i did some experiments on an image that only had a small change a bit ago. in image 3 you can see the diff between the two images, and in image 4 you can see all the pertubations amplified with large changes removed. i believe image 4 is the shape of the watermark it put on image 2