The watermark is contained in the choice of output tokens. If you exert so much editorial control that Claude has no meaningful freedom in choosing tokens, then

The watermark is contained in the choice of output tokens. If you exert so much editorial control that Claude has no meaningful freedom in choosing tokens, then it's going to fail to watermark the text, unless the text is _very_ long (in which case even a very low-bit-rate watermark will eventually accumulate enough bits to be positive.)