{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:2HJGST63UFA2XQUXLDUWHF6PCQ","short_pith_number":"pith:2HJGST63","canonical_record":{"source":{"id":"2309.06779","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-13T08:06:13Z","cross_cats_sorted":[],"title_canon_sha256":"cbb5f23b6af54ef28dc1bdb6dc6ac65b57056f8d9ecc38ea69ff5ec63228444b","abstract_canon_sha256":"7daab344681fcd433039dbd12b0e17789fd3cfa2d09ab8fa01468682a5ec6841"},"schema_version":"1.0"},"canonical_sha256":"d1d2694fdba141abc29758e96397cf14287af0ab18294f5425094a54d3660c60","source":{"kind":"arxiv","id":"2309.06779","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.06779","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"arxiv_version","alias_value":"2309.06779v1","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.06779","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"pith_short_12","alias_value":"2HJGST63UFA2","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"pith_short_16","alias_value":"2HJGST63UFA2XQUX","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"pith_short_8","alias_value":"2HJGST63","created_at":"2026-07-05T06:50:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:2HJGST63UFA2XQUXLDUWHF6PCQ","target":"record","payload":{"canonical_record":{"source":{"id":"2309.06779","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-13T08:06:13Z","cross_cats_sorted":[],"title_canon_sha256":"cbb5f23b6af54ef28dc1bdb6dc6ac65b57056f8d9ecc38ea69ff5ec63228444b","abstract_canon_sha256":"7daab344681fcd433039dbd12b0e17789fd3cfa2d09ab8fa01468682a5ec6841"},"schema_version":"1.0"},"canonical_sha256":"d1d2694fdba141abc29758e96397cf14287af0ab18294f5425094a54d3660c60","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:50:22.342844Z","signature_b64":"0AQAq91sNA/qdmakilQl3KBvEdtSIOGZWX4tZLOhNXM3qh585i5wv6I/jvfoTPCuYQUlKCUcI57AIGPwuKFgCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d1d2694fdba141abc29758e96397cf14287af0ab18294f5425094a54d3660c60","last_reissued_at":"2026-07-05T06:50:22.342429Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:50:22.342429Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.06779","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:50:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KHbFCqdHzNPU7b46xMZjFA8jZ/C9MNDLFTju7SvXhYvuSQCBbP5zbdbmpb23nExvhXIS12J0y4DneU9zhRntCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T21:36:29.394179Z"},"content_sha256":"04eab4a996c494e1364892623a9169d8aeaaf28eca15b86dc920be8139e6c171","schema_version":"1.0","event_id":"sha256:04eab4a996c494e1364892623a9169d8aeaaf28eca15b86dc920be8139e6c171"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:2HJGST63UFA2XQUXLDUWHF6PCQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ZKROWNN: Zero Knowledge Right of Ownership for Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Farinaz Koushanfar, Nojan Sheybani, Ritvik Kapila, Zahra Ghodsi","submitted_at":"2023-09-13T08:06:13Z","abstract_excerpt":"Training contemporary AI models requires investment in procuring learning data and computing resources, making the models intellectual property of the owners. Popular model watermarking solutions rely on key input triggers for detection; the keys have to be kept private to prevent discovery, forging, and removal of the hidden signatures. We present ZKROWNN, the first automated end-to-end framework utilizing Zero-Knowledge Proofs (ZKP) that enable an entity to validate their ownership of a model, while preserving the privacy of the watermarks. ZKROWNN permits a third party client to verify mode"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.06779","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.06779/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:50:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DXUIdrk6NLkWdMD/gNBzlQYE4lu6ooNUC5UB0KqKPt2hwcAVesNNg1Gr/BTzKTUwHFVtbo2+Hy/Y9+c9A/B8Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T21:36:29.394565Z"},"content_sha256":"630397a7f73cd694b1f34244e0dcb253d9e1014b589d6d147fd24f638b41e50d","schema_version":"1.0","event_id":"sha256:630397a7f73cd694b1f34244e0dcb253d9e1014b589d6d147fd24f638b41e50d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2HJGST63UFA2XQUXLDUWHF6PCQ/bundle.json","state_url":"https://pith.science/pith/2HJGST63UFA2XQUXLDUWHF6PCQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2HJGST63UFA2XQUXLDUWHF6PCQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-14T21:36:29Z","links":{"resolver":"https://pith.science/pith/2HJGST63UFA2XQUXLDUWHF6PCQ","bundle":"https://pith.science/pith/2HJGST63UFA2XQUXLDUWHF6PCQ/bundle.json","state":"https://pith.science/pith/2HJGST63UFA2XQUXLDUWHF6PCQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2HJGST63UFA2XQUXLDUWHF6PCQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:2HJGST63UFA2XQUXLDUWHF6PCQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7daab344681fcd433039dbd12b0e17789fd3cfa2d09ab8fa01468682a5ec6841","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-13T08:06:13Z","title_canon_sha256":"cbb5f23b6af54ef28dc1bdb6dc6ac65b57056f8d9ecc38ea69ff5ec63228444b"},"schema_version":"1.0","source":{"id":"2309.06779","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.06779","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"arxiv_version","alias_value":"2309.06779v1","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.06779","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"pith_short_12","alias_value":"2HJGST63UFA2","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"pith_short_16","alias_value":"2HJGST63UFA2XQUX","created_at":"2026-07-05T06:50:22Z"},{"alias_kind":"pith_short_8","alias_value":"2HJGST63","created_at":"2026-07-05T06:50:22Z"}],"graph_snapshots":[{"event_id":"sha256:630397a7f73cd694b1f34244e0dcb253d9e1014b589d6d147fd24f638b41e50d","target":"graph","created_at":"2026-07-05T06:50:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.06779/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Training contemporary AI models requires investment in procuring learning data and computing resources, making the models intellectual property of the owners. Popular model watermarking solutions rely on key input triggers for detection; the keys have to be kept private to prevent discovery, forging, and removal of the hidden signatures. We present ZKROWNN, the first automated end-to-end framework utilizing Zero-Knowledge Proofs (ZKP) that enable an entity to validate their ownership of a model, while preserving the privacy of the watermarks. ZKROWNN permits a third party client to verify mode","authors_text":"Farinaz Koushanfar, Nojan Sheybani, Ritvik Kapila, Zahra Ghodsi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-13T08:06:13Z","title":"ZKROWNN: Zero Knowledge Right of Ownership for Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.06779","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:04eab4a996c494e1364892623a9169d8aeaaf28eca15b86dc920be8139e6c171","target":"record","created_at":"2026-07-05T06:50:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7daab344681fcd433039dbd12b0e17789fd3cfa2d09ab8fa01468682a5ec6841","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-13T08:06:13Z","title_canon_sha256":"cbb5f23b6af54ef28dc1bdb6dc6ac65b57056f8d9ecc38ea69ff5ec63228444b"},"schema_version":"1.0","source":{"id":"2309.06779","kind":"arxiv","version":1}},"canonical_sha256":"d1d2694fdba141abc29758e96397cf14287af0ab18294f5425094a54d3660c60","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d1d2694fdba141abc29758e96397cf14287af0ab18294f5425094a54d3660c60","first_computed_at":"2026-07-05T06:50:22.342429Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:50:22.342429Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0AQAq91sNA/qdmakilQl3KBvEdtSIOGZWX4tZLOhNXM3qh585i5wv6I/jvfoTPCuYQUlKCUcI57AIGPwuKFgCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:50:22.342844Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.06779","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:04eab4a996c494e1364892623a9169d8aeaaf28eca15b86dc920be8139e6c171","sha256:630397a7f73cd694b1f34244e0dcb253d9e1014b589d6d147fd24f638b41e50d"],"state_sha256":"b6353260c7b80bce6c78ff2ffaa2efc6e468d270638f815953a928470606c16c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m4xgF6Gjq4ZdgubdcvtUOq38opZ65lYINakVoz+6w6cK0uY1FlqcHGlGcKjTxluX6Q41dKFKVfoUC88gEsbICg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-14T21:36:29.396754Z","bundle_sha256":"8caa3dec5e053f7831d7f26fe0641013e2457f439d354afe9d0d94f495a8df51"}}