Routing logs leak multi-agent policies: hiding a watermark in equivalent decisions survives 90% log erasure
Multi-agent routing policies can be cloned from execution logs, and a watermark that leaves model parameters and generated outputs untouched hides ownership signals in functionally equivalent rerouting decisions, remaining verifiable after up to 90% of logs are erased across four routing benchmarks.