{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4EPZ5TE4M3STVNA6QOJGTXUAQM","short_pith_number":"pith:4EPZ5TE4","canonical_record":{"source":{"id":"2412.12511","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-17T03:50:13Z","cross_cats_sorted":[],"title_canon_sha256":"e23d1bece893decce549bf3b6c3ed895e683bcd64e084bad33fa7f9c7c68b481","abstract_canon_sha256":"966cc7a4265cb44f1aa4eca308001a6122198f530c20c26ed66a575de94ef5d5"},"schema_version":"1.0"},"canonical_sha256":"e11f9ecc9c66e53ab41e839269de808318f8a280e903dba9dfa4b285f77886c7","source":{"kind":"arxiv","id":"2412.12511","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12511","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12511v1","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12511","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"pith_short_12","alias_value":"4EPZ5TE4M3ST","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"pith_short_16","alias_value":"4EPZ5TE4M3STVNA6","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"pith_short_8","alias_value":"4EPZ5TE4","created_at":"2026-07-05T09:50:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4EPZ5TE4M3STVNA6QOJGTXUAQM","target":"record","payload":{"canonical_record":{"source":{"id":"2412.12511","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-17T03:50:13Z","cross_cats_sorted":[],"title_canon_sha256":"e23d1bece893decce549bf3b6c3ed895e683bcd64e084bad33fa7f9c7c68b481","abstract_canon_sha256":"966cc7a4265cb44f1aa4eca308001a6122198f530c20c26ed66a575de94ef5d5"},"schema_version":"1.0"},"canonical_sha256":"e11f9ecc9c66e53ab41e839269de808318f8a280e903dba9dfa4b285f77886c7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:50:16.129730Z","signature_b64":"xvULPFKnZYKIQ+snJkvp9ivLnijx9ihZw92sMeCrNqL8n9IOdbFXTmMEJ0NUb3W3QiJ3qR8JCX4HdL/EUbOXAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e11f9ecc9c66e53ab41e839269de808318f8a280e903dba9dfa4b285f77886c7","last_reissued_at":"2026-07-05T09:50:16.129301Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:50:16.129301Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.12511","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yywHkrcW2MbjpWWWsP98J6A+IFO8AsTZm3NZ/xreDWGiekOvwdt+xxmBOIVH4onxeALqMJjPMV5zZkR0PC/9AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T02:42:22.688460Z"},"content_sha256":"b55fad6c15599d115c3d4a6eddb1867e3ed0637a4a7df5fe748b9389442c0643","schema_version":"1.0","event_id":"sha256:b55fad6c15599d115c3d4a6eddb1867e3ed0637a4a7df5fe748b9389442c0643"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4EPZ5TE4M3STVNA6QOJGTXUAQM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Invisible Watermarks: Attacks and Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Dongjun Hwang, Raymond Luo, Sunghwan Baek, Sungwon Woo, Tom Gao","submitted_at":"2024-12-17T03:50:13Z","abstract_excerpt":"As Generative AI continues to become more accessible, the case for robust detection of generated images in order to combat misinformation is stronger than ever. Invisible watermarking methods act as identifiers of generated content, embedding image- and latent-space messages that are robust to many forms of perturbations. The majority of current research investigates full-image attacks against images with a single watermarking method applied. We introduce novel improvements to watermarking robustness as well as minimizing degradation on image quality during attack. Firstly, we examine the appl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12511","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.12511/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7V6tn7XSgJ79KXhu0qY8gN6esbFMmrRbfNIBL0jdfUV0AZJYWNlMcoKgjIVgk5L/l2AjGwP9WvJ6mF3dKAKzBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T02:42:22.689537Z"},"content_sha256":"3a35ae25e1a25ebf0e2992aeb62aca342001bfcd7dc82d4ed7d92b1d3c1e3548","schema_version":"1.0","event_id":"sha256:3a35ae25e1a25ebf0e2992aeb62aca342001bfcd7dc82d4ed7d92b1d3c1e3548"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4EPZ5TE4M3STVNA6QOJGTXUAQM/bundle.json","state_url":"https://pith.science/pith/4EPZ5TE4M3STVNA6QOJGTXUAQM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4EPZ5TE4M3STVNA6QOJGTXUAQM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T02:42:22Z","links":{"resolver":"https://pith.science/pith/4EPZ5TE4M3STVNA6QOJGTXUAQM","bundle":"https://pith.science/pith/4EPZ5TE4M3STVNA6QOJGTXUAQM/bundle.json","state":"https://pith.science/pith/4EPZ5TE4M3STVNA6QOJGTXUAQM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4EPZ5TE4M3STVNA6QOJGTXUAQM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4EPZ5TE4M3STVNA6QOJGTXUAQM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"966cc7a4265cb44f1aa4eca308001a6122198f530c20c26ed66a575de94ef5d5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-17T03:50:13Z","title_canon_sha256":"e23d1bece893decce549bf3b6c3ed895e683bcd64e084bad33fa7f9c7c68b481"},"schema_version":"1.0","source":{"id":"2412.12511","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12511","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12511v1","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12511","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"pith_short_12","alias_value":"4EPZ5TE4M3ST","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"pith_short_16","alias_value":"4EPZ5TE4M3STVNA6","created_at":"2026-07-05T09:50:16Z"},{"alias_kind":"pith_short_8","alias_value":"4EPZ5TE4","created_at":"2026-07-05T09:50:16Z"}],"graph_snapshots":[{"event_id":"sha256:3a35ae25e1a25ebf0e2992aeb62aca342001bfcd7dc82d4ed7d92b1d3c1e3548","target":"graph","created_at":"2026-07-05T09:50:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.12511/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As Generative AI continues to become more accessible, the case for robust detection of generated images in order to combat misinformation is stronger than ever. Invisible watermarking methods act as identifiers of generated content, embedding image- and latent-space messages that are robust to many forms of perturbations. The majority of current research investigates full-image attacks against images with a single watermarking method applied. We introduce novel improvements to watermarking robustness as well as minimizing degradation on image quality during attack. Firstly, we examine the appl","authors_text":"Dongjun Hwang, Raymond Luo, Sunghwan Baek, Sungwon Woo, Tom Gao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-17T03:50:13Z","title":"Invisible Watermarks: Attacks and Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12511","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b55fad6c15599d115c3d4a6eddb1867e3ed0637a4a7df5fe748b9389442c0643","target":"record","created_at":"2026-07-05T09:50:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"966cc7a4265cb44f1aa4eca308001a6122198f530c20c26ed66a575de94ef5d5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-17T03:50:13Z","title_canon_sha256":"e23d1bece893decce549bf3b6c3ed895e683bcd64e084bad33fa7f9c7c68b481"},"schema_version":"1.0","source":{"id":"2412.12511","kind":"arxiv","version":1}},"canonical_sha256":"e11f9ecc9c66e53ab41e839269de808318f8a280e903dba9dfa4b285f77886c7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e11f9ecc9c66e53ab41e839269de808318f8a280e903dba9dfa4b285f77886c7","first_computed_at":"2026-07-05T09:50:16.129301Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:50:16.129301Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xvULPFKnZYKIQ+snJkvp9ivLnijx9ihZw92sMeCrNqL8n9IOdbFXTmMEJ0NUb3W3QiJ3qR8JCX4HdL/EUbOXAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:50:16.129730Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.12511","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b55fad6c15599d115c3d4a6eddb1867e3ed0637a4a7df5fe748b9389442c0643","sha256:3a35ae25e1a25ebf0e2992aeb62aca342001bfcd7dc82d4ed7d92b1d3c1e3548"],"state_sha256":"db81032b0bf42c73bb763a1ca92e043e2138ec02226d8db426827de8b14c37bb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dlY+JUXK5kG9RXSoONkiSYKrpCd4K8ziDT0NEZj7kFUEiicmL00CcaT83x/0q22kL8DIOL6P4RHgt0KC2HnTBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T02:42:22.703447Z","bundle_sha256":"d8b85241a6d193a62aa002224f5871add2284a3dbbdad70f49edfd7cba04d8cf"}}