{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DXMTUAB7JWG3IY667QBC5V2SPH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bc3386a05994f3a100f77b1aab9335544c707e7b8ff610162e02a1da8f388bad","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-24T12:15:46Z","title_canon_sha256":"d99f55a12add56c7069a33714d07de1665934ac822998e089c27e1dd38826502"},"schema_version":"1.0","source":{"id":"2504.17480","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.17480","created_at":"2026-07-05T11:58:27Z"},{"alias_kind":"arxiv_version","alias_value":"2504.17480v4","created_at":"2026-07-05T11:58:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.17480","created_at":"2026-07-05T11:58:27Z"},{"alias_kind":"pith_short_12","alias_value":"DXMTUAB7JWG3","created_at":"2026-07-05T11:58:27Z"},{"alias_kind":"pith_short_16","alias_value":"DXMTUAB7JWG3IY66","created_at":"2026-07-05T11:58:27Z"},{"alias_kind":"pith_short_8","alias_value":"DXMTUAB7","created_at":"2026-07-05T11:58:27Z"}],"graph_snapshots":[{"event_id":"sha256:e5e822e08e318b46ca37706b48c2b48e8b76bd5361d345e96d571ca54c52c2ce","target":"graph","created_at":"2026-07-05T11:58:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.17480/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking has emerged as a critical technique for combating misinformation and protecting intellectual property in large language models (LLMs). A recent discovery, termed watermark radioactivity, reveals that watermarks embedded in teacher models can be inherited by student models through knowledge distillation. On the positive side, this inheritance allows for the detection of unauthorized knowledge distillation by identifying watermark traces in student models. However, the robustness of watermarks against scrubbing attacks and their unforgeability in the face of spoofing attacks under u","authors_text":"Liang He, Linlin Wang, Shunfan Zheng, Xiaoling Wang, Xin Yi, Yue Li","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-24T12:15:46Z","title":"Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.17480","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:28e3514b0887cdbdf5c9bab04bb589ac0e4b8ce71841d433b3a4e6d1996d3f08","target":"record","created_at":"2026-07-05T11:58:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bc3386a05994f3a100f77b1aab9335544c707e7b8ff610162e02a1da8f388bad","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-24T12:15:46Z","title_canon_sha256":"d99f55a12add56c7069a33714d07de1665934ac822998e089c27e1dd38826502"},"schema_version":"1.0","source":{"id":"2504.17480","kind":"arxiv","version":4}},"canonical_sha256":"1dd93a003f4d8db463defc022ed75279d2ba2bc685676f73995a6f0f3ef4d6ba","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1dd93a003f4d8db463defc022ed75279d2ba2bc685676f73995a6f0f3ef4d6ba","first_computed_at":"2026-07-05T11:58:27.814183Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:58:27.814183Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TrgSgPND8XoPTHm3usa5CFa7akGlU7qj+6bFkTZ09gjfqX9BW5IjYxughkcS2f60XdcVbLh0AsGWzilUikIVAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:58:27.814819Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.17480","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:28e3514b0887cdbdf5c9bab04bb589ac0e4b8ce71841d433b3a4e6d1996d3f08","sha256:e5e822e08e318b46ca37706b48c2b48e8b76bd5361d345e96d571ca54c52c2ce"],"state_sha256":"099f616ece681477dd324ffa4004b83f0e6ec9c84bc88ab9c05037ef9453fdc1"}