{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:6HFXZBATUZ667YBL57C4ELHL4I","short_pith_number":"pith:6HFXZBAT","canonical_record":{"source":{"id":"2507.03646","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T15:22:20Z","cross_cats_sorted":[],"title_canon_sha256":"cce153fa27936775137fbde914effa0e5bf3ad2b6d024952ba92299286bc6044","abstract_canon_sha256":"e6d15e8e9dcd74aaf2c075df9fedbfdcb17e08469afe32da4f8ad6493a35d4ac"},"schema_version":"1.0"},"canonical_sha256":"f1cb7c8413a67defe02befc5c22cebe234e312145c89f10950a0b7605e0f4533","source":{"kind":"arxiv","id":"2507.03646","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.03646","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"arxiv_version","alias_value":"2507.03646v1","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.03646","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"pith_short_12","alias_value":"6HFXZBATUZ66","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"pith_short_16","alias_value":"6HFXZBATUZ667YBL","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"pith_short_8","alias_value":"6HFXZBAT","created_at":"2026-07-05T11:32:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:6HFXZBATUZ667YBL57C4ELHL4I","target":"record","payload":{"canonical_record":{"source":{"id":"2507.03646","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T15:22:20Z","cross_cats_sorted":[],"title_canon_sha256":"cce153fa27936775137fbde914effa0e5bf3ad2b6d024952ba92299286bc6044","abstract_canon_sha256":"e6d15e8e9dcd74aaf2c075df9fedbfdcb17e08469afe32da4f8ad6493a35d4ac"},"schema_version":"1.0"},"canonical_sha256":"f1cb7c8413a67defe02befc5c22cebe234e312145c89f10950a0b7605e0f4533","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:32:03.114628Z","signature_b64":"yXtKz07VrdtUkNhAGYoPV+yc8FNeCBJIFWCzwIUEyuKjF/YcBW7aPzPVEp19dAuwqgY+RgKUt/cv1X3lM0DlCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1cb7c8413a67defe02befc5c22cebe234e312145c89f10950a0b7605e0f4533","last_reissued_at":"2026-07-05T11:32:03.114160Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:32:03.114160Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.03646","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:32:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oYuVxrJWFs3koZ7/HTOv/15AmXiYBOFxP5WJe9d7YVMWrGzPv7zXKW2XQuLiwzRSUFWaco1MP5YDVSQtv1e9AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:22:20.363599Z"},"content_sha256":"97cb4332257cda8ff760a7295e3efd05396698825a9f8b2ad54e2afcab2bf94f","schema_version":"1.0","event_id":"sha256:97cb4332257cda8ff760a7295e3efd05396698825a9f8b2ad54e2afcab2bf94f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:6HFXZBATUZ667YBL57C4ELHL4I","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-box Setting","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jianbing Ni, Tianyi Tang, Xiangman Li, Xiaodong Wu, Yong Yu","submitted_at":"2025-07-04T15:22:20Z","abstract_excerpt":"Watermarking has emerged as a promising solution to counter harmful or deceptive AI-generated content by embedding hidden identifiers that trace content origins. However, the robustness of current watermarking techniques is still largely unexplored, raising critical questions about their effectiveness against adversarial attacks. To address this gap, we examine the robustness of model-specific watermarking, where watermark embedding is integrated with text-to-image generation in models like latent diffusion models. We introduce three attack strategies: edge prediction-based, box blurring, and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.03646","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.03646/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:32:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JASGIf1uo0wZOeP9+kqfNtNK3J9WrSYQHJULFjwyAskNukgEWN8b6iAuCIZ/Ke1FGeeSySWWMU8FHyJ0DM9SBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:22:20.364111Z"},"content_sha256":"d0bb202d721959c110ea577bb6cb343d672940a3a272a2f898c04b8c1b818914","schema_version":"1.0","event_id":"sha256:d0bb202d721959c110ea577bb6cb343d672940a3a272a2f898c04b8c1b818914"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6HFXZBATUZ667YBL57C4ELHL4I/bundle.json","state_url":"https://pith.science/pith/6HFXZBATUZ667YBL57C4ELHL4I/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6HFXZBATUZ667YBL57C4ELHL4I/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T09:22:20Z","links":{"resolver":"https://pith.science/pith/6HFXZBATUZ667YBL57C4ELHL4I","bundle":"https://pith.science/pith/6HFXZBATUZ667YBL57C4ELHL4I/bundle.json","state":"https://pith.science/pith/6HFXZBATUZ667YBL57C4ELHL4I/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6HFXZBATUZ667YBL57C4ELHL4I/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:6HFXZBATUZ667YBL57C4ELHL4I","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e6d15e8e9dcd74aaf2c075df9fedbfdcb17e08469afe32da4f8ad6493a35d4ac","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T15:22:20Z","title_canon_sha256":"cce153fa27936775137fbde914effa0e5bf3ad2b6d024952ba92299286bc6044"},"schema_version":"1.0","source":{"id":"2507.03646","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.03646","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"arxiv_version","alias_value":"2507.03646v1","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.03646","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"pith_short_12","alias_value":"6HFXZBATUZ66","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"pith_short_16","alias_value":"6HFXZBATUZ667YBL","created_at":"2026-07-05T11:32:03Z"},{"alias_kind":"pith_short_8","alias_value":"6HFXZBAT","created_at":"2026-07-05T11:32:03Z"}],"graph_snapshots":[{"event_id":"sha256:d0bb202d721959c110ea577bb6cb343d672940a3a272a2f898c04b8c1b818914","target":"graph","created_at":"2026-07-05T11:32:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.03646/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking has emerged as a promising solution to counter harmful or deceptive AI-generated content by embedding hidden identifiers that trace content origins. However, the robustness of current watermarking techniques is still largely unexplored, raising critical questions about their effectiveness against adversarial attacks. To address this gap, we examine the robustness of model-specific watermarking, where watermark embedding is integrated with text-to-image generation in models like latent diffusion models. We introduce three attack strategies: edge prediction-based, box blurring, and ","authors_text":"Jianbing Ni, Tianyi Tang, Xiangman Li, Xiaodong Wu, Yong Yu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T15:22:20Z","title":"When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-box Setting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.03646","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:97cb4332257cda8ff760a7295e3efd05396698825a9f8b2ad54e2afcab2bf94f","target":"record","created_at":"2026-07-05T11:32:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e6d15e8e9dcd74aaf2c075df9fedbfdcb17e08469afe32da4f8ad6493a35d4ac","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T15:22:20Z","title_canon_sha256":"cce153fa27936775137fbde914effa0e5bf3ad2b6d024952ba92299286bc6044"},"schema_version":"1.0","source":{"id":"2507.03646","kind":"arxiv","version":1}},"canonical_sha256":"f1cb7c8413a67defe02befc5c22cebe234e312145c89f10950a0b7605e0f4533","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1cb7c8413a67defe02befc5c22cebe234e312145c89f10950a0b7605e0f4533","first_computed_at":"2026-07-05T11:32:03.114160Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:32:03.114160Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yXtKz07VrdtUkNhAGYoPV+yc8FNeCBJIFWCzwIUEyuKjF/YcBW7aPzPVEp19dAuwqgY+RgKUt/cv1X3lM0DlCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:32:03.114628Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.03646","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:97cb4332257cda8ff760a7295e3efd05396698825a9f8b2ad54e2afcab2bf94f","sha256:d0bb202d721959c110ea577bb6cb343d672940a3a272a2f898c04b8c1b818914"],"state_sha256":"3a3bc80d3daec2769730722c9bc91057675374753c53a972ea53f92a22b041f5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0OHJTFX2vIDKbNALF3ITwMtvOKlsJY96nfBV8BRDlDg3ydQfOcakIA6ieGfatOLitvZ4yjs184FZ4EgYOHb3Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T09:22:20.368209Z","bundle_sha256":"631bc7b590d5f7000e04cc1b5439a63392efbec9ae6955703da84e3ac1d4ffb1"}}