How to Watermark Your AI-Generated Code for Compliance

// @ai-generated: claude-3-7-sonnet | 2026-02-28 | prompt: "write a debounce utility"
// @ai-reviewed: true | reviewer: mark
function debounce<T extends (...args: unknown[]) => void>(fn: T, delay: number): T {
  let timer: ReturnType<typeof setTimeout>;
  return ((...args: unknown[]) => {
    clearTimeout(timer);
    // Delay execution until user stops triggering — prevents rapid re-renders
    timer = setTimeout(() => fn(...args), delay);
  }) as T;
}

git commit -m "Add debounce utility

Implements debounce for search input to prevent excessive API calls.

Ai-Generated: claude-3-7-sonnet
Ai-Reviewed: true
Reviewer: mark
Prompt-Summary: write a debounce utility with typescript generics"

# Find all commits with AI-generated code
git log --grep="Ai-Generated:" --oneline

# Count AI-assisted commits in the last 90 days
git log --since="90 days ago" --grep="Ai-Generated:" --oneline | wc -l

# .git/hooks/commit-msg
#!/bin/bash

COMMIT_MSG=$(cat "$1")

if echo "$COMMIT_MSG" | grep -q "@ai-generated\|Ai-Generated:"; then
  if ! echo "$COMMIT_MSG" | grep -q "Ai-Reviewed:"; then
    echo "Error: AI-generated commits require 'Ai-Reviewed:' trailer."
    echo "Add: Ai-Reviewed: true|false"
    exit 1
  fi
fi

exit 0

chmod +x .git/hooks/commit-msg
npm install --save-dev husky
npx husky init
cp .git/hooks/commit-msg .husky/commit-msg

# .github/workflows/ai-compliance.yml
name: AI Compliance Check

on: [pull_request]

jobs:
  check-ai-watermarks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Check changed files for unwatermarked AI patterns
        run: |
          CHANGED=$(git diff --name-only origin/main...HEAD | grep -E '\.(ts|tsx|js|jsx)$')
          
          MISSING=0
          for FILE in $CHANGED; do
            if grep -q "// TODO\|// FIXME\|// Generated" "$FILE"; then
              if ! grep -q "@ai-generated\|Ai-Generated" "$FILE"; then
                echo "⚠️  Possible unwatermarked AI code: $FILE"
                MISSING=$((MISSING + 1))
              fi
            fi
          done
          
          if [ $MISSING -gt 0 ]; then
            echo "Found $MISSING file(s) with possible unwatermarked AI code."
            echo "Add @ai-generated headers or confirm the code is human-written."
            exit 0  # Change to exit 1 to block merge
          fi

# Output CSV of all AI-assisted commits
git log --grep="Ai-Generated:" \
  --pretty=format:"%h,%ad,%an,%s" \
  --date=short > ai-code-audit.csv

import subprocess, csv

result = subprocess.run(
    ["git", "log", "--grep=Ai-Generated:", "--format=%H%n%ad%n%an%n%B%n---END---"],
    capture_output=True, text=True
)

with open("ai-audit-full.csv", "w", newline="") as f:
    writer = csv.writer(f)
    writer.writerow(["hash", "date", "author", "model", "reviewed", "reviewer"])
    
    for block in result.stdout.split("---END---"):
        lines = [l.strip() for l in block.strip().splitlines() if l.strip()]
        if not lines:
            continue
        
        entry = {"hash": lines[0], "date": lines[1], "author": lines[2]}
        for line in lines[3:]:
            if line.startswith("Ai-Generated:"):
                entry["model"] = line.split(":", 1)[1].strip()
            elif line.startswith("Ai-Reviewed:"):
                entry["reviewed"] = line.split(":", 1)[1].strip()
            elif line.startswith("Reviewer:"):
                entry["reviewer"] = line.split(":", 1)[1].strip()
        
        writer.writerow([
            entry.get("hash",""), entry.get("date",""), entry.get("author",""),
            entry.get("model",""), entry.get("reviewed",""), entry.get("reviewer","")
        ])

print("Report written to ai-audit-full.csv")

# How many AI-assisted commits do you have?
git log --grep="Ai-Generated:" --oneline | wc -l

# Do all of them include the Ai-Reviewed field?
git log --grep="Ai-Generated:" --format="%B" | grep -c "Ai-Reviewed:"