{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:6EEJ7DARGDAPWMBKWXKBDMGFTN","short_pith_number":"pith:6EEJ7DAR","canonical_record":{"source":{"id":"2505.14673","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-20T17:58:02Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"cc91199842da22eac8cae0510d6f5273c9f20e07b4418d69ee534466834b42f7","abstract_canon_sha256":"97dd9d2283496726425ae0d875adae71f9660875029a75f900fb2e4b92b6e4d0"},"schema_version":"1.0"},"canonical_sha256":"f1089f8c1130c0fb302ab5d411b0c59b72be8e39f461d969d1e46b71f02e3fac","source":{"kind":"arxiv","id":"2505.14673","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.14673","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"arxiv_version","alias_value":"2505.14673v1","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.14673","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"pith_short_12","alias_value":"6EEJ7DARGDAP","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"pith_short_16","alias_value":"6EEJ7DARGDAPWMBK","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"pith_short_8","alias_value":"6EEJ7DAR","created_at":"2026-07-05T11:06:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:6EEJ7DARGDAPWMBKWXKBDMGFTN","target":"record","payload":{"canonical_record":{"source":{"id":"2505.14673","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-20T17:58:02Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"cc91199842da22eac8cae0510d6f5273c9f20e07b4418d69ee534466834b42f7","abstract_canon_sha256":"97dd9d2283496726425ae0d875adae71f9660875029a75f900fb2e4b92b6e4d0"},"schema_version":"1.0"},"canonical_sha256":"f1089f8c1130c0fb302ab5d411b0c59b72be8e39f461d969d1e46b71f02e3fac","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:06:17.395870Z","signature_b64":"uoIn+VYkuJiKwNBkdbS866zl2dHkgSnulYOiW1U3FyY/v+UokWoOVN4jLqOaTWjBvQoKwhLNfHD/IefIyezYCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1089f8c1130c0fb302ab5d411b0c59b72be8e39f461d969d1e46b71f02e3fac","last_reissued_at":"2026-07-05T11:06:17.395332Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:06:17.395332Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.14673","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:06:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T7bd/HzqeSafIRACFZFPgix8z5J0ivjbe0k/3XhV7mA1zca/k4t81H0Jr4NAip39AQg5av4Tv6ZIO7m0zLfmCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T05:52:53.957072Z"},"content_sha256":"59789bdba84fc090bdb6bae0b5ad3c324be3fa33c7e5c52553f26b3ac6f26949","schema_version":"1.0","event_id":"sha256:59789bdba84fc090bdb6bae0b5ad3c324be3fa33c7e5c52553f26b3ac6f26949"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:6EEJ7DARGDAPWMBKWXKBDMGFTN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Training-Free Watermarking for Autoregressive Image Generation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CV","authors_text":"Kaiyang Zhou, Shuai Yang, Yu Tong, Zihao Pan","submitted_at":"2025-05-20T17:58:02Z","abstract_excerpt":"Invisible image watermarking can protect image ownership and prevent malicious misuse of visual generative models. However, existing generative watermarking methods are mainly designed for diffusion models while watermarking for autoregressive image generation models remains largely underexplored. We propose IndexMark, a training-free watermarking framework for autoregressive image generation models. IndexMark is inspired by the redundancy property of the codebook: replacing autoregressively generated indices with similar indices produces negligible visual differences. The core component in In"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.14673","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.14673/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:06:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QMXDM7Pr7lUwky6yhE7jXA6NNE3/rQ3VWCijBt6KtQ1hGU68tlKjZK+dykipS+DAx/zkYb5pmR/VTFpavez2BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T05:52:53.957603Z"},"content_sha256":"8cdcdcc4c05a3e191babf6a8372063831e2b3da5cea7ff2fca692c9030b628f1","schema_version":"1.0","event_id":"sha256:8cdcdcc4c05a3e191babf6a8372063831e2b3da5cea7ff2fca692c9030b628f1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6EEJ7DARGDAPWMBKWXKBDMGFTN/bundle.json","state_url":"https://pith.science/pith/6EEJ7DARGDAPWMBKWXKBDMGFTN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6EEJ7DARGDAPWMBKWXKBDMGFTN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T05:52:53Z","links":{"resolver":"https://pith.science/pith/6EEJ7DARGDAPWMBKWXKBDMGFTN","bundle":"https://pith.science/pith/6EEJ7DARGDAPWMBKWXKBDMGFTN/bundle.json","state":"https://pith.science/pith/6EEJ7DARGDAPWMBKWXKBDMGFTN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6EEJ7DARGDAPWMBKWXKBDMGFTN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:6EEJ7DARGDAPWMBKWXKBDMGFTN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"97dd9d2283496726425ae0d875adae71f9660875029a75f900fb2e4b92b6e4d0","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-20T17:58:02Z","title_canon_sha256":"cc91199842da22eac8cae0510d6f5273c9f20e07b4418d69ee534466834b42f7"},"schema_version":"1.0","source":{"id":"2505.14673","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.14673","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"arxiv_version","alias_value":"2505.14673v1","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.14673","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"pith_short_12","alias_value":"6EEJ7DARGDAP","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"pith_short_16","alias_value":"6EEJ7DARGDAPWMBK","created_at":"2026-07-05T11:06:17Z"},{"alias_kind":"pith_short_8","alias_value":"6EEJ7DAR","created_at":"2026-07-05T11:06:17Z"}],"graph_snapshots":[{"event_id":"sha256:8cdcdcc4c05a3e191babf6a8372063831e2b3da5cea7ff2fca692c9030b628f1","target":"graph","created_at":"2026-07-05T11:06:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.14673/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Invisible image watermarking can protect image ownership and prevent malicious misuse of visual generative models. However, existing generative watermarking methods are mainly designed for diffusion models while watermarking for autoregressive image generation models remains largely underexplored. We propose IndexMark, a training-free watermarking framework for autoregressive image generation models. IndexMark is inspired by the redundancy property of the codebook: replacing autoregressively generated indices with similar indices produces negligible visual differences. The core component in In","authors_text":"Kaiyang Zhou, Shuai Yang, Yu Tong, Zihao Pan","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-20T17:58:02Z","title":"Training-Free Watermarking for Autoregressive Image Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.14673","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:59789bdba84fc090bdb6bae0b5ad3c324be3fa33c7e5c52553f26b3ac6f26949","target":"record","created_at":"2026-07-05T11:06:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"97dd9d2283496726425ae0d875adae71f9660875029a75f900fb2e4b92b6e4d0","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-20T17:58:02Z","title_canon_sha256":"cc91199842da22eac8cae0510d6f5273c9f20e07b4418d69ee534466834b42f7"},"schema_version":"1.0","source":{"id":"2505.14673","kind":"arxiv","version":1}},"canonical_sha256":"f1089f8c1130c0fb302ab5d411b0c59b72be8e39f461d969d1e46b71f02e3fac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1089f8c1130c0fb302ab5d411b0c59b72be8e39f461d969d1e46b71f02e3fac","first_computed_at":"2026-07-05T11:06:17.395332Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:06:17.395332Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uoIn+VYkuJiKwNBkdbS866zl2dHkgSnulYOiW1U3FyY/v+UokWoOVN4jLqOaTWjBvQoKwhLNfHD/IefIyezYCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:06:17.395870Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.14673","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:59789bdba84fc090bdb6bae0b5ad3c324be3fa33c7e5c52553f26b3ac6f26949","sha256:8cdcdcc4c05a3e191babf6a8372063831e2b3da5cea7ff2fca692c9030b628f1"],"state_sha256":"04b5a6d25689b3823732bfdfe626d0fa9b91501de4a2f60afc2b4c7fe02ccbb4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iSjY4zMFBdjUC3/3VemMeQIVC+Ju9JTlIRcC2huOxpKbZ197rVx0/bc2M+YFrSzXh+CHHoeDeedGmif2O52gCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T05:52:53.962942Z","bundle_sha256":"99d9377e6c0a38e936dc43f0d7c9192511f16a4d540f224d9a82c4b05b9b29a2"}}