Speech and audio
Text-to-Audio and Music Generation
Explain generative audio pipelines using codecs, language models, diffusion, conditioning, music structure, evaluation, and governance.
By the end you can
- Define text-to-audio and music generation as an operational problem with explicit inputs, outputs, and boundaries
- Distinguish autoregressive token generation, diffusion generation, and source-conditioned editing without treating them as interchangeable
- Trace the workflow from define the generation contract through evaluate and govern
- Evaluate text-to-audio and music generation using human quality and prompt-adherence judgments and evidence from difficult deployment slices
Example
Below 0.2%: what a memorization check actually measures
MusicLM was trained on five million audio clips — 280k hours of music at 24 kHz. Google published it in January 2023, and the paper did not stop at how the output sounded. It ran a separate memorization study on the semantic-token stage. It reported a number: “We observe that the fraction of exact matches always remains very small (<0.2%), even when using a 10 second prompt to generate a continuation of 5 seconds.”
Look at what that sentence is made of. A rate. At a stated prompt length, for a stated continuation length, measured at one named stage of the pipeline. None of it comes from listening. The same paper released a different instrument for a different question. MusicCaps is an evaluation set of 5,521 ten-second music clips, each labelled with an aspect list and a free-text caption written by musicians. That one asks whether the model did what the text asked.
Two questions, two instruments, two numbers. A panel rating quality and prompt adherence against 5,521 captions has been given no way to produce an exact-match rate. The 0.2% figure has nothing to say about whether the audio was any good. Neither instrument touches the third question: whether anyone holds the rights to what came out. That one leaves the lab entirely.
- The subject spans codecs, language models, diffusion, conditioning, music structure, evaluation and governance. MusicLM shows that each of those parts reports on a different sheet of paper.
- The failure named first for this subject is prompt labels encouraging imitation of living artists or identifiable voices — the one label that neither a caption set nor an exact-match rate is looking at.
- The evidence anyone thinks to collect is human quality and prompt-adherence judgments, the MusicCaps kind: 5,521 ten-second clips with an aspect list and a musician's caption apiece. It is a real instrument, and it cannot return a replication figure.
- The practical response is to push prompts to their edges, using conflicting, long, precise and impossible ones — and, as MusicLM did, to state the prompt length the memorization number was measured at.
Case
24 June 2024: the labels sued Suno and Udio, and then settled label by label
The rights question does not stay inside a review for long. It arrived as litigation, on a date. Universal, Sony and Warner sued Suno and Udio on 24 June 2024. The RIAA announced the two filings: one against Suno in the District of Massachusetts, the other against Uncharted Labs, which operates Udio, in the Southern District of New York. The complaints allege that both services trained on copyrighted sound recordings without permission. They point to generated audio said to reproduce melodies and phrases from released records.
Notice what is being argued over. The evidence in dispute is training data and output similarity, not audio quality. A listener panel cannot answer either question.
Notice, too, how the dispute has actually been resolving: label by label, into licensing rather than verdicts. Universal Music Group and Udio settled on 29 October 2025 and announced strategic agreements the same day. Their joint press release put it this way: “Universal Music Group (UMG), the world leader in music-based entertainment, and Udio, an AI-powered music creation platform, today announced industry-first strategic agreements, under which the companies settled copyright infringement litigation and will collaborate on an innovative, new commercial music creation, consumption and streaming experience.” The platform is to launch in 2026, powered by generative AI 'trained on authorized and licensed music'. Warner Music Group settled with Suno on 25 November 2025. TechCrunch reported the terms in the label's own words: “WMG's artists and songwriters will also have full control over whether and how their names, images, likenesses, voices, and compositions are used in new AI-generated music.”
Neither case has ended outright. Sony Music has settled with neither company, and UMG's suit against Suno was still live in mid-2026. But the two settlements name their price in the same two currencies: licensed training data, and consent from named artists over voice and likeness. Not one clause of either is about how the audio sounds.
Analogy
Commissioning an improvising studio ensemble
So what would it take to answer those questions in advance? A studio ensemble handed a description will improvise a plausible performance. That is the closest familiar thing to what these systems do. It is also where the comparison breaks. Quality does not establish originality or legal permission in either case. But the players can be asked where a phrase came from, and they will know. And there are only so many takes in a day. A model draws on data nobody can enumerate in the room — 280k hours behind MusicLM, 20K licensed hours behind MusicGen — a thousand variants at a time.
That is why MusicLM's authors reached for an exact-match count, and why the complaints reach for training records and similarity analysis. Each is asking the ensemble's question of something that cannot answer it. What comes back is never testimony. It is a rate: below 0.2%, at a 10-second prompt, on the semantic-token stage. Conditional on all three, and silent about everything else.
Adherence, originality risk and provenance each arrive as a separate record: a caption set, an exact-match rate, a machine-readable mark.
Plausible is not original, and not cleared
Adherence, originality risk and provenance are three separate things to evidence, and none of them is settled by how the audio sounds. Text-to-audio and music models generate waveforms or codec tokens, conditioned on language and other controls.
That sentence hides how specific the choices underneath it are. Meta's MusicGen is a single-stage transformer LM over EnCodec tokens for 32 kHz audio. A stride of 640 gives a 50 Hz frame rate. RVQ with four quantizers of codebook size 2048 gives the token vocabulary. The training set is 20K hours of licensed music. The models come at 300M, 1.5B and 3.3B parameters. Meta's own paper, published in 2023, puts the architectural decision plainly in its abstract: “Unlike prior work, MusicGen is comprised of a single-stage transformer LM together with efficient token interleaving patterns, which eliminates the need for cascading several models, e.g., hierarchically or upsampling.”
Every figure in that paragraph is a trade being made. Autoregressive, diffusion and hybrid pipelines reach an output by different routes. They trade fidelity, duration, controllability, structure, latency and editing ability against one another. Not one of those trades is the question Universal, Sony and Warner litigated. And note which fact about MusicGen is not an architecture choice at all: that its 20K hours are licensed. That sits on a different record from the frame rate and the codebook size, and no amount of tuning the other numbers produces it.
Audio that sounds plausible does not prove the model followed the prompt. Nor that the result is original, that the rights were cleared, that the physics is real, or that an edit preserved what it was meant to preserve. Long-range musical form and exact temporal control stay separate challenges from short-clip quality. The hard part, then, is not the model. It is whether the generation contract, written up front, keeps the things evaluation and governance will later ask for. Ratings of quality and prompt adherence can only support a decision that contract already made room for.
Pipeline choice trades fidelity, control and latency; a licensed, original, marked result sits on none of those axes and arrives as separate records.
Visual
Seeds, negative prompts, and edit boundaries
The contract is therefore the piece to get right, and it is written first, before anyone chooses a representation and a model. It is where seeds, negative prompts and edit boundaries are fixed. It is where a rule about what a style prompt may name would have gone. Choosing the representation and model comes next — 32 kHz codec tokens at 50 Hz, or a 21.5 Hz continuous latent, or an editing pipeline over an existing recording. That step spends whatever the contract assumed. Evaluate and govern comes last, and it is where anyone finds out what was assumed.
That last step no longer has an open-ended deadline. The EU AI Act entered into force on 1 August 2024. Its Article 50(2) requires providers of AI systems generating synthetic audio to mark outputs in a machine-readable format, detectable as artificially generated or manipulated. The transparency obligations of Article 50 apply from 2 August 2026. A contract that never mentioned marking still arrives at step 4 owing it. By then the pipeline is built and the outputs are already in the world.
1. Define the generation contract
Specify content, duration, style, source conditioning, prohibited imitation, and edit boundaries.
2. Choose representation and model
Use waveform, spectrogram, latent, or codec-token generation with suitable conditioning.
3. Control and inspect
Test prompts, seeds, negative conditions, structure, edits, and failure modes.
4. Evaluate and govern
Measure quality, adherence, memorization, provenance, rights, and abuse response.
Governance and evaluation run on terms the generation contract already fixed, and by the time anyone reads them nobody is asking whether those terms were right.
Key idea
MiRA's floor: replication below 10% does not resolve
Four ordinary parts of a generation pipeline are where those assumptions come apart: prompt labels, similarity metrics, long outputs, and distribution.
1) Prompt labels encouraging imitation of living artists or identifiable voices. 2) Memorized fragments missed by average similarity metrics. 3) Long outputs losing musical structure or event consistency. 4) Generated media distributed without provenance or rights review.
Take the second first, because someone has measured it. MiRA, the Music Replication Assessment tool, is a model-independent evaluation built on five audio similarity metrics. Batlle-Roca and four colleagues published it in 2024. Their controlled replication experiment across genres reports the method's own floor: “Our results show that the proposed methodology can estimate exact data replication with a proportion higher than 10%.” Above 10% replicated proportion the tool can estimate what is going on. One reproduced bar inside a full track is far under that line. A track-level similarity score is the instrument least likely to register it.
Now the first. A prompt label naming a living artist sits in the text, which no similarity metric inspects at all. In Tennessee it has been a matter of statute since 1 July 2024. Governor Bill Lee signed the ELVIS Act on 21 March 2024. It renamed the Personal Rights Protection Act of 1984 the "Ensuring Likeness, Voice, and Image Security Act of 2024", and it added a statutory definition: “"Voice" means a sound in a medium that is readily identifiable and attributable to a particular individual, regardless of whether the sound contains the actual voice or a simulation of the voice of the individual;” The provision that reaches a generative-audio vendor is not about any particular output. It makes it a civil wrong to make available an algorithm, software or tool whose primary purpose or function is producing an individual's photograph, voice or likeness without authorization. The tool is in scope, not only the track.
The third is the long-form problem returning. Holding structure and event consistency across a generation of several minutes is a different job from making a ten-second clip sound good. The fourth turns any of the others into somebody else's problem. It puts the output into the world with no provenance and no rights review behind it — and, from 2 August 2026 in the EU, with no machine-readable mark either.
A published replication tool resolves exact replication only above 10% of the track; a simulated voice has been a defined statutory harm in Tennessee since 1 July 2024.
Comparison
Token by token, denoised, or edited — and each with its own audit
Guarding against those four means knowing which route your system took to the audio. The published evidence follows the route, and it does not travel.
The autoregressive route has MusicGen's record: EnCodec tokens for 32 kHz audio, four quantizers of codebook size 2048 at a 50 Hz frame rate, 20K licensed hours, 300M to 3.3B parameters, one transformer LM instead of a cascade.
The diffusion route has its own, in different units. Stability AI's long-form music model, published in 2024, is a diffusion-transformer over a 21.5 Hz continuous latent. It generates up to 4m 45s of 44.1 kHz stereo audio. Its memorization audit is a procedure, not a rating. Identify the repeated audios in the training set — 5,566 of them. Generate from those 5,566 in-distribution prompts, plus 586 out-of-distribution prompts from the Song Describer Dataset (no-singing subset). Rank the generations by closeness to the training data, and listen to the closest 50. The result is stated as plainly as the method: “We extensively listened to potential memorization candidates, and could not find memorization.”
Source-conditioned editing is the third route. It transforms selected regions while attempting to preserve specified original content. It owes a third kind of evidence — preservation outside the requested region — that neither of the two audits above was designed to produce.
Put the two published audits side by side and the point makes itself. MusicLM reports a rate below 0.2%, at one prompt length, on one stage. The long-form diffusion model reports a listening pass over generations from 5,566 repeated training audios and 586 out-of-distribution prompts, and it found nothing. Neither number is transferable. A memorization result earned at 24 kHz on semantic tokens establishes nothing about a 21.5 Hz latent generating 4m 45s in stereo. A structure test on a long diffusion output establishes nothing about a 50 Hz token stream.
Autoregressive token generation
Predicts audio or codec tokens sequentially with strong sequence modeling.
- Decision focus: Define the generation contract
- Useful evidence: Human quality and prompt-adherence judgments
- Watch for: Prompt labels encouraging imitation of living artists or identifiable voices
- Best used when its assumptions are documented for text-to-audio and music generation
Diffusion generation
Iteratively denoises a waveform or latent representation.
- Decision focus: Choose representation and model
- Useful evidence: Temporal event, structure, and edit-preservation tests
- Watch for: Memorized fragments missed by average similarity metrics
- Best used when its assumptions are documented for text-to-audio and music generation
Source-conditioned editing
Transforms selected regions while attempting to preserve specified original content.
- Decision focus: Control and inspect
- Useful evidence: Nearest-neighbor and memorization investigations
- Watch for: Long outputs losing musical structure or event consistency
- Best used when its assumptions are documented for text-to-audio and music generation
Steps
Create a generative-audio red-team pack
Owing evidence is easy to agree to and easy to postpone, so make it a pack. A red-team pack is the material another team needs in order to show that a prompt label pointed the model at someone real, or that a phrase came out of the training set. Two of the papers above have already published theirs, in enough detail to copy.
MusicLM's is a rate with its conditions attached: exact matches, on the semantic-token stage, with the prompt length (10 seconds) and continuation length (5 seconds) stated next to the figure. Stability AI's long-form audit is a ranking-and-listening protocol with its counts attached: 5,566 repeated training audios, 5,566 in-distribution prompts, 586 out-of-distribution prompts from the Song Describer Dataset, top-50 generations listened to. MiRA is the third shape: five similarity metrics, model-independent, with its detection floor above 10% replicated proportion declared in the abstract rather than discovered later. None of the three is a listening panel. All three can be re-run by someone who does not trust you.
Write down what defining the generation contract assumes. Then one counterexample. A style prompt naming a living artist is the obvious one, and since 1 July 2024 Tennessee has defined the exposure it creates. A track carrying a phrase from a released record is the other, and MiRA's floor tells you in advance what a track-level score will and will not resolve. Then write down what evaluating and governing actually does about each.
1. Test control limits
Use conflicting, long, precise, and impossible prompts.
2. Search for memorization
Compare outputs with training-neighbor indexes and human review.
3. Test source edits
Measure preservation outside the requested region.
4. Exercise response
Simulate impersonation, rights complaint, provenance failure, and takedown.
Run the pack against impersonation, a rights complaint, a provenance failure and a takedown before release; those four arrive whether or not anyone rehearsed them.
Example
Fréchet Audio Distance is one number, and it has been measured failing
None of that reaches a release decision unless it is reported, and one number will not carry it. For generated music that one number usually has a name: Fréchet Audio Distance. Gui and three colleagues took it apart in 2024. Its correlation with perceptual quality, they note, is understudied. The score itself is fragile: “We show that FAD performance may be hampered by sample size bias, poor choice of audio embeddings, or the use of biased or low-quality reference sets.” Their proposal is a per-song FAD, so that outlier samples surface instead of dissolving into an aggregate. It is the same shape as MiRA's 10% floor, and the same shape as a memorized bar inside a finished track. Aggregation is where the individual bad case goes to hide.
Provenance, meanwhile, has stopped being a metric anyone chooses. Article 50(2) of the AI Act reads: “Providers of AI systems, including general-purpose AI systems, generating synthetic audio, image, video or text content, shall ensure that the outputs of the AI system are marked in a machine-readable format and detectable as artificially generated or manipulated.” The regulation entered into force on 1 August 2024, and the Article 50 transparency obligations apply from 2 August 2026. That turns provenance coverage from a number on a dashboard into a compliance figure with a deadline.
So the report has a shape. Human quality and prompt-adherence judgments cover a short clip. Temporal event, structure and edit-preservation tests cover what happens over 4m 45s. Hard slices built from prompts that name a real artist or voice cover the exposure the ELVIS Act describes. Figures for latency, controllability, provenance coverage and misuse incidents cover the working life of the system. Drop any of them and short-clip ratings carry the release claim alone — which is exactly the claim that neither the complaints of 24 June 2024 nor Article 50(2) will accept.
- For the core task, human quality and prompt-adherence judgments of the MusicCaps kind: 5,521 ten-second clips, each with an aspect list and a free-text caption written by musicians.
- For system behavior, temporal event, structure, and edit-preservation tests run over the length people will actually generate — up to 4m 45s of 44.1 kHz stereo in the long-form diffusion case, not a ten-second excerpt.
- For the robustness slice, nearest-neighbor and memorization investigations reported per song rather than in aggregate: an exact-match rate with its prompt length stated, a top-50 listening pass over ranked candidates, a replication estimate carrying its own floor above 10%.
- Over the working life of the system, latency, controllability, provenance coverage — against the Article 50(2) machine-readable marking requirement that applies from 2 August 2026 — and misuse incidents.
Report per-song scores, not one Fréchet Audio Distance: sample-size bias, embedding choice and a biased reference set have all been shown to hamper it.
Key takeaways
- A generative audio model turns language and other controls into waveforms or codec tokens. MusicGen's are EnCodec tokens for 32 kHz audio — four quantizers of codebook size 2048 at a 50 Hz frame rate, from 20K licensed hours. Everything contested afterwards — adherence, originality, rights — has to be established on records other than the audio.
- Plausible audio proves nothing by itself. Proof has a published shape: MusicLM's separate memorization study on the semantic-token stage, reporting exact matches below 0.2%, with the 10-second prompt and 5-second continuation stated alongside the figure.
- Write the generation contract before choosing a pipeline, and end in evaluation and governance. The suits the RIAA announced on 24 June 2024 turned on training data and output similarity. The settlements that followed — Universal Music Group with Udio on 29 October 2025, Warner Music Group with Suno on 25 November 2025 — bought licensed training data and named-artist consent. Never audio quality.
- Autoregressive token generation, diffusion generation and source-conditioned editing owe separate evidence. A 0.2% exact-match rate at 24 kHz says nothing about a 21.5 Hz latent generating 4m 45s of stereo. That model's own audit was 5,566 in-distribution prompts plus 586 out-of-distribution ones, and a listening pass over the closest 50.
- A prompt label naming a living artist leaves no mark on quality and adherence ratings. Tennessee's ELVIS Act has defined "voice" to cover a simulation of it since 1 July 2024. It reaches the tool whose primary purpose or function is producing that voice without authorization — not only the track.
- Report per-song figures rather than one aggregate. Fréchet Audio Distance has been shown to be hampered by sample-size bias, embedding choice and biased reference sets. MiRA resolves replication only above 10% of a track. And provenance marking becomes an Article 50(2) obligation on 2 August 2026.