# Category 05 — AI Text Detection and Evasion

This category covers the full adversarial loop: statistical and learned detectors that flag AI-generated text, watermarking schemes that embed provenance at generation time, and the evasion techniques (paraphrase attacks, RL-optimized rewriters, character-level tricks) that defeat both. For the Unslop project, this is the category that specifies what we are measured against, which evasion methods are prior art, and where a humanizer product has legitimate positioning.

## Angle files

- [A-academic.md](./A-academic.md) — 25 peer-reviewed and preprint papers (updated April 2026): the canonical detector families (DetectGPT, Fast-DetectGPT, Binoculars, Ghostbuster, RAIDAR, Tulchinskii intrinsic-dimension, AdaDetectGPT NeurIPS 2025), the major watermarking schemes (Kirchenbauer green-list, SynthID-Text, Christ–Gunn–Zamir cryptographic, Aaronson Gumbel), evasion attacks (DIPPER, RADAR, Sadasivan recursive paraphrase, Jovanović watermark-stealing, SilverSpeak homoglyphs, SIRA ICML 2025), the WaterPark robustness benchmark (EMNLP 2025), the ETH SRI Lab SynthID probe (2025), the impossibility-vs-possibility theoretical debate, the Liang ESL-bias result, and the M4/MGTBench benchmark landscape.
- [B-industry.md](./B-industry.md) — Vendor blogs and mainstream press (updated April 2026): OpenAI, GPTZero, Originality.ai, Copyleaks, Turnitin, Google DeepMind, The Verge, MIT Technology Review, Bloomberg, WIRED, Inside Higher Ed, Scribbr, Ahrefs, plus new 2025–2026 entries: GPTZero Chicago Booth 2026 benchmark (new reference accuracy metric), EU AI Act Article 50 Draft Code of Practice on AI content labelling (December 2025, binding August 2026), IETF AI Content Disclosure Header proposal (April 2025), and Undetectable.ai reaching 22M users.
- [C-opensource.md](./C-opensource.md) — ~30 GitHub repositories and Hugging Face models (updated April 2026): detector reference implementations (Fast-DetectGPT, Binoculars, Ghostbuster, AdaDetectGPT NeurIPS 2025 with formal FPR guarantees, GLTR), watermark codebases (lm-watermarking KGW, synthid-text, Robust\_Watermark, WatermarkAttacker, SIRA ICML 2025), evasion tools (DIPPER 11B, StealthRL RL-trained evader, SilverSpeak), practitioner humanizers (humanizer-x, Mohit1053/Humanizer, ADEMOLA200/Humanize-AI, StealthHumanizer), and benchmarks (RAID, MGTBench v1/v2, WaterPark EMNLP 2025, curated paper lists).
- [D-commercial.md](./D-commercial.md) — 18 products profiled (updated April 2026): 9 detectors (GPTZero with Chicago Booth 2026 accuracy, Originality.ai September 2025 models, Copyleaks with Japanese April 2025, Turnitin 2026 humanizer-targeting roadmap, Winston AI, Sapling, ZeroGPT, Writer.com, Grammarly Authorship) and 9 humanizers (Undetectable.ai 22M users / 87–88% bypass, Humanize AI Pro, StealthGPT, BypassGPT, Phrasly, HIX Bypass, Surfer, WriteHuman, AIHumanize), with pricing, 2025–2026 accuracy figures, and EU regulatory context.
- [E-practical.md](./E-practical.md) — 21 community threads and tutorials (updated April 2026): HN, Reddit (r/ApplyingToCollege, r/ChatGPT, r/BypassAiDetect, r/teachers, r/PromptEngineering), BlackHatWorld, YouTube, and vendor blogs, including reproducible bypass prompts with per-detector scores, the practitioner-converged list of AI tells, the Anangsha Alammyan 30+ humanizer review (2026), and the updated multi-model routing guide naming 2026 frontier models.

## Synthesis and legacy files

- [SYNTHESIS.md](./SYNTHESIS.md) — the distilled synthesis across all five angles
- [INDEX.md](./INDEX.md) — legacy category summary, superseded by SYNTHESIS.md, preserved for traceability
