{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3R5HQN53J3TBKGO4ZXITB62AHQ","short_pith_number":"pith:3R5HQN53","canonical_record":{"source":{"id":"2403.05842","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"497c279d20b800a186c3266afac6b20f134839706759dff4b08f0b3d4dcd7fcf","abstract_canon_sha256":"7eded8b8d33808fd8edeb5478e4becba83b5e6e24d1a4337ab6095c7f0cd37a6"},"schema_version":"1.0"},"canonical_sha256":"dc7a7837bb4ee61519dccdd130fb403c34717b382cee30b491df0a067e3f460d","source":{"kind":"arxiv","id":"2403.05842","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.05842","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"arxiv_version","alias_value":"2403.05842v3","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.05842","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_12","alias_value":"3R5HQN53J3TB","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_16","alias_value":"3R5HQN53J3TBKGO4","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_8","alias_value":"3R5HQN53","created_at":"2026-07-05T10:54:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3R5HQN53J3TBKGO4ZXITB62AHQ","target":"record","payload":{"canonical_record":{"source":{"id":"2403.05842","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"497c279d20b800a186c3266afac6b20f134839706759dff4b08f0b3d4dcd7fcf","abstract_canon_sha256":"7eded8b8d33808fd8edeb5478e4becba83b5e6e24d1a4337ab6095c7f0cd37a6"},"schema_version":"1.0"},"canonical_sha256":"dc7a7837bb4ee61519dccdd130fb403c34717b382cee30b491df0a067e3f460d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:54:11.355837Z","signature_b64":"DwRV7FVhhb/HLkX6dcGVM5CD7LUBOwo1B92dv1toXT33/pXxpkdGJV1tlXbX2Zg6acYo497Ioe60KBXo/QqfAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dc7a7837bb4ee61519dccdd130fb403c34717b382cee30b491df0a067e3f460d","last_reissued_at":"2026-07-05T10:54:11.355352Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:54:11.355352Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.05842","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lU45xphTHZYK0vGzgGR0Xre03whr7xG24wC4ehWkyI/mRfvCbBfYdOtO2O2QQ5g3gxBi9YkzrJJqGAq6O8FtCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:04:58.481890Z"},"content_sha256":"9706f3e9700aad25c95534e8e42e10515fab4260d3206272090c5f163678155a","schema_version":"1.0","event_id":"sha256:9706f3e9700aad25c95534e8e42e10515fab4260d3206272090c5f163678155a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3R5HQN53J3TBKGO4ZXITB62AHQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Baochun Li, Borui Yang, Hengyuan Xu, Liyao Xiang, Siheng Chen, Xingjun Ma","submitted_at":"2024-03-09T08:54:52Z","abstract_excerpt":"Watermarking is a critical tool for model ownership verification. However, existing watermarking techniques are often designed for specific data modalities and downstream tasks, without considering the inherent architectural properties of the model. This lack of generality and robustness underscores the need for a more versatile watermarking approach. In this work, we investigate the properties of Transformer models and propose TokenMark, a modality-agnostic, robust watermarking system for pre-trained models, leveraging the permutation equivariance property. TokenMark embeds the watermark by f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.05842","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.05842/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7Xt3t2Sb1tkOB6AKRk4aBXr6+/AZstkdTiwoLhLxRDKwNDOPgXSNnCsnnvynv6P5WXIs2tYOVqfHvcnCqAUDAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:04:58.482406Z"},"content_sha256":"4f0d7d6d5bde59ae0daa604612daa53684a322c3769ed37767cecef274ad6773","schema_version":"1.0","event_id":"sha256:4f0d7d6d5bde59ae0daa604612daa53684a322c3769ed37767cecef274ad6773"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3R5HQN53J3TBKGO4ZXITB62AHQ/bundle.json","state_url":"https://pith.science/pith/3R5HQN53J3TBKGO4ZXITB62AHQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3R5HQN53J3TBKGO4ZXITB62AHQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T21:04:58Z","links":{"resolver":"https://pith.science/pith/3R5HQN53J3TBKGO4ZXITB62AHQ","bundle":"https://pith.science/pith/3R5HQN53J3TBKGO4ZXITB62AHQ/bundle.json","state":"https://pith.science/pith/3R5HQN53J3TBKGO4ZXITB62AHQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3R5HQN53J3TBKGO4ZXITB62AHQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3R5HQN53J3TBKGO4ZXITB62AHQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7eded8b8d33808fd8edeb5478e4becba83b5e6e24d1a4337ab6095c7f0cd37a6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","title_canon_sha256":"497c279d20b800a186c3266afac6b20f134839706759dff4b08f0b3d4dcd7fcf"},"schema_version":"1.0","source":{"id":"2403.05842","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.05842","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"arxiv_version","alias_value":"2403.05842v3","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.05842","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_12","alias_value":"3R5HQN53J3TB","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_16","alias_value":"3R5HQN53J3TBKGO4","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_8","alias_value":"3R5HQN53","created_at":"2026-07-05T10:54:11Z"}],"graph_snapshots":[{"event_id":"sha256:4f0d7d6d5bde59ae0daa604612daa53684a322c3769ed37767cecef274ad6773","target":"graph","created_at":"2026-07-05T10:54:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.05842/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking is a critical tool for model ownership verification. However, existing watermarking techniques are often designed for specific data modalities and downstream tasks, without considering the inherent architectural properties of the model. This lack of generality and robustness underscores the need for a more versatile watermarking approach. In this work, we investigate the properties of Transformer models and propose TokenMark, a modality-agnostic, robust watermarking system for pre-trained models, leveraging the permutation equivariance property. TokenMark embeds the watermark by f","authors_text":"Baochun Li, Borui Yang, Hengyuan Xu, Liyao Xiang, Siheng Chen, Xingjun Ma","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.05842","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9706f3e9700aad25c95534e8e42e10515fab4260d3206272090c5f163678155a","target":"record","created_at":"2026-07-05T10:54:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7eded8b8d33808fd8edeb5478e4becba83b5e6e24d1a4337ab6095c7f0cd37a6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","title_canon_sha256":"497c279d20b800a186c3266afac6b20f134839706759dff4b08f0b3d4dcd7fcf"},"schema_version":"1.0","source":{"id":"2403.05842","kind":"arxiv","version":3}},"canonical_sha256":"dc7a7837bb4ee61519dccdd130fb403c34717b382cee30b491df0a067e3f460d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dc7a7837bb4ee61519dccdd130fb403c34717b382cee30b491df0a067e3f460d","first_computed_at":"2026-07-05T10:54:11.355352Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:54:11.355352Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DwRV7FVhhb/HLkX6dcGVM5CD7LUBOwo1B92dv1toXT33/pXxpkdGJV1tlXbX2Zg6acYo497Ioe60KBXo/QqfAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:54:11.355837Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.05842","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9706f3e9700aad25c95534e8e42e10515fab4260d3206272090c5f163678155a","sha256:4f0d7d6d5bde59ae0daa604612daa53684a322c3769ed37767cecef274ad6773"],"state_sha256":"3ede4c825f584a3c380a753390bc9c8f0da399c22616b6c24560256948058874"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s19Bb3o3vn4D0SvCUAcJGUHykr3eijfQUqqB9HlaAt7slYCWc6c09XHE+cNmQsNhshFfBsGcR+9w9z1MwSO6Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T21:04:58.487496Z","bundle_sha256":"8dac883c6d31c0dff64668bc49cc1a6a28272634dc77e59e50d41249f18f522a"}}