DESTILL
.ai
/ Fortress — the 90-second whiteboard story
← Back to Fortress
your original
cropped
re-encoded
screenshotted
…and the origin is gone.
Who made it? Who leaked it? Was it AI?
The naive fix dies on the first crop.
wm
one watermark, one corner
the crop keeps THIS part
no mark
attribution: lost
a single-region mark cannot survive what the internet does to images
Fortress tiles the proof into EVERY region.
▲
▲
▲
▲
▲
▲
▲
▲
▲
3×3 tiled embed — every tile carries the proof
▲ still here
attribution intact
measured on 44 real images: JPEG · noise · recolor · downscale = 100%
off-center crops 96% — blind centered-crop recovery: a disclosed open gap
Every viewer session gets its own marked copy.
your content
session A
session B
session C
leaked copy
shows up online
traced back to session B
evidence for a takedown — not vigilantism
The dangerous failure isn't a MISS.
random image
(no mark in it)
"this belongs
to creator X!"
← a phantom attribution = a lawsuit
guard
✓ refuses to attribute a source that isn't genuinely present
✓ null control: 0 false hits on 49 unmarked assets + 200 video frames
Sovereign. Measured. Honest.
✓ provenance bound
at capture
, on-device — no cloud round-trip
✓ robustness reported
per attack
— including the ones that break it
✓ false attribution measured against a
null control
✗ no
"unbreakable"
— a full AI redraw destroys any blind mark
✗ that boundary is
why the fragile tamper layer exists
— it catches the redraw
12 documented business cases — public.
destill.ai/fortress/partner
⏸ Pause
↺ Restart
Explore the 12 cases →
RSA-style whiteboard explainer · robustness & attribution numbers shared reproducibly under NDA · © 2026 DESTILL.ai ·
Fortress overview
·
Impressum
·
Privacy