Likelihood Is Not Authorship: Can We Reliably Measure Human Contribution in AI-Assisted Writing?
Organizations: Department of Computer Science, Purdue University
Abstract
AI-text detection generally asks whether a machine wrote a text. As AI becomes an increasingly integral and accepted part of writing, the more relevant question is no longer whether AI was used, but how much of the text reflects human contribution. A prominent line of work estimates this by measuring how predictive a person's prompt is of the final text. We show that this measure can be easily manipulated. We introduce SPECIFICITY PADDING that simply asks the model to copy a few random IDs from the prompt, and that alone makes a title-only request look more human than one that supplies the article's key ideas. A context-swap audit then holds each document fixed, and only shows or hides the IDs to the evaluator. The score of the unchanged text swings by a third to half of its scale, and it rises for every document we test, on news and scientific abstracts, across varied LLMs from 3.8B to 753B parameters. The same articles can average 85% human or 15% human depending only on which prompt is on record, and even with no prompt at all, the output-only variant rewards the random strings themselves. An exact identity, the credit ledger, explains why. The score is a surprisal-weighted average over the text, so rare strings that the context makes copyable collect the credit, whatever they mean. A two-point bound marks a deeper limit. If the prompt could have been machine-written, every transcript-only method must, in the worst case, miss by half the contribution at stake. Likelihood-based scores alone cannot reliably establish human contribution without evidence of what the person added and how the text was produced.
Figures & tables
| News | arXiv | |||
| Contrast | Points | Points | ||
| Fixed output, different evaluator context | ||||
| Matched Hidden | 32–51 | 2100 | 43–47 | 600 |
| Matched Wrong | 16–29 | 2100 | 25–28 | 600 |
| Generated article, different evaluator context | ||||
| Matched Hidden | 51–84 | 2097 | 66–78 | 600 |
Appendix figures & tables9 assets
Supplementary material from the paper’s appendix.
Appendix
| Condition | Mean | Median | 95% CI | |
|---|---|---|---|---|
| Polish | 30 | 0.846 | 0.840 | [0.836, 0.856] |
| Summary | 30 | 0.708 | 0.714 | [0.687, 0.728] |
| Title | 30 | 0.536 | 0.529 | [0.524, 0.549] |
| Subject | 30 | 0.488 | 0.505 | [0.466, 0.509] |
| Name | Checkpoint | Developer | Params | Access | Precision | Revision |
|---|---|---|---|---|---|---|
| Llama-3.1-8B | meta-llama/Llama-3.1-8B-Instruct | Meta | 8.0B | local weights | bfloat16 | 0e9e39f2 |
| Qwen3-8B | Qwen/Qwen3-8B | Alibaba | 8.2B | local weights | bfloat16 | b968826d |
| Gemma-3-4B | google/gemma-3-4b-it | 4.3B a | local weights | bfloat16 | 093f9f38 | |
| Phi-4-mini | microsoft/Phi-4-mini-instruct | Microsoft | 3.8B | local weights | bfloat16 | cfbefacb |
| DeepSeek-V4-Flash | deepseek-ai/DeepSeek-V4-Flash-0731 | DeepSeek | 284B MoE b | served endpoint | unreported | 7872f01b c |
| Qwen3.8-27B | Qwen/Qwen3.8-27B | Alibaba | 27B d | served endpoint | unreported | 1d4bf0f2 c |
| Fixed output | Generation-time | ||||
|---|---|---|---|---|---|
| Model | Matched clean | Matched Hidden | Matched Wrong | Attack clean | Matched Hidden |
| Llama-3.1-8B | +0.130 [+0.125, +0.135] | +0.505 [+0.500, +0.510] | +0.252 [+0.250, +0.254] | +0.199 [+0.185, +0.213] | +0.521 [+0.490, +0.551] |
| Qwen3-8B | -0.144 [-0.150, -0.138] | +0.333 [+0.327, +0.339] | +0.293 [+0.290, +0.297] | +0.146 [+0.142, +0.150] | +0.793 [+0.783, +0.802] |
| Gemma-3-4B | -0.062 [-0.073, -0.052] | +0.339 [+0.330, +0.347] | +0.231 [+0.228, +0.234] | +0.235 [+0.224, +0.245] | +0.843 [+0.831, +0.855] |
| Phi-4-mini | +0.211 [+0.206, +0.215] | +0.388 [+0.383, +0.392] | +0.224 [+0.221, +0.226] | +0.271 [+0.261, +0.282] | +0.505 [+0.494, +0.516] |
| DeepSeek-V4-Flash | -0.047 [-0.051, -0.042] | +0.408 [+0.402, +0.415] | +0.241 [+0.238, +0.244] | +0.133 [+0.128, +0.139] | +0.701 [+0.690, +0.711] |
| Evaluator context | Mean score | 95% CI | Recall | |
|---|---|---|---|---|
| Matched (full prompt) | 0.747 | +0.199 | [+0.185, +0.213] | 0.65 |
| Hidden (visible request) | 0.226 | -0.322 | [-0.340, -0.304] | 0.65 |
| Wrong (wrong IDs) | 0.526 | -0.022 | [-0.028, -0.016] | 0.65 |
| Assistance level | Clean score | Matched | Hidden | Wrong |
|---|---|---|---|---|
| Polish (full draft) | 0.846 | -0.004 | -0.364 | -0.172 |
| Summary (key ideas) | 0.708 | +0.054 | -0.397 | -0.159 |
| Title | 0.536 | +0.137 | -0.366 | -0.112 |
| Subject | 0.488 | +0.143 | -0.353 | -0.120 |
| Model | Matched clean | Matched Hidden | Matched Wrong |
|---|---|---|---|
| DeepSeek-V4-Flash | |||
| Qwen3.8-27B | |||
| GLM-5.2 |
| Variant (vs. clean, points) | Mean [95% CI] |
|---|---|
| Two required words in the prompt | |
| Common words | [ , ] |
| Random rare words | [ , ] |
| Score-selected rare words | [ , ] |
| One required three-token phrase | |
| Surprisal-selected | [ , ] |
Authorship Attribution
Authorship attribution identifies or verifies who wrote a text, code sample, or other creative work from patterns in its style and content.
See all 66 papers