{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CJ3O6V3OEX73PRSR7C72CSYBRX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"90109b9507d0bc4647ce78578dcee4bc35e29e3a8c8ae417276a081e3e8bf293","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-17T09:34:19Z","title_canon_sha256":"eece5c1acc64d880d4507988111d378e7be2c1bd8d10d2e05d6f4ba0a09e9707"},"schema_version":"1.0","source":{"id":"2502.11598","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.11598","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"arxiv_version","alias_value":"2502.11598v2","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.11598","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_12","alias_value":"CJ3O6V3OEX73","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_16","alias_value":"CJ3O6V3OEX73PRSR","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_8","alias_value":"CJ3O6V3O","created_at":"2026-07-05T11:09:08Z"}],"graph_snapshots":[{"event_id":"sha256:675f9f5054472e02db628720eaf035b535ad81ac4bd504d2046ce640693f5127","target":"graph","created_at":"2026-07-05T11:09:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.11598/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The radioactive nature of Large Language Model (LLM) watermarking enables the detection of watermarks inherited by student models when trained on the outputs of watermarked teacher models, making it a promising tool for preventing unauthorized knowledge distillation. However, the robustness of watermark radioactivity against adversarial actors remains largely unexplored. In this paper, we investigate whether student models can acquire the capabilities of teacher models through knowledge distillation while avoiding watermark inheritance. We propose two categories of watermark removal approaches","authors_text":"Aiwei Liu, Irwin King, Leyi Pan, Lijie Wen, Philip S. Yu, Shiyu Huang, Xuming Hu, Yijian Lu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-17T09:34:19Z","title":"Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.11598","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f0cf4008360501a51ed3e9696ab4c55eea3ea6ba35a001535a8a150ac5046c4a","target":"record","created_at":"2026-07-05T11:09:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"90109b9507d0bc4647ce78578dcee4bc35e29e3a8c8ae417276a081e3e8bf293","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-17T09:34:19Z","title_canon_sha256":"eece5c1acc64d880d4507988111d378e7be2c1bd8d10d2e05d6f4ba0a09e9707"},"schema_version":"1.0","source":{"id":"2502.11598","kind":"arxiv","version":2}},"canonical_sha256":"1276ef576e25ffb7c651f8bfa14b018de596884580d024b94376443510636da8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1276ef576e25ffb7c651f8bfa14b018de596884580d024b94376443510636da8","first_computed_at":"2026-07-05T11:09:08.586418Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:08.586418Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mlrIrTuoAn1YehalI8ZHf/6OcS1LaKQJ3/ctSWedZSa1FuoghKoeuItZpz4ET435JGlpWPzcTckmPaLqPuCHAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:08.586881Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.11598","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f0cf4008360501a51ed3e9696ab4c55eea3ea6ba35a001535a8a150ac5046c4a","sha256:675f9f5054472e02db628720eaf035b535ad81ac4bd504d2046ce640693f5127"],"state_sha256":"2bf81efb831fef6cc3bce7a0e851852310845f0824b0dda5c1825facd41ba3f7"}