Google just published a paper on how it detects AI slop at industrial scale. The most important thing in it has almost nothing to do with whether content is created by AI or not.
The system Google describes decides what to remove based on coordination: whether a piece of content belongs to a cluster of accounts mass-producing the same templated material to game a platform. That design choice matters more than any ranking tweak this year, because it starts to close the content arbitrage that has funded SEO, and lately AEO, for the better part of three years.
Here’s the short version: the criteria for judging search enforcement has changed. For years, it graded the artifact (the individual page or video), and you optimized that artifact to pass the test. Now, it grades the behavior behind the artifact: the coordination, the velocity, the templating, the shared fingerprint across a network of accounts.
When a content cluster looks like a coordinated AI slop operation, Google terminates the whole cluster. If your growth strategy runs on volume, this shift makes you a liability. If it runs on substance, original data, real expertise, or a point of view that a model can’t generate on its own, you’re already building the only thing that survives.
Let’s walk through what the paper says, why the shift matters more than the mechanics, and what it means for how you show up in Google, ChatGPT, and every answer engine in between.
The Scalable Cluster Termination System: What Google Built
The paper is called “Scalable Detection of Adversarial Synthetic Slop and Coordinated Media Abuse.” The system is named S-CTS, the Scalable Cluster Termination System, and Google says it’s deployed at a major online video platform. Read: YouTube. The research is about video, but Google’s own text-detection methods run through it, and the researchers are explicit that the same cluster-level logic could extend to web content spam.
The design is the interesting part. Traditional moderation looks at one piece of content at a time and asks if it breaks a rule. That approach fails against generative AI, because a bad actor can spin up infinite unique variations of the same garbage, each one different enough to slip past a filter grading individual items. So Google inverted the problem. Instead of judging content one video at a time, the system looks for the organizational structure of the attack, the mass reuse of a specific semantic narrative template, rather than evaluating isolated videos one by one.
It runs on two signals working together:
- A coordinated bot-net detector that clusters accounts by shared infrastructure and inorganic behavior: the same publishing scripts, the same upload pacing, the fingerprints that betray a single actor running many accounts.
- A synthetic pattern classifier that scores the content for known tells of mass generation: templated narratives, repeated semantic structures, the statistical residue of a model producing the same thing over and over.
When a high share of accounts inside one infrastructure cluster are pushing the same generative template, Google terminates every account in the cluster at once.
The enhancement layer is where it shifts into a modern approach. Google adapts a lightweight version of Gemini using LoRA and automatic prompt optimization, so when attackers switch generative models like Sora or Kling, Google retrains a small detection adapter instead of rebuilding a dense model from scratch. The economics matter here. Detection now adapts as fast as generation does. Google frames the work as production research built on operational data spanning a six-month period. The paper reports cutting review turnaround by one-third to one-half compared to human baselines, auto-enforcement precision in the low-to-mid 90s, and an overturn rate of under 1%. Those are the numbers of a system already running against real traffic.
There are two more key details every marketer should sit with. First, Google built in a deliberate safeguard: the cluster requirement exists specifically to avoid penalizing individual creators experimenting with AI, and the system is tuned for precision over recall so it doesn’t nuke a solo artist using new tools. The line Google is drawing separates legitimate creative use from coordinated, adversarial slop. Whether it’s human- or machine-generated is beside the point. Second, there’s a companion paper describing a multi-agent forensics system that uses adapted LLMs to detect existing policy violations and “spirit of the policy” violations. Read that twice. Google is training models to catch the intent to game the system, not just the mechanics of it. Every loophole play just got a shorter shelf life.
Enforcement Moved From the Artifact to the Behavior
Strip away the architecture and one thing changed. For two decades, search enforcement graded the artifact. Is this page thin? Is this title keyword-stuffed? Is this link paid? You optimized the artifact to pass the test. The whole SEO game, and much of the early AEO game, was artifact optimization.
S-CTS grades the behavior. The unit of judgment is no longer the page or the video. It’s the pattern across your properties: the coordination, the velocity, the templating, the shared fingerprint. It also follows the direction Google has been moving its public search policy for two years.
Google’s scaled content abuse policy, folded into core ranking since 2024, defines the violation by intent and outcome rather than production method: generating many pages primarily to manipulate rankings, with little or no value for users. Human-written thin content is covered the same as AI-written thin content. Google’s own search liaison put the stance plainly: they’re not anti-AI, they’re anti-crap. And the enforcement has teeth. The March 2026 core update named scaled content abuse as a primary target, and sites publishing AI pages at scale saw 50% to 80% of their organic traffic disappear in two weeks.
The paper is the enforcement arm of that policy philosophy, built for the medium where slop is hardest to catch. And it names what triggers enforcement: coordination. What puts you at risk is the shape of your whole operation, not the quality of any single page. Google has said as much about the web already: creating multiple sites to disguise scaled content generation is explicitly prohibited, and Google examines patterns across properties, similar spam signals, content reuse, templated structures, and link clusters, to reveal coordinated abuse. Your private blog network, your doorway pages, your farm of AI-generated social accounts, your 50 near-identical location pages: the pattern is the liability, and the pattern is exactly what these systems are built to see.
The AI Slop Ceiling Is Already Here
The web is already drowning in AI content, and it’s already failing.
By late 2024, more than half of new web articles were generated primarily by AI, up from about 5% before ChatGPT. “Slop” was Merriam-Webster’s word of the year, with mentions of the term up ninefold over the prior year. And yet, when you look at what actually gets surfaced, the picture flips. Only about 14% of top-ranking Google results are AI-generated, and among AI assistants like ChatGPT and Perplexity the split is roughly 82% human to 18% AI. The supply is over 50%. The reward is 14% to 18%. That gap is the slop ceiling, and it means retrieval already discriminates against mass-produced content, hard, before any of this new enforcement kicks in.
So sit with the two forces. Answer engines already under-cite slop because it degrades their answers; a model that cites garbage gives a worse response, and every lab knows it. Now Google is industrializing active removal of the coordinated version of that garbage. The arbitrage is closing from both ends at once. The demand side won’t cite you. The supply side will terminate you. Producing content that any model could generate from a generic prompt was always a weak position, and now it’s a shrinking one with a trapdoor under it.
Google Is Telling You Two Things at Once
There’s a second Google document worth reading right next to the paper. Google’s official guidance on optimizing for AI search, a page it last updated two days before I wrote this, calls AEO and GEO “still SEO” and names tactics site owners can ignore for Google Search: llms.txt files, content chunking, AI-specific rewriting, special markup, and chasing inauthentic mentions. Set next to a paper about hunting slop, that reads like a contradiction. Read together, though, the two documents make the same argument from opposite ends.
The slop paper says the gameable end of one market, mass production, is dead; Google will remove it. The mythbusting guidance says the gameable end of the other market, micro-hacks and special files, is dead too; Google won’t reward it. One kills volume. The other kills tricks. Both point at the same survivor: genuinely useful, credible, original content. Google’s own line is that creating content people find unique, compelling, and useful will influence your presence in generative AI search more than any of the tactics it tells you to skip.
Here’s where I think Google is right: llms.txt and chunking-as-a-hack won’t save thin content, and no file or markup can rescue a page with nothing to say. The substance has to be there first. I’ve argued a version of this for a while, and the data agrees.
Here’s where I think Google is being self-serving: when it tells you AEO is “just SEO,” it’s describing its own surfaces and asking you to treat its view of the web as the only view. ChatGPT, Perplexity, Claude, Meta AI, and Copilot are not Google Search, and that guidance doesn’t settle anything for non-Google AI platforms, which may weight signals differently. We see it directly in the data. Citation behavior varies sharply by platform; the sources that dominate answers on one surface barely register on another; partnerships and content deals shape what gets retrieved where. “Optimizing for AI search is optimizing for the Google search experience” is true for Google and incomplete for everyone else. The job is to build the source every one of these systems wants to cite, then make sure each of them can actually retrieve it.
What Actually Survives The AI Slop Era
If volume dies and tricks die, what’s left is the boring, expensive, durable stuff. This is where the constructive playbook lives, and it’s the opposite of a content factory.
Start with what AI actually rewards. Across more than two million prompts and six leading models, the factors that top our AEO research are content relevance, content quality and depth, and credibility and trust, while raw social signals and search ranking position sit at the bottom of the table. The signal is consistent: substance and trust carry you; mechanics don’t. As the framing goes, models don’t rank pages, they assemble answers, and your job is to be the easiest, most credible piece to fetch, verify, and synthesize. A templated page is hard to trust and easy to flag. A page with a real number, a real method, and a real author is easy to cite and safe to keep. It shows up in the data too: brands see a meaningful lift in topical authority when they add peer-reviewed citations to their content.
Which points at the one moat that compounds: original contribution. Proprietary data nobody else has. A framework that gives people a new way to see a problem. First-hand experience a model can’t synthesize from three existing pages. This is the net information gain test, and it’s now doing double duty. It earns the citation, and it proves you’re a source rather than a slop cluster. The same quality that gets you retrieved is the quality that keeps you from getting removed.
Treat your content operation as one system, not four. The brands winning AI search run AEO, SEO, PR, and social media together, because retrieval pulls from all of them. Your earned coverage, your Reddit and YouTube presence, your structured pages, they’re one source graph now, and the coordinated-slop lens judges the whole thing. Distributed, distinctive, credible presence is the safe pattern; centralized, templated, mass-produced presence is the flagged one.
What This Means for Marketing
Zoom out and this is bigger than SEO or AEO. The last three years ran on a simple arbitrage: AI made content nearly free to produce, so the move was to flood every channel and capture cheap attention before the platforms caught up. That window is closing. While AI content is not getting banned, the cost of detecting and discounting low-value content is dropping as fast as the cost of producing it. When production is free and detection is cheap, volume stops being an edge and becomes a tell.
The content factory survives, but its logic inverts. AI goes back to being leverage on top of the writer, the analyst, and the strategist, rather than a replacement for them. The teams that win use it to move faster on work grounded in judgment, expertise, and data they own. The teams that lose use it to strip the judgment, expertise, and data out, and ship average work at scale. Average was always the risk. Now it’s the thing getting terminated.
Google just published the blueprint for how it separates the two. Coordination is what gets you flagged. Contribution is what gets you cited. Build the source worth citing, and the same work that earns you the answer keeps you out of the cluster.
The AI slop era made content free to produce and worthless to own. The next one rewards the exact opposite. Plan accordingly.
The Questions You’re Going to Ask
Does this mean I should stop using AI to make content?
No. The system is built to protect individual creators using AI and to catch coordinated operations mass-producing it. Using AI as leverage on work grounded in your own data, expertise, and judgment is safe and smart. Using it to publish the average at scale is the risk.
Does this apply to websites or only to video?
The paper covers a video platform, but Google’s text-detection methods run through the same system, and the researchers say the cluster logic could extend to web content spam. Google’s scaled content abuse policy already enforces the same behavior-based standard across Search. Treat it as the direction of travel for everything.
Will this hit my site if I publish a lot?
Volume alone isn’t the trigger; coordination, templating, and low value are. A site with thousands of pages can be fine if each offers unique, genuinely useful detail; the problem starts with cookie-cutter pages that differ only in surface variables. A large site sharing one generative fingerprint is the target.