{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:2E6X3CVUJUHCI6VWH6AQRI6K4F","short_pith_number":"pith:2E6X3CVU","canonical_record":{"source":{"id":"2312.04469","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-07T17:41:44Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"a17019cc570487310251d06fe6c70dde19d0c8cbf6fd81b48a81c6b4e4799d55","abstract_canon_sha256":"9052c5f790782569a57d141dd9a539879bf49faa7d61964147661834158a2e50"},"schema_version":"1.0"},"canonical_sha256":"d13d7d8ab44d0e247ab63f8108a3cae17a34f2978058b9bd5d60e871740486f0","source":{"kind":"arxiv","id":"2312.04469","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04469","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04469v3","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04469","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"pith_short_12","alias_value":"2E6X3CVUJUHC","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"pith_short_16","alias_value":"2E6X3CVUJUHCI6VW","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"pith_short_8","alias_value":"2E6X3CVU","created_at":"2026-07-05T08:14:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:2E6X3CVUJUHCI6VWH6AQRI6K4F","target":"record","payload":{"canonical_record":{"source":{"id":"2312.04469","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-07T17:41:44Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"a17019cc570487310251d06fe6c70dde19d0c8cbf6fd81b48a81c6b4e4799d55","abstract_canon_sha256":"9052c5f790782569a57d141dd9a539879bf49faa7d61964147661834158a2e50"},"schema_version":"1.0"},"canonical_sha256":"d13d7d8ab44d0e247ab63f8108a3cae17a34f2978058b9bd5d60e871740486f0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:14:20.190241Z","signature_b64":"jod9IsmhnqOLqmpXsrAwGJCJdiC07dp4qdN0nFbDGrU3C/bkVuqsmr8n/it38hpDc7lfqRWzGyGc/9GM61cqAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d13d7d8ab44d0e247ab63f8108a3cae17a34f2978058b9bd5d60e871740486f0","last_reissued_at":"2026-07-05T08:14:20.189767Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:14:20.189767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.04469","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:14:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5dOiyuDaGGoXnnFFsnCWpfJWHx1SbB9s88s8gJdeEQuUTzsB9KA61DQTU0kmIiktFaQOrYEmkJX6jIDcWj8gCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:26:27.353015Z"},"content_sha256":"4a53445ca77549757193d13861a68d47e79f63e0d9440d0acc284dcd59672755","schema_version":"1.0","event_id":"sha256:4a53445ca77549757193d13861a68d47e79f63e0d9440d0acc284dcd59672755"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:2E6X3CVUJUHCI6VWH6AQRI6K4F","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Learnability of Watermarks for Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Chenchen Gu, Percy Liang, Tatsunori Hashimoto, Xiang Lisa Li","submitted_at":"2023-12-07T17:41:44Z","abstract_excerpt":"Watermarking of language model outputs enables statistical detection of model-generated text, which can mitigate harms and misuses of language models. Existing watermarking strategies operate by altering the decoder of an existing language model. In this paper, we ask whether language models can directly learn to generate watermarked text, which would have significant implications for the real-world deployment of watermarks. First, learned watermarks could be used to build open models that naturally generate watermarked text, enabling watermarking for open models, where users can control the d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04469","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.04469/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:14:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"G8yFR+K1FM0JnB+k8/31etQijMwnDYekq1LOqryLGqaUy9nXNw1CIor1vcx9AzicssTx09gq3Swt5tlDCYgJCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:26:27.353676Z"},"content_sha256":"9cc8bce386347886975921578ebc494955f3befc612c7ae5cf2acaee1e99d1af","schema_version":"1.0","event_id":"sha256:9cc8bce386347886975921578ebc494955f3befc612c7ae5cf2acaee1e99d1af"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2E6X3CVUJUHCI6VWH6AQRI6K4F/bundle.json","state_url":"https://pith.science/pith/2E6X3CVUJUHCI6VWH6AQRI6K4F/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2E6X3CVUJUHCI6VWH6AQRI6K4F/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T07:26:27Z","links":{"resolver":"https://pith.science/pith/2E6X3CVUJUHCI6VWH6AQRI6K4F","bundle":"https://pith.science/pith/2E6X3CVUJUHCI6VWH6AQRI6K4F/bundle.json","state":"https://pith.science/pith/2E6X3CVUJUHCI6VWH6AQRI6K4F/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2E6X3CVUJUHCI6VWH6AQRI6K4F/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:2E6X3CVUJUHCI6VWH6AQRI6K4F","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9052c5f790782569a57d141dd9a539879bf49faa7d61964147661834158a2e50","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-07T17:41:44Z","title_canon_sha256":"a17019cc570487310251d06fe6c70dde19d0c8cbf6fd81b48a81c6b4e4799d55"},"schema_version":"1.0","source":{"id":"2312.04469","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04469","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04469v3","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04469","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"pith_short_12","alias_value":"2E6X3CVUJUHC","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"pith_short_16","alias_value":"2E6X3CVUJUHCI6VW","created_at":"2026-07-05T08:14:20Z"},{"alias_kind":"pith_short_8","alias_value":"2E6X3CVU","created_at":"2026-07-05T08:14:20Z"}],"graph_snapshots":[{"event_id":"sha256:9cc8bce386347886975921578ebc494955f3befc612c7ae5cf2acaee1e99d1af","target":"graph","created_at":"2026-07-05T08:14:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.04469/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking of language model outputs enables statistical detection of model-generated text, which can mitigate harms and misuses of language models. Existing watermarking strategies operate by altering the decoder of an existing language model. In this paper, we ask whether language models can directly learn to generate watermarked text, which would have significant implications for the real-world deployment of watermarks. First, learned watermarks could be used to build open models that naturally generate watermarked text, enabling watermarking for open models, where users can control the d","authors_text":"Chenchen Gu, Percy Liang, Tatsunori Hashimoto, Xiang Lisa Li","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-07T17:41:44Z","title":"On the Learnability of Watermarks for Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04469","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4a53445ca77549757193d13861a68d47e79f63e0d9440d0acc284dcd59672755","target":"record","created_at":"2026-07-05T08:14:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9052c5f790782569a57d141dd9a539879bf49faa7d61964147661834158a2e50","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-07T17:41:44Z","title_canon_sha256":"a17019cc570487310251d06fe6c70dde19d0c8cbf6fd81b48a81c6b4e4799d55"},"schema_version":"1.0","source":{"id":"2312.04469","kind":"arxiv","version":3}},"canonical_sha256":"d13d7d8ab44d0e247ab63f8108a3cae17a34f2978058b9bd5d60e871740486f0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d13d7d8ab44d0e247ab63f8108a3cae17a34f2978058b9bd5d60e871740486f0","first_computed_at":"2026-07-05T08:14:20.189767Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:14:20.189767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jod9IsmhnqOLqmpXsrAwGJCJdiC07dp4qdN0nFbDGrU3C/bkVuqsmr8n/it38hpDc7lfqRWzGyGc/9GM61cqAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:14:20.190241Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.04469","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4a53445ca77549757193d13861a68d47e79f63e0d9440d0acc284dcd59672755","sha256:9cc8bce386347886975921578ebc494955f3befc612c7ae5cf2acaee1e99d1af"],"state_sha256":"cecadae0ece1f5bd1d23e02c6417984f97656e097c3774fc196a4a5e253a10f6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mIw3TDDyjWE9CJMRt9NXgaHyPMef9GGaPePkAyXyAA415EYnQEX7GmYU7AGBTTYN+Xw3J3LLoFLTDcwglx1kBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T07:26:27.357364Z","bundle_sha256":"b7d64277d67021f6792c6c1ecf70a2a343bd6f0351d43ff3e2f2081c1491032e"}}