{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3R5HQN53J3TBKGO4ZXITB62AHQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7eded8b8d33808fd8edeb5478e4becba83b5e6e24d1a4337ab6095c7f0cd37a6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","title_canon_sha256":"497c279d20b800a186c3266afac6b20f134839706759dff4b08f0b3d4dcd7fcf"},"schema_version":"1.0","source":{"id":"2403.05842","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.05842","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"arxiv_version","alias_value":"2403.05842v3","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.05842","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_12","alias_value":"3R5HQN53J3TB","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_16","alias_value":"3R5HQN53J3TBKGO4","created_at":"2026-07-05T10:54:11Z"},{"alias_kind":"pith_short_8","alias_value":"3R5HQN53","created_at":"2026-07-05T10:54:11Z"}],"graph_snapshots":[{"event_id":"sha256:4f0d7d6d5bde59ae0daa604612daa53684a322c3769ed37767cecef274ad6773","target":"graph","created_at":"2026-07-05T10:54:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.05842/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking is a critical tool for model ownership verification. However, existing watermarking techniques are often designed for specific data modalities and downstream tasks, without considering the inherent architectural properties of the model. This lack of generality and robustness underscores the need for a more versatile watermarking approach. In this work, we investigate the properties of Transformer models and propose TokenMark, a modality-agnostic, robust watermarking system for pre-trained models, leveraging the permutation equivariance property. TokenMark embeds the watermark by f","authors_text":"Baochun Li, Borui Yang, Hengyuan Xu, Liyao Xiang, Siheng Chen, Xingjun Ma","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.05842","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9706f3e9700aad25c95534e8e42e10515fab4260d3206272090c5f163678155a","target":"record","created_at":"2026-07-05T10:54:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7eded8b8d33808fd8edeb5478e4becba83b5e6e24d1a4337ab6095c7f0cd37a6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-09T08:54:52Z","title_canon_sha256":"497c279d20b800a186c3266afac6b20f134839706759dff4b08f0b3d4dcd7fcf"},"schema_version":"1.0","source":{"id":"2403.05842","kind":"arxiv","version":3}},"canonical_sha256":"dc7a7837bb4ee61519dccdd130fb403c34717b382cee30b491df0a067e3f460d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dc7a7837bb4ee61519dccdd130fb403c34717b382cee30b491df0a067e3f460d","first_computed_at":"2026-07-05T10:54:11.355352Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:54:11.355352Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DwRV7FVhhb/HLkX6dcGVM5CD7LUBOwo1B92dv1toXT33/pXxpkdGJV1tlXbX2Zg6acYo497Ioe60KBXo/QqfAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:54:11.355837Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.05842","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9706f3e9700aad25c95534e8e42e10515fab4260d3206272090c5f163678155a","sha256:4f0d7d6d5bde59ae0daa604612daa53684a322c3769ed37767cecef274ad6773"],"state_sha256":"3ede4c825f584a3c380a753390bc9c8f0da399c22616b6c24560256948058874"}