The Courtroom Trial of Pixels: Robust Image Manipulation Localization via Adversarial Evidence and Reinforcement Learning Judgment

arXiv cs.CV / 4/17/2026

📰 NewsModels & Research

Key Points

  • The paper argues that many image manipulation localization (IML) approaches treat authenticity-related supervision only as an auxiliary training signal, failing to explicitly model “evidence” that contrasts manipulated vs. authentic regions.
  • It proposes a courtroom-style adjudication framework with three components—a prosecution stream, a defense stream, and a judge model—that performs evidence confrontation for manipulation and authenticity using a dual-hypothesis segmentation architecture.
  • The prosecution and defense streams generate evidence through cascaded multi-level fusion, bidirectional disagreement suppression, and dynamic debate refinement, guided by edge priors to better handle subtle or degraded traces.
  • A reinforcement learning–based judge model strategically re-infers and refines uncertain areas, producing a final manipulated-region mask, with training using advantage-based rewards and a soft-IoU objective.
  • Experiments on image datasets show improved average performance over state-of-the-art IML methods, with reliability calibration based on entropy and cross-hypothesis consistency.

Abstract

Although some existing image manipulation localization (IML) methods incorporate authenticity-related supervision, this information is typically utilized merely as an auxiliary training signal to enhance the model's sensitivity to manipulation artifacts, rather than being explicitly modeled as localization evidence opposing the manipulated regions. Consequently, when manipulation traces are subtle or degraded by post-processing and noise, these methods struggle to explicitly compare manipulated and authentic evidence, resulting in unreliable predictions in ambiguous areas. To address these issues, we propose a courtroom-style adjudication framework that regards IML task as the confrontation of evidence followed by judgment. The framework comprises a prosecution stream, a defense stream, and a judge model. We first build a dual-hypothesis segmentation architecture on a shared multi-scale encoder, in which the prosecution stream asserts manipulation and the defense stream asserts authenticity. Guided by edge priors, it produces evidence for manipulated and authentic regions through cascaded multi-level fusion, bidirectional disagreement suppression, and dynamic debate refinement. We further develop a reinforcement learning judge model that performs strategic re-inference and refinement on uncertain regions, yielding a manipulated-region mask. The judge model is trained with advantage-based rewards and a soft-IoU objective, and reliability is calibrated via entropy and cross-hypothesis consistency. Experimental results show that our model achieves superior average performance compared with SOTA IML methods.