AI-authorship oracle.

I'm interested in expanding ClaudeMark around:

The project is open source, so contributions and feedback are welcome.

GitHub:

[https://github.com/karthikrshet/ClaudeMark]

``

(https://github.com/karthikrshet/ClaudeMark)

If you're working on AI-generated content, provenance, digital forensics, privacy, or developer security tooling, I'd love to hear what problems you're running into.

What should ClaudeMark investigate next?

── more in #ai-tools 4 stories Β· sorted by recency
── more on @karthik r. shet 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain β€” perfect for shipping the agent you just read about.

$git push zahid main
β†’ Live at https://your-agent.zahid.host βœ“
Get free account β†’ Pricing
from €0/mo Β· no card required
LIVE [news/i-built-an-open-sour…] indexed:0 read:3min 2026-08-24 Β· β€”