Artificial MindsThe fourth project · September 2026

Two passages, and an AI model wrote one of them. Can you tell which? Then see what AI detectors, watermarks and editing histories can and cannot show.
Read two paragraphs about waiting out a storm in a tent. One comes from a book published in 1922. An AI model wrote the other for this essay. Pick the one you think the machine wrote.
Rain hammered the tent until each drop seemed to strike inside my skull. I sat with my knees drawn up, watching the thin walls shudder and bow beneath the wind. Water gathered along a seam, swelled into bright beads, then fell onto the corner of my sleeping bag. The air smelled of wet nylon, mud, and the wool of my socks. Whenever lightning flashed, the scattered boots and cooking pots appeared stark against the fabric, then vanished into gray. Thunder rolled through the ground beneath me. I pressed my palms around a cooling mug and counted the spaces between gusts. Gradually, the canvas stopped snapping. The rain softened to a steady patter, and somewhere beyond the entrance, water trickled over stones. I loosened my grip and stretched my cramped legs.
One summer blizzard is much like another. The temperature, never very low, rises, and you are not cold in the tent. Sometimes a blizzard is a very welcome rest: after weeks of hard pulling, dragging yourself awake each morning, feeling as though you had only just gone to sleep, with the mental strain perhaps which work among crevasses entails, it is most pleasant to be put to bed for two or three days. You may sleep dreamlessly nearly all the time, rousing out for meals, or waking occasionally to hear from the soft warmth of your reindeer bag the deep boom of the tent flapping in the wind, or drowsily you may visit other parts of the world, while the drifting snow purrs against the green tent at your head.
Which one did the machine write?
How sure are you?
Answer both questions to see how each passage was made.
With scripts off there are no buttons to press. Decide which passage is the machine's, then read the answer below.
Passage B is the older one. Apsley Cherry-Garrard wrote it about a summer blizzard in Antarctica. He had gone there as a member of a polar expedition. His book about that journey, The Worst Journey in the World, was published in 1922. The paragraph is quoted word for word. Its longest sentences run to about sixty words. Sentences that long are no proof of a human author. An AI model will write them if it is asked to.
Passage A was written for this essay on 9 September 2026 by OpenAI GPT-6 Astra Light. The request was "In about 130 words, describe waiting out a storm inside a tent. One paragraph, past tense, no dialogue, no names, no dashes." Nobody edited the text afterwards.
One guess shows little, right or wrong. With two passages, a coin toss would be right half the time. One paragraph is also a small amount of writing to judge.
In a 2021 study, researchers gave a mix of short stories, news articles and recipes to readers with no training in spotting AI writing. People had written some of those pieces, and OpenAI GPT-3 had written the rest. The readers were right about half the time, the same as guessing. After a short training session, some readers' accuracy rose to about 55%.
In a 2025 study, the researchers collected 300 long articles in English, all of them nonfiction. People wrote some of the articles, and three models from OpenAI and Anthropic wrote the rest. The readers in this test used those three models every day. A group of five of these readers voted on each article, and the group's answer was right 299 times out of 300.
The two tests used different writing, different lengths and different readers, so their results cannot be compared directly. Putting the results side by side does not show that people got better at this between 2021 and 2025. In the 2021 test, untrained readers did no better than guessing on short pieces. In the 2025 test, the readers used AI models every day. They did far better than guessing on long articles of a kind they knew well.
The readers who did well in 2025 were asked what they had been looking for. Part of their answer was a list of words and phrases that AI models use too often. The rest was harder for them to put into words. They said they could tell whether the writer cared about the subject. They also recognised a formality in the models' writing that they could not fully explain.
two cases from before there were AI models
In 1887 T. C. Mendenhall counted how often Dickens and Thackeray used three-letter words, four-letter words, and so on. He then plotted each writer's counts as a curve. He thought the shape of each curve came from a habit that the writer could not see and did not control.
share of words at each length
In 1963 Frederick Mosteller and David Wallace used the same kind of counting to settle a long argument. The Federalist Papers are 85 essays published in 1788 to argue for the American constitution. Twelve of them had a disputed author. Both Alexander Hamilton and James Madison claimed all twelve. Mosteller and Wallace counted the small words a writer picks without thinking, such as "upon" and "whilst" (an older word for "while"). All twelve came out as Madison's.
the word "upon", per thousand words
Both cases worked because the list of possible authors was short and known. Each candidate already had plenty of writing to compare against.
Neither of those conditions holds when the suspect is an AI model. There is no short list of suspects. Every version of every model writes differently from the last. A model asked to write in someone else's style will do it. The idea of counting habits a writer cannot see survived anyway. Every AI detector today is descended from it.
There are three broad ways to check whether an AI model wrote a text.
None of the three works well on a paragraph that a person and an AI model wrote together. AI detectors also face humanizers. These services rewrite AI text until an AI detector scores it as human-written.
All an AI detector has is the words of the text. There are two designs. The first scores how predictable each word would be to an AI model. The second is trained on millions of examples of AI and human writing.
Inside the first design sits an AI model of its own, used as a simulator. The simulator plays the part of the AI model that might have written the text. The AI detector feeds the text to the simulator one word at a time. At each point the simulator lists the words most likely to come next. The AI detector then checks where the real next word sits on that list. A word near the top of the list is easy to guess. A word far down is a surprise. An AI model writes by picking a likely next word, again and again. Its sentences are built from words the simulator puts near the top. A person surprises the simulator more often.
The simulator made one guess in each of two sentences, and the results sit side by side.
one guess from each of two sentences
The weather today was cold and grey, so we stayed inside.
the simulator's expectations for the marked word
| grey | 31% | |
| overcast | 22% | |
| wet | 14% | |
| dark | 9% | |
| damp | 6% | |
| sugary | 0.01% |
A match. "Grey" was the simulator's first choice. On its own this word is a small sign that an AI model wrote the sentence. A person could easily have written that sentence too.
The weather sulked all morning, so Ruth stayed in.
the simulator's expectations for the marked word
| was | 40% | |
| today | 18% | |
| is | 12% | |
| has | 6% | |
| here | 3% | |
| sulked | 0.001% |
A surprise. "Sulked" sat thousands of places down the simulator's list. On its own this word is a sign that a person wrote the sentence.
The simulator has to resemble the AI model that might have written the text. An AI detector tested against one AI model does worse on text from an AI model it has not seen. Every new version of an AI model changes its habits. An AI detector tuned last year checks for habits that may already be gone.
The second design is trained on examples. Someone collects millions of documents that people wrote and has AI models write a twin of each one, on the same subject and at the same length. A program is then trained to tell each document from its twin. Because both documents cover the same subject, the program has to look for differences in how they are written.
The program is then run over a large pile of human writing from before 2022. Every human passage it wrongly flags goes back into the training pile, and the program is trained again on its own mistakes. Pangram makes one of these programs and says this loop cuts its rate of wrong flags by a factor of between 100 and 1,000. The figure is the company's own.
Mendenhall counted one habit by hand, for two writers he had already picked out. This program counts thousands of habits at once.
The known limits of AI detectors were found in the first design. The second design was built to defeat those limits.
Run Pangram on both passages
Each passage from the quiz has an empty dial. Run Pangram and the dial fills with its score.
With scripts off the dials show Pangram’s scores already.
Rain hammered the tent until each drop seemed to strike inside my skull. I sat with my knees drawn up, watching the thin walls shudder and bow beneath the wind. Water gathered along a seam, swelled into bright beads, then fell onto the corner of my sleeping bag. The air smelled of wet nylon, mud, and the wool of my socks. Whenever lightning flashed, the scattered boots and cooking pots appeared stark against the fabric, then vanished into gray. Thunder rolled through the ground beneath me. I pressed my palms around a cooling mug and counted the spaces between gusts. Gradually, the canvas stopped snapping. The rain softened to a steady patter, and somewhere beyond the entrance, water trickled over stones. I loosened my grip and stretched my cramped legs.
130 words
One summer blizzard is much like another. The temperature, never very low, rises, and you are not cold in the tent. Sometimes a blizzard is a very welcome rest: after weeks of hard pulling, dragging yourself awake each morning, feeling as though you had only just gone to sleep, with the mental strain perhaps which work among crevasses entails, it is most pleasant to be put to bed for two or three days. You may sleep dreamlessly nearly all the time, rousing out for meals, or waking occasionally to hear from the soft warmth of your reindeer bag the deep boom of the tent flapping in the wind, or drowsily you may visit other parts of the world, while the drifting snow purrs against the green tent at your head.
130 words
Pangram was right on both passages. Passage B has been on Project Gutenberg for years and may have been in Pangram’s training data. A correct result tells us less if the detector has already seen the passage.
Guarantee that human writing never gets flagged. In 2023 several AI detectors flagged the opening of the United States Constitution. Edward Tian built the AI detector GPTZero. He explained that AI models learn to write by reading an enormous pile of text, and the Constitution sits in that pile. An AI detector's simulator was therefore trained on the Constitution and would have picked much the same words. Pangram keeps a test on every release. The test blocks the release if the Declaration of Independence scores as AI-written.
A person writing plainly in a second language can be flagged as well. Plain, common words are the easiest words to guess, and a writer working in a second language tends to reach for them. In 2023 researchers ran seven AI detectors over 91 essays written for TOEFL. TOEFL is an English test taken by people whose first language is not English. The AI detectors flagged 61% of those essays. The same AI detectors flagged fewer than 10% of essays by American eighth-graders, who are about fourteen years old. When an AI detector goes wrong more often for one group of writers than for another, the pattern is called a bias.
A 2026 study asked whether the same bias appeared in Czech. The researchers looked at essays written in Czech, some by people who grew up speaking the language and some by people who did not. They found no such bias in the AI detectors they tested. In another 2026 study, researchers tested 16 AI detectors on English student essays. They found the bias in some of the AI detectors and none in the others. So the bias depends on the AI detector and on the language. A single flag on a second-language writer's essay is weak evidence. A teacher would need to ask which AI detector raised the flag and which essays that AI detector had been tested on.
Both failures came from AI detectors of the first design. Makers of the second design report no such bias in their own testing. Nobody outside those companies has checked the claim.
Give the chance that a flagged text was written by a person. An AI detector can be wrong in two ways. It can miss an AI-written text (a false negative), and it can flag a human-written text (a false positive). Each error rate describes the detector’s performance on a particular set of texts. Real rates differ by AI detector, by language and by the length of the text. Take a made-up AI detector that misses 10% of AI-written texts and flags 1% of human-written ones, and put it to work on the essays of a school.
sample rates for a made-up AI detector
| flagged | not flagged | |
|---|---|---|
| AI-written | 90% caught |
10% missed: the false negative rate |
| student-written | 1% wrongly flagged: the false positive rate |
99% cleared |
A teacher holding a flagged essay wants to know the chance that this essay was student-written. The false positive rate cannot give that chance. The chance depends on how many students cheated. Say 1 student in 100 cheats. Out of 10,000 essays, the AI detector flags 90 of the 100 AI-written ones and 99 of the 9,900 student-written ones. Just over half of those flags are wrong. If half the students cheat, the same AI detector's flags are nearly all right. The chart shows every share from none to 1 student in 5.
chance that a flagged essay was student-written
Nobody has published a count of how many essays in a school are AI-written. The nearest figure comes from Turnitin. Many universities use Turnitin to check student work for plagiarism and AI writing. In May 2023, Turnitin reported scanning 38.5 million papers. In 3.5% of those papers, its AI detector flagged at least 80% of the words as AI-written. That count comes from the AI detector itself, so the true share of AI-written papers could be higher or lower. If the true share were 3.5%, about 1 flag in every 4 from the made-up AI detector would land on a student-written essay.
Vanderbilt University sent 75,000 papers to Turnitin in 2022. Turnitin says its AI detector wrongly flags fewer than 1 student-written document in 100. One in a hundred of 75,000 is 750, so up to 750 student-written papers a year could be wrongly labelled. Vanderbilt published that calculation and turned the AI detector off in August 2023.
Turn a percentage score into the chance that a student cheated. Turnitin's percentage is the share of the words in one document that its AI detector scored as AI-written. The percentage counts words and carries no estimate of the chance that the student cheated. Turnitin says the number is less reliable below 20%. It also says its AI detector does not score documents shorter than 300 words.
Turnitin scores have started to turn up in court. In January 2026 a university in New York found a first-year student guilty of cheating. The university built its case on a Turnitin score of 100%. A New York court threw the finding out. The court said the evidence was thin. The court also found the hearing unfair: the university would not let anyone speak for the student, and the same official who found him guilty also decided his appeal. The court left open whether the score itself was right.
An AI model gives every word it could write next a probability. Suppose it has written "The weather today was cold and". It might put "grey" at 31%, "overcast" at 22%, "wet" at 14%, "dark" at 9% and "damp" at 6%, with the rest of the 100% spread thinly over every other word it could write. It then picks one at random in proportion to those numbers, so a word at 30% comes out about 3 times in 10. Where several words sit close together, the pick is nearly a coin toss. A reader will not care which of those words appears. A watermark changes the odds in picks like those.
The company that makes the AI model keeps a secret number called a key. Before choosing each next word, the model uses the key and the preceding text to work out a list of favoured words, called the green list. The probabilities of the words on that list go up a little and the probabilities of all other words go down a little. The model still picks at random, so any word can come out. Over a page of writing, though, the favoured words come out more often than they otherwise would. Each word has different words in front of it, so the green list is worked out again at every step.
The key steers a pick when the model has a real choice between words. In a sentence with one obvious next word, like "the capital of France is Paris", there is nothing for the key to steer.
the sentence so far
Later the company can run a checker over the text. The checker holds the same key. At each word, the checker uses the key and the preceding text to recreate the green list, then checks whether that word was on the list. In text without a watermark, nothing steered the picks, so about half the words land on the green list by chance. In watermarked text, far more words land on it.
The checker needs a good stretch of text before its count is reliable. In one case worked out in the green-list paper, a checker needs about 135 words to report a watermark that puts 65 of every 100 choices on the green list.
two passages, checked with the same key
The green list came from John Kirchenbauer and colleagues at the University of Maryland, who published it in January 2023. It is the simpler of the two. The other design, SynthID-Text, came from Google DeepMind and was published in the science journal Nature in October 2024. It works like a tournament. The model produces several possible next words and uses the key to pick the winner of each pair of words, until one word is left to write. Google was already using this design in Gemini when the Nature paper came out. Anthropic announced on 14 August 2026 that new Claude models would carry a version of this design, with older models to follow in the months after. Every candidate word in the tournament is one the model could have written anyway, so the sentence reads no differently.
| company and product | watermark | what is known |
|---|---|---|
| Google, Gemini | SynthID-Text, in use since before October 2024. Google alone can check for it. Google's public SynthID checker accepts images, video and audio. It does not accept text. | |
| Anthropic, Claude | A version of SynthID-Text, announced on 14 August 2026 for new Claude models, with older models to follow. Anthropic can check for it. So can approved organisations in a private preview. | |
| OpenAI, ChatGPT | Scott Aaronson built a design in 2022. It has never been switched on. | |
| Meta, Llama and Meta AI | None known. Meta has published research code and no product. | |
| xAI, Grok | None known. | |
| Microsoft, Copilot | ? | Not verified. |
| Mistral | ? | Not verified. |
| DeepSeek; Alibaba, Qwen; Moonshot, Kimi; ByteDance, Doubao; Baidu, Ernie | ? | Not verified. Chinese law has required a visible label on AI-written text since 1 September 2025. A label sits on the page for anyone to read, and a watermark is hidden in the word choices. |
Most text carries no watermark at all. OpenAI built a text watermark in 2022 and has never switched it on, so text from ChatGPT carries no watermark today. Some companies publish everything needed to run their models, so anyone can download a model and run it on their own computer. The program that writes the text adds the watermark, and whoever runs that program can leave the watermark switched off.
Editing weakens the watermark and does not reliably remove it. In one study of the green-list design, people rewrote watermarked texts heavily by hand. A checker could still find the watermark as long as it had about 800 tokens, or roughly 600 words of English, to work with. The 800-token figure is an average from that study. The study used one watermark design and a particular set of texts and human editors.
A watermark gives no measure of how much of the text a person wrote. Anthropic says a watermark "cannot distinguish 'Claude wrote this' from 'Claude heavily edited this.'"
No reader can run the check. Anthropic's checking tool is in a private preview. Approved organisations alone can use it: government bodies, news organisations, fact-checkers, researchers, schools and the like. Google's public SynthID checker and Gemini's built-in check accept images, video and audio. Neither accepts text.
A watermark can be faked. In a 2024 study, researchers picked a model that plants watermarks. They sent it question after question and roughly worked out what its key was doing. They then added that pattern to text the model had never written. Added to a person's own writing, the pattern would make that writing look AI-written. The researchers put the cost at under 50 dollars. They did this under test conditions, on the particular watermark designs they chose.
The third kind of evidence is a record of the writing as it happens. Google Docs keeps a version history, a log of every edit made to a document. Grammarly's Authorship feature, released in August 2024, sits inside the document while the writer works, and it marks each stretch of text as typed, pasted, or generated by AI.
what the writing software recorded for two essays
Essay A looks like honest work and Essay B looks like cheating. Both readings can be wrong.
An editing history shows how the words arrived and leaves out who thought of them. A student who pasted an essay in three pieces may have been moving text out of her own notes. A student who built an essay a few words at a time may have been reading an AI model's answer on a phone and typing it out by hand.
The record covers one document. Google Docs and Grammarly log what happens inside the document they run in. A draft written somewhere else and pasted in looks like a paste, whoever wrote it. An essay written on paper leaves no editing history at all.
A teacher who wants to know whether the student did the thinking still has to ask the student.
All three techniques have limits when a person and an AI model write together. Much writing now has two authors, a person and an AI model, mixed inside the same paragraph. That makes the question harder.
Read four sentences from one paragraph. Two of them are Mark Twain's, and an AI model wrote the other two. Pick the ones you think are Twain's, then separate Twain from the AI model. Notice what makes you lean one way, and whether you could put it into words.
When I was a boy, there was but one permanent ambition among my comrades in our village on the west bank of the Mississippi River. That was, to be a steamboatman. Other occupations enjoyed their little seasons of favor, but they faded whenever a packet rounded the bend and sent its whistle over the rooftops. Then every boy with a chore on his hands discovered urgent business at the landing, and arrived there with a speed he never displayed on his employer's account.
With scripts off the sentences do not respond to a click. The answer is below.
The first two sentences are Twain's, the opening of chapter 4 of Life on the Mississippi, published in 1883. The last two were written for this essay on 10 September 2026 by OpenAI GPT-6 Astra Light. The request was Twain's two sentences plus the instruction "Continue this paragraph in the same voice for two sentences. No dashes." Nothing was edited afterwards.
The AI model was asked to continue Twain's paragraph, so its two sentences come last. Anyone who guessed that the machine's part would come at the end scored full marks.
Next, the sentences of Passage A and Passage B were shuffled together into one paragraph of 260 words, with 130 words from each writer.
Run Pangram on the mixed paragraph
Pale green marks Cherry-Garrard’s sentences and pale red marks the AI model’s. Run Pangram to see how it scored each sentence.
With scripts off Pangram’s scores show already, in the second card.
One summer blizzard is much like another. Rain hammered the tent until each drop seemed to strike inside my skull. I sat with my knees drawn up, watching the thin walls shudder and bow beneath the wind. Water gathered along a seam, swelled into bright beads, then fell onto the corner of my sleeping bag. The temperature, never very low, rises, and you are not cold in the tent. Sometimes a blizzard is a very welcome rest: after weeks of hard pulling, dragging yourself awake each morning, feeling as though you had only just gone to sleep, with the mental strain perhaps which work among crevasses entails, it is most pleasant to be put to bed for two or three days. The air smelled of wet nylon, mud, and the wool of my socks. Whenever lightning flashed, the scattered boots and cooking pots appeared stark against the fabric, then vanished into gray. You may sleep dreamlessly nearly all the time, rousing out for meals, or waking occasionally to hear from the soft warmth of your reindeer bag the deep boom of the tent flapping in the wind, or drowsily you may visit other parts of the world, while the drifting snow purrs against the green tent at your head. Thunder rolled through the ground beneath me. I pressed my palms around a cooling mug and counted the spaces between gusts. Gradually, the canvas stopped snapping. The rain softened to a steady patter, and somewhere beyond the entrance, water trickled over stones. I loosened my grip and stretched my cramped legs.
Cherry-Garrardthe AI model
260 words
One summer blizzard is much like another.
wrongRain hammered the tent until each drop seemed to strike inside my skull. I sat with my knees drawn up, watching the thin walls shudder and bow beneath the wind. Water gathered along a seam, swelled into bright beads, then fell onto the corner of my sleeping bag. The temperature, never very low, rises, and you are not cold in the tent. Sometimes a blizzard is a very welcome rest: after weeks of hard pulling, dragging yourself awake each morning, feeling as though you had only just gone to sleep, with the mental strain perhaps which work among crevasses entails, it is most pleasant to be put to bed for two or three days.
rightThe air smelled of wet nylon, mud, and the wool of my socks. Whenever lightning flashed, the scattered boots and cooking pots appeared stark against the fabric, then vanished into gray.
wrongYou may sleep dreamlessly nearly all the time, rousing out for meals, or waking occasionally to hear from the soft warmth of your reindeer bag the deep boom of the tent flapping in the wind, or drowsily you may visit other parts of the world, while the drifting snow purrs against the green tent at your head. Thunder rolled through the ground beneath me. I pressed my palms around a cooling mug and counted the spaces between gusts. Gradually, the canvas stopped snapping. The rain softened to a steady patter, and somewhere beyond the entrance, water trickled over stones. I loosened my grip and stretched my cramped legs.
rightscored as humanscored as AIright or wrong: against the true writer
Pangram got 11 of the 14 sentences right and correctly labelled the paragraph Mixed. This example combines unchanged sentences from a person and an AI model; it does not test what happens when they revise the same sentences.
In September 2026 The Economist ran Pangram over a year of speeches by British MPs, and Pangram flagged more than three quarters of one MP's text as AI-written or AI-assisted. Some governments now require by law that AI-written text be labelled. Since 2 August 2026 the European Union has had a rule about text that is published to inform the public, in news reporting for example. If an AI model wrote that text, whoever publishes it has to say so. A named editor is someone whose name appears on the piece. The rule stops applying once a named editor has reviewed the text and takes responsibility for it. A second rule applies to the makers of AI models. They must watermark AI-written text in a way that software can find, and Claude's text is getting a watermark because of that rule. China requires a visible label on AI-written text that could mislead. Most other countries leave text out of their labelling rules. The United States has no national rule of this kind. Anthropic is applying the watermark everywhere in the world. Anthropic's stated reason is that it has no reliable way to limit the watermark to one part of the world.
Superusers
Britain, top ten MPs by % of text in parliamentary speeches* flagged by Pangram as AI-written or -assisted, Sep 2025-Sep 2026
Figure 5. *In House of Commons and Westminster Hall, among MPs who have given at least ten speeches in the period
Sources: Hansard; TheyWorkForYou; Pangram; The Economist
Redrawn from The Economist, 23 September 2026. Bar lengths are read off its chart.
Humanizers rewrite AI text with the aim of getting it past detectors. Undetectable AI claims more than 24 million users and charges between 10 and 42 dollars a month. One popular free humanizer is the rule list from blader/humanizer, a GitHub project. The list holds 25 editing rules, and more than 48,000 people have marked it as useful. That free list was assembled from "Signs of AI writing", a Wikipedia page written to help people spot AI writing.
On 24 September 2026 an AI model applied the blader/humanizer rule list to Passage A and the mixed paragraph. The AI model took out long words and split long sentences.
Humanize, then run Pangram
Humanize each text to see its blader/humanizer rewrite, then run Pangram on that rewrite.
With scripts off each rewrite and its score show already.
Rain hammered the tent until each drop seemed to strike inside my skull. I sat with my knees drawn up, watching the thin walls shudder and bow beneath the wind. Water gathered along a seam, swelled into bright beads, then fell onto the corner of my sleeping bag. The air smelled of wet nylon, mud, and the wool of my socks. Whenever lightning flashed, the scattered boots and cooking pots appeared stark against the fabric, then vanished into gray. Thunder rolled through the ground beneath me. I pressed my palms around a cooling mug and counted the spaces between gusts. Gradually, the canvas stopped snapping. The rain softened to a steady patter, and somewhere beyond the entrance, water trickled over stones. I loosened my grip and stretched my cramped legs.
130 words
Rain hit the tent hard enough that I felt each drop in my head. I sat with my knees pulled up to my chest. The thin walls shuddered and bowed in the wind. Water gathered along a seam above me and hung there in beads. One after another they dropped onto the corner of my sleeping bag. The air smelled of wet nylon and mud. Under that was the wool of my socks. When lightning flashed I saw the boots and the cooking pots lying where I had left them, black against the wall. Then the gray came back. Thunder came up through the ground under me. I held a mug that had gone cold and counted the gaps between the gusts. The snapping of the nylon slowed, then stopped. The rain settled into a steady patter. Outside the entrance I could hear water running over stones. I loosened my hands and stretched out my legs. They had cramped from sitting.
161 words
One summer blizzard is much like another. Rain hammered the tent until each drop seemed to strike inside my skull. I sat with my knees drawn up, watching the thin walls shudder and bow beneath the wind. Water gathered along a seam, swelled into bright beads, then fell onto the corner of my sleeping bag. The temperature, never very low, rises, and you are not cold in the tent. Sometimes a blizzard is a very welcome rest: after weeks of hard pulling, dragging yourself awake each morning, feeling as though you had only just gone to sleep, with the mental strain perhaps which work among crevasses entails, it is most pleasant to be put to bed for two or three days. The air smelled of wet nylon, mud, and the wool of my socks. Whenever lightning flashed, the scattered boots and cooking pots appeared stark against the fabric, then vanished into gray. You may sleep dreamlessly nearly all the time, rousing out for meals, or waking occasionally to hear from the soft warmth of your reindeer bag the deep boom of the tent flapping in the wind, or drowsily you may visit other parts of the world, while the drifting snow purrs against the green tent at your head. Thunder rolled through the ground beneath me. I pressed my palms around a cooling mug and counted the spaces between gusts. Gradually, the canvas stopped snapping. The rain softened to a steady patter, and somewhere beyond the entrance, water trickled over stones. I loosened my grip and stretched my cramped legs.
260 words
One summer storm is much like another. Rain hammered the tent until each drop seemed to strike inside my skull. I sat with my knees drawn up and watched the thin walls shudder and bow under the wind. Water gathered along a seam, swelled into bright beads, then fell on the corner of my sleeping bag. The temperature rises in a storm like that, so the tent stayed warm enough. Sometimes a storm is a welcome rest. I had pulled hard for weeks. Every morning I dragged myself awake feeling as though I had only just gone to sleep, and the work among the crevasses wore on my mind. Two or three days of being sent to bed was a pleasure. The air smelled of wet nylon and of the wool of my socks. When the lightning flashed, the boots and pots lying about showed sharp against the fabric, then went back into gray. Thunder rolled through the ground under me. I held a cooling mug in both hands and counted the gaps between the gusts. Most of the time I slept without dreaming. I roused out for meals. Once or twice I woke in the warmth of the bag and heard the deep boom of the tent flapping in the wind, and once I drifted half awake through other parts of the world while the rain purred against the fabric by my head. The canvas stopped snapping. The rain settled into a steady patter, and past the entrance water ran over stones. I loosened my grip on the mug and stretched my cramped legs.
265 words
one of Cherry-Garrard's sentences, before and after the rewrite
You may sleep dreamlessly nearly all the time, rousing out for meals...
Most of the time I slept without dreaming. I roused out for meals.
This basic humanizer did not get past Pangram. Both rewrites scored 100% AI.
Passage A scored the same after its rewrite. An AI model rewrote a paragraph that an AI model had written, so the result was still AI writing. In the mixed paragraph the AI model replaced Cherry-Garrard’s sentences with its own paraphrase of them. Pangram also flagged the model’s paraphrases of Cherry-Garrard as AI-written.
The blader/humanizer rule list is a mild humanizer. Its rules make prose read more plainly, and an AI detector trained on examples flags the result anyway.
The paid services are built to defeat AI detectors. In an independent test posted in August 2026, one of them worked. Researchers at Notre Dame put AI-written abstracts through it, and fewer than 4 in 100 stayed flagged by Pangram. The researchers also found that a human abstract given a light polish by an AI model was flagged as AI-written between 38 and 80 times in 100. The rate depended on the field. In the researchers' own words, honest AI editing carries a higher risk of being punished than paid evasion does.
Both of those figures came from an older version of Pangram. The independent tests cited here do not tell us how paid humanizers perform against the latest detectors.
Pangram then retrains against the humanizers it finds. Pangram reports that it catches nearly all the text from thirteen humanizer services. The company measured that figure on its own set. Its chief executive puts Pangram's catch rate at 50 to 70 percent against a humanizer it has not trained on.
Cat and mouse game between detectors and humanizers
With scripts off every move shows at once.
Detectors like Pangram
Humanizers
Humanizer makers keep releasing new tools and Pangram retrains on the ones it finds, so the exchange continues after the last box.
Pangram caught the AI-written passage in the opening quiz. When human and AI sentences were mixed together, it identified eleven of fourteen correctly. Those results are useful. They also show why a detector’s answer needs interpretation: it can recognise a mixed paragraph and still accuse the wrong sentence.
Each technique gives us different evidence. A detector judges the finished words. A watermark can reveal a model’s involvement, including when it edited someone’s writing. An editing history records how the words reached the page. None gives a complete account of who did the thinking.
Humanizers make that uncertainty harder to resolve. Detectors learn to catch their rewrites, and humanizers change again. The independent tests cited here cannot tell us which tools are ahead today. When authorship matters, a score should start a closer look. Read the work, examine the drafts, and ask the writer to explain their choices.
Who wrote a text is a question about the past. Soon most of what you read will have passed through a machine somewhere. The question that will still matter is whether it is true.
No one source counts how much writing goes through every AI detector and humanizer. The nearest measure is visits to each service's website, which the traffic firm Similarweb estimates every month.
estimated visits in August 2026
AI detectors
Turnitin is missing from the list. Its AI detector runs inside school coursework software, and Turnitin says it works with more than 16,000 institutions. Turnitin also says over 200 million papers had gone through its AI detector by April 2024.
Humanizers
Walter Writes AI, the humanizer a reporter used to get AI text past Pangram in May 2026, drew 843K. The rule list blader/humanizer has no website to visit.
In a peer-reviewed study published in June 2026, researchers ran forty papers written entirely by an AI model through Turnitin, GPTZero, Copyleaks and Pangram. Turnitin scored every one of them as human. Pangram flagged thirty-nine.
ACL, EACL and ICML are academic conferences where researchers present work. Other researchers have reviewed that work first. Arxiv.org is a site where researchers post papers, sometimes before other researchers have reviewed them. A doi is a permanent address for a published paper.
In 1887 Mendenhall counted word lengths. In August 2026 a European rule on watermarking AI-written text began to apply. About 140 years separate the two dates.
T. C. Mendenhall counts how many words of each length Dickens and Thackeray use. He draws the counts as curves.
Alan Turing proposes the imitation game. A judge has to decide, from typed messages alone, which of two hidden writers is the machine.
Frederick Mosteller and David Wallace count small words in the disputed Federalist Papers and give all twelve to James Madison.
Joseph Weizenbaum publishes ELIZA, a program of about 200 lines that answers a person by turning their words back into questions. People treat ELIZA as though it understands them.
Mikhail Atallah and colleagues publish the first watermark for written text. The watermark sits in changes made to the grammar of some sentences. Rewrite those sentences and the watermark is gone.
Two tools arrive that work like the AI detectors in section 1. GLTR colours each word by how easy it was to guess. OpenAI's AI detector for GPT-2 catches about 95% of GPT-2's text.
ChatGPT is released on the 30th. Two days earlier Scott Aaronson had described a watermark for ChatGPT. He designed it while working at OpenAI.
The green-list watermark is published. A week later OpenAI releases an AI detector for any model. It catches 26% of AI-written text and wrongly flags 9% of human text.
OpenAI withdraws that AI detector 171 days after launching it, "due to its low rate of accuracy".
Vanderbilt turns Turnitin's AI detector off and publishes the arithmetic behind the decision.
Google publishes the design of SynthID-Text, the watermark running in Gemini, in the journal Nature.
China's labelling rules take effect. They require a visible label on AI-written text where it could mislead.
A New York court throws out a university's finding against a student. The finding had rested on an AI detector score of 100%.
The European rule requiring a watermark on AI-written text starts applying on the 2nd. On the 14th Anthropic announces that new Claude models will carry a watermark.
Back to Artificial Minds.