{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5ZKORGGM7ZDWMFOXKB2BPRVDJ2","short_pith_number":"pith:5ZKORGGM","canonical_record":{"source":{"id":"2310.11237","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-17T13:06:59Z","cross_cats_sorted":[],"title_canon_sha256":"c977463f86d9397acfbd55458c33856cf5ed4a9cfebd4a2a42c11f00f652db23","abstract_canon_sha256":"f639eee08d1fd42aefa2868773faa7f7fac06ba48a0970909919c934550edd89"},"schema_version":"1.0"},"canonical_sha256":"ee54e898ccfe476615d7507417c6a34ea75e59d8a64292411a18dc2c44b18da5","source":{"kind":"arxiv","id":"2310.11237","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.11237","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"arxiv_version","alias_value":"2310.11237v1","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.11237","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"pith_short_12","alias_value":"5ZKORGGM7ZDW","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"pith_short_16","alias_value":"5ZKORGGM7ZDWMFOX","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"pith_short_8","alias_value":"5ZKORGGM","created_at":"2026-07-05T07:01:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5ZKORGGM7ZDWMFOXKB2BPRVDJ2","target":"record","payload":{"canonical_record":{"source":{"id":"2310.11237","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-17T13:06:59Z","cross_cats_sorted":[],"title_canon_sha256":"c977463f86d9397acfbd55458c33856cf5ed4a9cfebd4a2a42c11f00f652db23","abstract_canon_sha256":"f639eee08d1fd42aefa2868773faa7f7fac06ba48a0970909919c934550edd89"},"schema_version":"1.0"},"canonical_sha256":"ee54e898ccfe476615d7507417c6a34ea75e59d8a64292411a18dc2c44b18da5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:01:52.815927Z","signature_b64":"GMzNQxxoube2yoWzhSinZun6wn0U0Aq++1URsHtB3kFjyniOWfdUYF1bb7Ug3sV9+1dMa8XM5q/HfaQp8GwGCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ee54e898ccfe476615d7507417c6a34ea75e59d8a64292411a18dc2c44b18da5","last_reissued_at":"2026-07-05T07:01:52.815443Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:01:52.815443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.11237","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:01:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oAthcTKcqODOOi6c7h7xJeMKv61trxeU359VlPz5pMk+xFVOeAaOzfUHCuxjXpl4MVy9vQTqs4Xv2qKxBqB2CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-15T09:59:21.040991Z"},"content_sha256":"5435d77aa6505572eed78899cd427afbd36534a77a9dba9c0c0255b09d0b0031","schema_version":"1.0","event_id":"sha256:5435d77aa6505572eed78899cd427afbd36534a77a9dba9c0c0255b09d0b0031"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5ZKORGGM7ZDWMFOXKB2BPRVDJ2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Watermarking LLMs with Weight Quantization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Botian Jiang, Hang Yan, Ke Ren, Linyang Li, Pengyu Wang, Xipeng Qiu","submitted_at":"2023-10-17T13:06:59Z","abstract_excerpt":"Abuse of large language models reveals high risks as large language models are being deployed at an astonishing speed. It is important to protect the model weights to avoid malicious usage that violates licenses of open-source large language models. This paper proposes a novel watermarking strategy that plants watermarks in the quantization process of large language models without pre-defined triggers during inference. The watermark works when the model is used in the fp32 mode and remains hidden when the model is quantized to int8, in this way, the users can only inference the model without f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.11237","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.11237/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:01:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jgFM6ql9tKHxTTCLCfVTgi1jGNHlTlWzF6Z9Ns0gW8XnSDxBDw3HEXQMqYBcgIfBeGr8o68g+BKZpEbVkJfqDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-15T09:59:21.041384Z"},"content_sha256":"495025c70087d3f50e53507bfddb62790bf7e3fc9798195b768db2a6e750139d","schema_version":"1.0","event_id":"sha256:495025c70087d3f50e53507bfddb62790bf7e3fc9798195b768db2a6e750139d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5ZKORGGM7ZDWMFOXKB2BPRVDJ2/bundle.json","state_url":"https://pith.science/pith/5ZKORGGM7ZDWMFOXKB2BPRVDJ2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5ZKORGGM7ZDWMFOXKB2BPRVDJ2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-15T09:59:21Z","links":{"resolver":"https://pith.science/pith/5ZKORGGM7ZDWMFOXKB2BPRVDJ2","bundle":"https://pith.science/pith/5ZKORGGM7ZDWMFOXKB2BPRVDJ2/bundle.json","state":"https://pith.science/pith/5ZKORGGM7ZDWMFOXKB2BPRVDJ2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5ZKORGGM7ZDWMFOXKB2BPRVDJ2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5ZKORGGM7ZDWMFOXKB2BPRVDJ2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f639eee08d1fd42aefa2868773faa7f7fac06ba48a0970909919c934550edd89","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-17T13:06:59Z","title_canon_sha256":"c977463f86d9397acfbd55458c33856cf5ed4a9cfebd4a2a42c11f00f652db23"},"schema_version":"1.0","source":{"id":"2310.11237","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.11237","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"arxiv_version","alias_value":"2310.11237v1","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.11237","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"pith_short_12","alias_value":"5ZKORGGM7ZDW","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"pith_short_16","alias_value":"5ZKORGGM7ZDWMFOX","created_at":"2026-07-05T07:01:52Z"},{"alias_kind":"pith_short_8","alias_value":"5ZKORGGM","created_at":"2026-07-05T07:01:52Z"}],"graph_snapshots":[{"event_id":"sha256:495025c70087d3f50e53507bfddb62790bf7e3fc9798195b768db2a6e750139d","target":"graph","created_at":"2026-07-05T07:01:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.11237/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Abuse of large language models reveals high risks as large language models are being deployed at an astonishing speed. It is important to protect the model weights to avoid malicious usage that violates licenses of open-source large language models. This paper proposes a novel watermarking strategy that plants watermarks in the quantization process of large language models without pre-defined triggers during inference. The watermark works when the model is used in the fp32 mode and remains hidden when the model is quantized to int8, in this way, the users can only inference the model without f","authors_text":"Botian Jiang, Hang Yan, Ke Ren, Linyang Li, Pengyu Wang, Xipeng Qiu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-17T13:06:59Z","title":"Watermarking LLMs with Weight Quantization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.11237","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5435d77aa6505572eed78899cd427afbd36534a77a9dba9c0c0255b09d0b0031","target":"record","created_at":"2026-07-05T07:01:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f639eee08d1fd42aefa2868773faa7f7fac06ba48a0970909919c934550edd89","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-17T13:06:59Z","title_canon_sha256":"c977463f86d9397acfbd55458c33856cf5ed4a9cfebd4a2a42c11f00f652db23"},"schema_version":"1.0","source":{"id":"2310.11237","kind":"arxiv","version":1}},"canonical_sha256":"ee54e898ccfe476615d7507417c6a34ea75e59d8a64292411a18dc2c44b18da5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ee54e898ccfe476615d7507417c6a34ea75e59d8a64292411a18dc2c44b18da5","first_computed_at":"2026-07-05T07:01:52.815443Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:01:52.815443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GMzNQxxoube2yoWzhSinZun6wn0U0Aq++1URsHtB3kFjyniOWfdUYF1bb7Ug3sV9+1dMa8XM5q/HfaQp8GwGCA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:01:52.815927Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.11237","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5435d77aa6505572eed78899cd427afbd36534a77a9dba9c0c0255b09d0b0031","sha256:495025c70087d3f50e53507bfddb62790bf7e3fc9798195b768db2a6e750139d"],"state_sha256":"3dd32db69b29f651965280ceb35647965892e69cbd0a41fad1cce2ccafae809d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x27muISQBQI9hDi6Lpohk/CrycxvcTC2dLv+8kcGBJoL8ZNujD854KuRDPN7xWb6vd/9+oEqwph+A7tWTyUECQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-15T09:59:21.043880Z","bundle_sha256":"faab3c555a9985767083d59810e18301e6dc89c894713cd59cd149b2b51d035b"}}