{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:45WU4TWZXEGJHWKV6DTSHZBPI6","short_pith_number":"pith:45WU4TWZ","canonical_record":{"source":{"id":"2311.05863","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-10T04:27:27Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"489ea8fcbb79d5dc06446600a2692298857f5bd9dab25179066b662447c6fd49","abstract_canon_sha256":"9c1fa94a00be3e70263ca899fea9630385de592a9fbe4f1c140073fc507c38df"},"schema_version":"1.0"},"canonical_sha256":"e76d4e4ed9b90c93d955f0e723e42f47bf5bb091c22ea098d548a22ed74c6969","source":{"kind":"arxiv","id":"2311.05863","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.05863","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"arxiv_version","alias_value":"2311.05863v1","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.05863","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"pith_short_12","alias_value":"45WU4TWZXEGJ","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"pith_short_16","alias_value":"45WU4TWZXEGJHWKV","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"pith_short_8","alias_value":"45WU4TWZ","created_at":"2026-07-05T07:11:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:45WU4TWZXEGJHWKV6DTSHZBPI6","target":"record","payload":{"canonical_record":{"source":{"id":"2311.05863","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-10T04:27:27Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"489ea8fcbb79d5dc06446600a2692298857f5bd9dab25179066b662447c6fd49","abstract_canon_sha256":"9c1fa94a00be3e70263ca899fea9630385de592a9fbe4f1c140073fc507c38df"},"schema_version":"1.0"},"canonical_sha256":"e76d4e4ed9b90c93d955f0e723e42f47bf5bb091c22ea098d548a22ed74c6969","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:11:24.167595Z","signature_b64":"0BV3T9rfH7ya7zWoXAvXLRQQfg3LiVplmiLHwnXYKker++SGTnuhj0oHTwjcLLzq47Muy+hAnOvpbp+kQr13DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e76d4e4ed9b90c93d955f0e723e42f47bf5bb091c22ea098d548a22ed74c6969","last_reissued_at":"2026-07-05T07:11:24.167158Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:11:24.167158Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.05863","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:11:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gFA4PejxM/J8CzAQCh5d65bVDnFp+NKJyfQ6dr6IYc7SiTzGs4g277cZU9qvSc3qbzsHO0sveaqmFvQTZpoOCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:15:58.884130Z"},"content_sha256":"90d91bb09853602ab0526c88b6b53060011fa30c06ce1445a1abed85ee74c573","schema_version":"1.0","event_id":"sha256:90d91bb09853602ab0526c88b6b53060011fa30c06ce1445a1abed85ee74c573"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:45WU4TWZXEGJHWKV6DTSHZBPI6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Gang Xiong, Jing Yu, Keke Gai, Qi Wu, Xiangyan Qu, Yuanmin Tang, Yue Hu","submitted_at":"2023-11-10T04:27:27Z","abstract_excerpt":"Recent advances in vision-language pre-trained models (VLPs) have significantly increased visual understanding and cross-modal analysis capabilities. Companies have emerged to provide multi-modal Embedding as a Service (EaaS) based on VLPs (e.g., CLIP-based VLPs), which cost a large amount of training data and resources for high-performance service. However, existing studies indicate that EaaS is vulnerable to model extraction attacks that induce great loss for the owners of VLPs. Protecting the intellectual property and commercial ownership of VLPs is increasingly crucial yet challenging. A m"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.05863","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.05863/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:11:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KGDXQfsPJha24eOyrXIb81907Folp+7V3NV4xh3p6UH8xCUifpFxvxKeXOvSc/rR9sGUnBfxbBWUtxcZ6vdzBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:15:58.884652Z"},"content_sha256":"0265f0d6cb5790af68f96af57a65f965fbc5cc46db08de8908094f7dcf670492","schema_version":"1.0","event_id":"sha256:0265f0d6cb5790af68f96af57a65f965fbc5cc46db08de8908094f7dcf670492"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/45WU4TWZXEGJHWKV6DTSHZBPI6/bundle.json","state_url":"https://pith.science/pith/45WU4TWZXEGJHWKV6DTSHZBPI6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/45WU4TWZXEGJHWKV6DTSHZBPI6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T12:15:58Z","links":{"resolver":"https://pith.science/pith/45WU4TWZXEGJHWKV6DTSHZBPI6","bundle":"https://pith.science/pith/45WU4TWZXEGJHWKV6DTSHZBPI6/bundle.json","state":"https://pith.science/pith/45WU4TWZXEGJHWKV6DTSHZBPI6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/45WU4TWZXEGJHWKV6DTSHZBPI6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:45WU4TWZXEGJHWKV6DTSHZBPI6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9c1fa94a00be3e70263ca899fea9630385de592a9fbe4f1c140073fc507c38df","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-10T04:27:27Z","title_canon_sha256":"489ea8fcbb79d5dc06446600a2692298857f5bd9dab25179066b662447c6fd49"},"schema_version":"1.0","source":{"id":"2311.05863","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.05863","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"arxiv_version","alias_value":"2311.05863v1","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.05863","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"pith_short_12","alias_value":"45WU4TWZXEGJ","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"pith_short_16","alias_value":"45WU4TWZXEGJHWKV","created_at":"2026-07-05T07:11:24Z"},{"alias_kind":"pith_short_8","alias_value":"45WU4TWZ","created_at":"2026-07-05T07:11:24Z"}],"graph_snapshots":[{"event_id":"sha256:0265f0d6cb5790af68f96af57a65f965fbc5cc46db08de8908094f7dcf670492","target":"graph","created_at":"2026-07-05T07:11:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.05863/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in vision-language pre-trained models (VLPs) have significantly increased visual understanding and cross-modal analysis capabilities. Companies have emerged to provide multi-modal Embedding as a Service (EaaS) based on VLPs (e.g., CLIP-based VLPs), which cost a large amount of training data and resources for high-performance service. However, existing studies indicate that EaaS is vulnerable to model extraction attacks that induce great loss for the owners of VLPs. Protecting the intellectual property and commercial ownership of VLPs is increasingly crucial yet challenging. A m","authors_text":"Gang Xiong, Jing Yu, Keke Gai, Qi Wu, Xiangyan Qu, Yuanmin Tang, Yue Hu","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-10T04:27:27Z","title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.05863","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:90d91bb09853602ab0526c88b6b53060011fa30c06ce1445a1abed85ee74c573","target":"record","created_at":"2026-07-05T07:11:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9c1fa94a00be3e70263ca899fea9630385de592a9fbe4f1c140073fc507c38df","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-10T04:27:27Z","title_canon_sha256":"489ea8fcbb79d5dc06446600a2692298857f5bd9dab25179066b662447c6fd49"},"schema_version":"1.0","source":{"id":"2311.05863","kind":"arxiv","version":1}},"canonical_sha256":"e76d4e4ed9b90c93d955f0e723e42f47bf5bb091c22ea098d548a22ed74c6969","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e76d4e4ed9b90c93d955f0e723e42f47bf5bb091c22ea098d548a22ed74c6969","first_computed_at":"2026-07-05T07:11:24.167158Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:11:24.167158Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0BV3T9rfH7ya7zWoXAvXLRQQfg3LiVplmiLHwnXYKker++SGTnuhj0oHTwjcLLzq47Muy+hAnOvpbp+kQr13DA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:11:24.167595Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.05863","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:90d91bb09853602ab0526c88b6b53060011fa30c06ce1445a1abed85ee74c573","sha256:0265f0d6cb5790af68f96af57a65f965fbc5cc46db08de8908094f7dcf670492"],"state_sha256":"0527c54c71545c9d5ce08ed54a23cef0eb005f0ef0997d4696da97e2c5012046"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S8ornDM+9VE0d8dkb1J0gi8XxMPkntxGeNLlOcrTMpcQhPJqa3A4qR+6b6S5RcJTZ9KIlLPuLm1ZbWl/jBneDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T12:15:58.889323Z","bundle_sha256":"442cea62507cc3d9c56e0ea0ebaaff92df25ae16090d9fb1157f4a6abc0091a3"}}