{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3GYVRSAKSUNABM5HBNWOKEHWEM","short_pith_number":"pith:3GYVRSAK","canonical_record":{"source":{"id":"2509.01548","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-01T15:24:41Z","cross_cats_sorted":[],"title_canon_sha256":"ba711d6fb69416d166b60789b42beb895d0dc1219117275e54d0873e5ea1700d","abstract_canon_sha256":"7f5574acfcef27ac3cbfc37ec852bf9262d327368f13b3882d37554a7cd1b6c7"},"schema_version":"1.0"},"canonical_sha256":"d9b158c80a951a00b3a70b6ce510f623331c49f36b838e605dd2ae9c585c6fc4","source":{"kind":"arxiv","id":"2509.01548","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.01548","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"arxiv_version","alias_value":"2509.01548v1","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.01548","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"pith_short_12","alias_value":"3GYVRSAKSUNA","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"pith_short_16","alias_value":"3GYVRSAKSUNABM5H","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"pith_short_8","alias_value":"3GYVRSAK","created_at":"2026-07-05T12:03:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3GYVRSAKSUNABM5HBNWOKEHWEM","target":"record","payload":{"canonical_record":{"source":{"id":"2509.01548","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-01T15:24:41Z","cross_cats_sorted":[],"title_canon_sha256":"ba711d6fb69416d166b60789b42beb895d0dc1219117275e54d0873e5ea1700d","abstract_canon_sha256":"7f5574acfcef27ac3cbfc37ec852bf9262d327368f13b3882d37554a7cd1b6c7"},"schema_version":"1.0"},"canonical_sha256":"d9b158c80a951a00b3a70b6ce510f623331c49f36b838e605dd2ae9c585c6fc4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:03:02.944814Z","signature_b64":"TLr94J1lXum5beT2ghDfgJRUymss13RM7+g95WecmCSHr0ZRq0oCt+cYUkAPzPpr8VOsyAnwrwb/0BwYiSJNDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d9b158c80a951a00b3a70b6ce510f623331c49f36b838e605dd2ae9c585c6fc4","last_reissued_at":"2026-07-05T12:03:02.944281Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:03:02.944281Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.01548","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:03:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sfR/1AVWT/VQPIc8SbLYe8YURcKyEKklbm5iVtuVINPJnbfBrSimSfkg0s5YQlf3YgloFm48z1tArqSfMS+FAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T16:57:05.289076Z"},"content_sha256":"0296a95f4a5ced5917ac7c72a947b886f95766a20765347465ea42293d9f4b52","schema_version":"1.0","event_id":"sha256:0296a95f4a5ced5917ac7c72a947b886f95766a20765347465ea42293d9f4b52"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3GYVRSAKSUNABM5HBNWOKEHWEM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model Unmerging: Making Your Models Unmergeable for Secure Model Sharing","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Enneng Yang, Li Shen, Lu Yin, Shiwei Liu, Zihao Wang","submitted_at":"2025-09-01T15:24:41Z","abstract_excerpt":"Model merging leverages multiple finetuned expert models to construct a multi-task model with low cost, and is gaining increasing attention. However, as a growing number of finetuned models become publicly available, concerns about the safety of model merging have emerged. Unauthorized merging may infringe on developers' rights and risk leaking sensitive personal information. Most existing methods focus on detecting whether a merged model originates from a specific source model, but fail to effectively prevent illegal merging. In this paper, we propose MergeLock, an active protection mechanism"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.01548","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.01548/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:03:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f2E/MngQ/352SjgFaFwu3V7G9zNAwUSL+MVbxhUjffMfTFCNYsAWI2jxZQiM6GlcOm65nwnloz/W5/ZSVAvyBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T16:57:05.289692Z"},"content_sha256":"b86ebcead37bf7f87e11bb9e643d18549444076941ec1aff128d8beb5cbfcb42","schema_version":"1.0","event_id":"sha256:b86ebcead37bf7f87e11bb9e643d18549444076941ec1aff128d8beb5cbfcb42"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3GYVRSAKSUNABM5HBNWOKEHWEM/bundle.json","state_url":"https://pith.science/pith/3GYVRSAKSUNABM5HBNWOKEHWEM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3GYVRSAKSUNABM5HBNWOKEHWEM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T16:57:05Z","links":{"resolver":"https://pith.science/pith/3GYVRSAKSUNABM5HBNWOKEHWEM","bundle":"https://pith.science/pith/3GYVRSAKSUNABM5HBNWOKEHWEM/bundle.json","state":"https://pith.science/pith/3GYVRSAKSUNABM5HBNWOKEHWEM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3GYVRSAKSUNABM5HBNWOKEHWEM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3GYVRSAKSUNABM5HBNWOKEHWEM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7f5574acfcef27ac3cbfc37ec852bf9262d327368f13b3882d37554a7cd1b6c7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-01T15:24:41Z","title_canon_sha256":"ba711d6fb69416d166b60789b42beb895d0dc1219117275e54d0873e5ea1700d"},"schema_version":"1.0","source":{"id":"2509.01548","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.01548","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"arxiv_version","alias_value":"2509.01548v1","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.01548","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"pith_short_12","alias_value":"3GYVRSAKSUNA","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"pith_short_16","alias_value":"3GYVRSAKSUNABM5H","created_at":"2026-07-05T12:03:02Z"},{"alias_kind":"pith_short_8","alias_value":"3GYVRSAK","created_at":"2026-07-05T12:03:02Z"}],"graph_snapshots":[{"event_id":"sha256:b86ebcead37bf7f87e11bb9e643d18549444076941ec1aff128d8beb5cbfcb42","target":"graph","created_at":"2026-07-05T12:03:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.01548/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model merging leverages multiple finetuned expert models to construct a multi-task model with low cost, and is gaining increasing attention. However, as a growing number of finetuned models become publicly available, concerns about the safety of model merging have emerged. Unauthorized merging may infringe on developers' rights and risk leaking sensitive personal information. Most existing methods focus on detecting whether a merged model originates from a specific source model, but fail to effectively prevent illegal merging. In this paper, we propose MergeLock, an active protection mechanism","authors_text":"Enneng Yang, Li Shen, Lu Yin, Shiwei Liu, Zihao Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-01T15:24:41Z","title":"Model Unmerging: Making Your Models Unmergeable for Secure Model Sharing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.01548","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0296a95f4a5ced5917ac7c72a947b886f95766a20765347465ea42293d9f4b52","target":"record","created_at":"2026-07-05T12:03:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7f5574acfcef27ac3cbfc37ec852bf9262d327368f13b3882d37554a7cd1b6c7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-01T15:24:41Z","title_canon_sha256":"ba711d6fb69416d166b60789b42beb895d0dc1219117275e54d0873e5ea1700d"},"schema_version":"1.0","source":{"id":"2509.01548","kind":"arxiv","version":1}},"canonical_sha256":"d9b158c80a951a00b3a70b6ce510f623331c49f36b838e605dd2ae9c585c6fc4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d9b158c80a951a00b3a70b6ce510f623331c49f36b838e605dd2ae9c585c6fc4","first_computed_at":"2026-07-05T12:03:02.944281Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:03:02.944281Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TLr94J1lXum5beT2ghDfgJRUymss13RM7+g95WecmCSHr0ZRq0oCt+cYUkAPzPpr8VOsyAnwrwb/0BwYiSJNDg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:03:02.944814Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.01548","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0296a95f4a5ced5917ac7c72a947b886f95766a20765347465ea42293d9f4b52","sha256:b86ebcead37bf7f87e11bb9e643d18549444076941ec1aff128d8beb5cbfcb42"],"state_sha256":"667ebc9ca9518d3128420958063c604806079f96a0a4c60c4cc3f95ff524a29a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sItDlcGlAsB32iZu3TwX03zEfeKauWvErI4jyWdqn/ZLtLyKhoKAfSkoGzReiD/O0zB5tMa8P0/hoNngayFhBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T16:57:05.295267Z","bundle_sha256":"87dd421080c9c58779c9c5d74bea6b1e74c48aa63bb63ec9ded9b5b8d491b1dc"}}