{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EA7AEY4ORJHFBXYLT6JS4KA4LN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36afa558ef45f21435a2ff631cd59240422977d0239f897873fd7df1665189c8","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T17:56:04Z","title_canon_sha256":"017550a496f3fe638b00e33a9c2734ee0ad0d0a3644e4390531fb94a00c9f930"},"schema_version":"1.0","source":{"id":"2407.04086","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.04086","created_at":"2026-07-05T08:40:28Z"},{"alias_kind":"arxiv_version","alias_value":"2407.04086v1","created_at":"2026-07-05T08:40:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.04086","created_at":"2026-07-05T08:40:28Z"},{"alias_kind":"pith_short_12","alias_value":"EA7AEY4ORJHF","created_at":"2026-07-05T08:40:28Z"},{"alias_kind":"pith_short_16","alias_value":"EA7AEY4ORJHFBXYL","created_at":"2026-07-05T08:40:28Z"},{"alias_kind":"pith_short_8","alias_value":"EA7AEY4O","created_at":"2026-07-05T08:40:28Z"}],"graph_snapshots":[{"event_id":"sha256:f6687b82494d442cad5948f304cefb0e6ab6c9ec9b04ba0753a042bb9e9f061b","target":"graph","created_at":"2026-07-05T08:40:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.04086/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Generative AI raises many societal concerns such as boosting disinformation and propaganda campaigns. Watermarking AI-generated content is a key technology to address these concerns and has been widely deployed in industry. However, watermarking is vulnerable to removal attacks and forgery attacks. In this work, we propose the first image watermarks with certified robustness guarantees against removal and forgery attacks. Our method leverages randomized smoothing, a popular technique to build certifiably robust classifiers and regression models. Our major technical contributions include extend","authors_text":"Jinyuan Jia, Moyang Guo, Neil Zhenqiang Gong, Yuepeng Hu, Zhengyuan Jiang","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T17:56:04Z","title":"Certifiably Robust Image Watermark"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.04086","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:01bd245d5e1e83a7b39ac9d470b47a735a1b6f777a6933432a4c76d0b50ea370","target":"record","created_at":"2026-07-05T08:40:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36afa558ef45f21435a2ff631cd59240422977d0239f897873fd7df1665189c8","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T17:56:04Z","title_canon_sha256":"017550a496f3fe638b00e33a9c2734ee0ad0d0a3644e4390531fb94a00c9f930"},"schema_version":"1.0","source":{"id":"2407.04086","kind":"arxiv","version":1}},"canonical_sha256":"203e02638e8a4e50df0b9f932e281c5b6edaf03bfd44e111b553447982fca25e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"203e02638e8a4e50df0b9f932e281c5b6edaf03bfd44e111b553447982fca25e","first_computed_at":"2026-07-05T08:40:28.460512Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:40:28.460512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"91NMerToE14Nhy7y1E9pkUaQPDLU9A7OqloCfxm2mnqOqk0wPFmi25o4J1QQMbtrgr6DMxc7c4zqBZ+sKq2VCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:40:28.460979Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.04086","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:01bd245d5e1e83a7b39ac9d470b47a735a1b6f777a6933432a4c76d0b50ea370","sha256:f6687b82494d442cad5948f304cefb0e6ab6c9ec9b04ba0753a042bb9e9f061b"],"state_sha256":"2e45e29eb6370749e994f3df01a186d988b994a7005ecafc802ad3f9cbc6de8f"}