{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:D6HWDID2V4BHL6JSQGUPZHIBQM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6aa9b1bdc57478368b056ed7cdecd3de31398f05f267015c5b6ff8364251cf16","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-16T14:45:27Z","title_canon_sha256":"6bb5c5c8ae88e900552d8c244f12d0fd2e1f8327d022b469ed325fd24e053def"},"schema_version":"1.0","source":{"id":"2410.13907","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.13907","created_at":"2026-07-05T10:08:22Z"},{"alias_kind":"arxiv_version","alias_value":"2410.13907v2","created_at":"2026-07-05T10:08:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.13907","created_at":"2026-07-05T10:08:22Z"},{"alias_kind":"pith_short_12","alias_value":"D6HWDID2V4BH","created_at":"2026-07-05T10:08:22Z"},{"alias_kind":"pith_short_16","alias_value":"D6HWDID2V4BHL6JS","created_at":"2026-07-05T10:08:22Z"},{"alias_kind":"pith_short_8","alias_value":"D6HWDID2","created_at":"2026-07-05T10:08:22Z"}],"graph_snapshots":[{"event_id":"sha256:7b8e75706194e01110c8af02a559acb7cd6e82d8e5dcf414c83b65134a199e13","target":"graph","created_at":"2026-07-05T10:08:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.13907/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Language models (LMs) have emerged as critical intellectual property (IP) assets that necessitate protection. Although various watermarking strategies have been proposed, they remain vulnerable to Linear Functionality Equivalence Attack (LFEA), which can invalidate most existing white-box watermarks without prior knowledge of the watermarking scheme or training data. This paper analyzes and extends the attack scenarios of LFEA to the commonly employed black-box settings for LMs by considering Last-Layer outputs (dubbed LL-LFEA). We discover that the null space of the output matrix remains inva","authors_text":"Fangqi Li, Gongshen Liu, Haodong Zhao, Jinming Hu, Jinrui Sha, Peixuan Chen, Peixuan Li, Tianjie Ju, Zhuosheng Zhang","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-16T14:45:27Z","title":"NSmark: Null Space Based Black-box Watermarking Defense Framework for Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.13907","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c81eb359be7fbdd266914ef540d8e1b8b56836b092dff9371f82721e71ae6f8c","target":"record","created_at":"2026-07-05T10:08:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6aa9b1bdc57478368b056ed7cdecd3de31398f05f267015c5b6ff8364251cf16","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-16T14:45:27Z","title_canon_sha256":"6bb5c5c8ae88e900552d8c244f12d0fd2e1f8327d022b469ed325fd24e053def"},"schema_version":"1.0","source":{"id":"2410.13907","kind":"arxiv","version":2}},"canonical_sha256":"1f8f61a07aaf0275f93281a8fc9d01833797fb8ef22c480d84675c2743849f03","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1f8f61a07aaf0275f93281a8fc9d01833797fb8ef22c480d84675c2743849f03","first_computed_at":"2026-07-05T10:08:22.944718Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:08:22.944718Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2tIeAMVJu/WUPkZZ0PwwBijFM07rfOPxLxrp42bwXGTPb/cU43G04BpFvdX1drYvs+nwz9CW19VIpyD1qNG7DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:08:22.945154Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.13907","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c81eb359be7fbdd266914ef540d8e1b8b56836b092dff9371f82721e71ae6f8c","sha256:7b8e75706194e01110c8af02a559acb7cd6e82d8e5dcf414c83b65134a199e13"],"state_sha256":"f2adb527351d6cf8dfcfd94393547c8465bac2c7b0de2067e7b4121bef5aaf34"}