{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:4UTRJIAWBUCADGXTV6SCZ2N5P4","short_pith_number":"pith:4UTRJIAW","canonical_record":{"source":{"id":"2506.01011","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-01T13:44:20Z","cross_cats_sorted":[],"title_canon_sha256":"babbfd651a9b170878101dc21435c601ac1e5fbcc8a94a165fa3428e2792d9ca","abstract_canon_sha256":"cb456208fd18b09246a690b5f9877a2f4f76fc093badd7affc8658b5c6ea5cd8"},"schema_version":"1.0"},"canonical_sha256":"e52714a0160d04019af3afa42ce9bd7f34a8b00d31d3afe1c435436acbcb419c","source":{"kind":"arxiv","id":"2506.01011","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01011","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01011v1","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01011","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"pith_short_12","alias_value":"4UTRJIAWBUCA","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"pith_short_16","alias_value":"4UTRJIAWBUCADGXT","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"pith_short_8","alias_value":"4UTRJIAW","created_at":"2026-07-05T11:13:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:4UTRJIAWBUCADGXTV6SCZ2N5P4","target":"record","payload":{"canonical_record":{"source":{"id":"2506.01011","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-01T13:44:20Z","cross_cats_sorted":[],"title_canon_sha256":"babbfd651a9b170878101dc21435c601ac1e5fbcc8a94a165fa3428e2792d9ca","abstract_canon_sha256":"cb456208fd18b09246a690b5f9877a2f4f76fc093badd7affc8658b5c6ea5cd8"},"schema_version":"1.0"},"canonical_sha256":"e52714a0160d04019af3afa42ce9bd7f34a8b00d31d3afe1c435436acbcb419c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:13:44.447218Z","signature_b64":"4dA7/wYSqxn/xoNYEsLVJ5Uvbzs454P4KQ1ZILRelQyk9HGN4QLLaiZdSbn+9hOzjxJuZ0jgjVvp5OuG1ZGSBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e52714a0160d04019af3afa42ce9bd7f34a8b00d31d3afe1c435436acbcb419c","last_reissued_at":"2026-07-05T11:13:44.446739Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:13:44.446739Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.01011","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:13:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zAU58xU+E49rpZ/4gSYQ3kYwoYl2UcJNqBQ4d7yVR0Aj5TFZ3QFVh0VWFL1W1MEo20DhqZOHmtWdaEn7R2WRBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T19:37:48.946552Z"},"content_sha256":"19c08311dc6654b6c0c93d10e3118bc89f37068e211c5919a1069e7f449e0912","schema_version":"1.0","event_id":"sha256:19c08311dc6654b6c0c93d10e3118bc89f37068e211c5919a1069e7f449e0912"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:4UTRJIAWBUCADGXTV6SCZ2N5P4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jinjun Wang, Sanping Zhou, Siqi Hui, Wenli Huang, Ye Deng, Yiren Song","submitted_at":"2025-06-01T13:44:20Z","abstract_excerpt":"Autoregressive (AR) image generation models have gained increasing attention for their breakthroughs in synthesis quality, highlighting the need for robust watermarking to prevent misuse. However, existing in-generation watermarking techniques are primarily designed for diffusion models, where watermarks are embedded within diffusion latent states. This design poses significant challenges for direct adaptation to AR models, which generate images sequentially through token prediction. Moreover, diffusion-based regeneration attacks can effectively erase such watermarks by perturbing diffusion la"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01011","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.01011/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:13:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IDoeozLTPEn0O/8G7YNsBOvnsDSxJy1rVLSeItpoeX78MQoj20p9hIfwIFc+R6U4hJ3z9YEA4SV6vhBvw2ExCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T19:37:48.947072Z"},"content_sha256":"f3dbcc70ccae24ec173038e22f5ad343776164244b2b7029326d2e8fb4ebd307","schema_version":"1.0","event_id":"sha256:f3dbcc70ccae24ec173038e22f5ad343776164244b2b7029326d2e8fb4ebd307"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4UTRJIAWBUCADGXTV6SCZ2N5P4/bundle.json","state_url":"https://pith.science/pith/4UTRJIAWBUCADGXTV6SCZ2N5P4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4UTRJIAWBUCADGXTV6SCZ2N5P4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T19:37:48Z","links":{"resolver":"https://pith.science/pith/4UTRJIAWBUCADGXTV6SCZ2N5P4","bundle":"https://pith.science/pith/4UTRJIAWBUCADGXTV6SCZ2N5P4/bundle.json","state":"https://pith.science/pith/4UTRJIAWBUCADGXTV6SCZ2N5P4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4UTRJIAWBUCADGXTV6SCZ2N5P4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:4UTRJIAWBUCADGXTV6SCZ2N5P4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cb456208fd18b09246a690b5f9877a2f4f76fc093badd7affc8658b5c6ea5cd8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-01T13:44:20Z","title_canon_sha256":"babbfd651a9b170878101dc21435c601ac1e5fbcc8a94a165fa3428e2792d9ca"},"schema_version":"1.0","source":{"id":"2506.01011","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01011","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01011v1","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01011","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"pith_short_12","alias_value":"4UTRJIAWBUCA","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"pith_short_16","alias_value":"4UTRJIAWBUCADGXT","created_at":"2026-07-05T11:13:44Z"},{"alias_kind":"pith_short_8","alias_value":"4UTRJIAW","created_at":"2026-07-05T11:13:44Z"}],"graph_snapshots":[{"event_id":"sha256:f3dbcc70ccae24ec173038e22f5ad343776164244b2b7029326d2e8fb4ebd307","target":"graph","created_at":"2026-07-05T11:13:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.01011/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Autoregressive (AR) image generation models have gained increasing attention for their breakthroughs in synthesis quality, highlighting the need for robust watermarking to prevent misuse. However, existing in-generation watermarking techniques are primarily designed for diffusion models, where watermarks are embedded within diffusion latent states. This design poses significant challenges for direct adaptation to AR models, which generate images sequentially through token prediction. Moreover, diffusion-based regeneration attacks can effectively erase such watermarks by perturbing diffusion la","authors_text":"Jinjun Wang, Sanping Zhou, Siqi Hui, Wenli Huang, Ye Deng, Yiren Song","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-01T13:44:20Z","title":"Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01011","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:19c08311dc6654b6c0c93d10e3118bc89f37068e211c5919a1069e7f449e0912","target":"record","created_at":"2026-07-05T11:13:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cb456208fd18b09246a690b5f9877a2f4f76fc093badd7affc8658b5c6ea5cd8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-01T13:44:20Z","title_canon_sha256":"babbfd651a9b170878101dc21435c601ac1e5fbcc8a94a165fa3428e2792d9ca"},"schema_version":"1.0","source":{"id":"2506.01011","kind":"arxiv","version":1}},"canonical_sha256":"e52714a0160d04019af3afa42ce9bd7f34a8b00d31d3afe1c435436acbcb419c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e52714a0160d04019af3afa42ce9bd7f34a8b00d31d3afe1c435436acbcb419c","first_computed_at":"2026-07-05T11:13:44.446739Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:13:44.446739Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4dA7/wYSqxn/xoNYEsLVJ5Uvbzs454P4KQ1ZILRelQyk9HGN4QLLaiZdSbn+9hOzjxJuZ0jgjVvp5OuG1ZGSBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:13:44.447218Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.01011","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:19c08311dc6654b6c0c93d10e3118bc89f37068e211c5919a1069e7f449e0912","sha256:f3dbcc70ccae24ec173038e22f5ad343776164244b2b7029326d2e8fb4ebd307"],"state_sha256":"f063fddc2e9bb858da69f76a52d9098262e443e58dae036a6a098e29960a3e5b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R+/SCRhUJVjkZtE8J9CkRNodtM+GzAOvUdkuL1ldsqVyetAIQmogevp0pthZ6ySCBXLzzBdUx7VZbRVKNrhMAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T19:37:48.952642Z","bundle_sha256":"9f4a34d5105f9af34aa27a23bf78e12754fea0530f67401e6c5829d8d203db7c"}}