{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:AGM7ER3KXEY5VB4L7ZRZOELC2Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a4b1a7780eb3976948fbde27cf124f5a197c14d770e36758b0ec9f922fe39111","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-28T08:41:30Z","title_canon_sha256":"69960a3aaaf5fb50fce591bc38d89b946a080ee88b35c021fb3fdcf65a3d9666"},"schema_version":"1.0","source":{"id":"2405.20777","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20777","created_at":"2026-07-05T10:18:37Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20777v3","created_at":"2026-07-05T10:18:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20777","created_at":"2026-07-05T10:18:37Z"},{"alias_kind":"pith_short_12","alias_value":"AGM7ER3KXEY5","created_at":"2026-07-05T10:18:37Z"},{"alias_kind":"pith_short_16","alias_value":"AGM7ER3KXEY5VB4L","created_at":"2026-07-05T10:18:37Z"},{"alias_kind":"pith_short_8","alias_value":"AGM7ER3K","created_at":"2026-07-05T10:18:37Z"}],"graph_snapshots":[{"event_id":"sha256:51997dc02eaa23bbe564be6d2c128ec19fbc1543f58dd42c1098cf3727cc85eb","target":"graph","created_at":"2026-07-05T10:18:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.20777/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking has emerged as a promising way to detect LLM-generated text, by augmenting LLM generations with later detectable signals. Recent work has proposed multiple families of watermarking schemes, several of which focus on preserving the LLM distribution. This distribution-preservation property is motivated by the fact that it is a tractable proxy for retaining LLM capabilities, as well as the inherently implied undetectability of the watermark by downstream users. Yet, despite much discourse around undetectability, no prior work has investigated the practical detectability of any of the","authors_text":"Martin Vechev, Nikola Jovanovi\\'c, Robin Staab, Thibaud Gloaguen","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-28T08:41:30Z","title":"Black-Box Detection of Language Model Watermarks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20777","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:248c32892a860f550b992da50e4a774f47422c28931b6274fe96f270b7f85aa6","target":"record","created_at":"2026-07-05T10:18:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a4b1a7780eb3976948fbde27cf124f5a197c14d770e36758b0ec9f922fe39111","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-28T08:41:30Z","title_canon_sha256":"69960a3aaaf5fb50fce591bc38d89b946a080ee88b35c021fb3fdcf65a3d9666"},"schema_version":"1.0","source":{"id":"2405.20777","kind":"arxiv","version":3}},"canonical_sha256":"0199f2476ab931da878bfe63971162d6631f30c0c5ac136826aac88e5d5c4633","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0199f2476ab931da878bfe63971162d6631f30c0c5ac136826aac88e5d5c4633","first_computed_at":"2026-07-05T10:18:37.623804Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:18:37.623804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gaKvBQLFVdTA2VXVdIjG/H2hl3oHhG79+ixNqRkJRJn2OTZ5Foyb7nL1FH3cH6yJ/aUZxqmPxfEb0Rw9mkh7AA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:18:37.624299Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.20777","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:248c32892a860f550b992da50e4a774f47422c28931b6274fe96f270b7f85aa6","sha256:51997dc02eaa23bbe564be6d2c128ec19fbc1543f58dd42c1098cf3727cc85eb"],"state_sha256":"4568dc7ace56c0a095d3d90676ff3937860d383c94edcdb3d4744cd4ff4f1378"}