{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ET2J2QRWR6G3WLQXEJRJQF6SK3","short_pith_number":"pith:ET2J2QRW","canonical_record":{"source":{"id":"2507.02606","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2025-07-03T13:30:58Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.AS"],"title_canon_sha256":"f818703b620eb731da679d7acf71eec49dc51af510d696cf8c8bb85c0d888c4b","abstract_canon_sha256":"c4a19a1e88fa18fa4dcbd5f3cba5a983236d87bb91013309f888b30a14e445dc"},"schema_version":"1.0"},"canonical_sha256":"24f49d42368f8dbb2e1722629817d256ce873f0dc7622b4d1dbe671e5b3afe9d","source":{"kind":"arxiv","id":"2507.02606","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.02606","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"arxiv_version","alias_value":"2507.02606v1","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.02606","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"pith_short_12","alias_value":"ET2J2QRWR6G3","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"pith_short_16","alias_value":"ET2J2QRWR6G3WLQX","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"pith_short_8","alias_value":"ET2J2QRW","created_at":"2026-06-09T01:05:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ET2J2QRWR6G3WLQXEJRJQF6SK3","target":"record","payload":{"canonical_record":{"source":{"id":"2507.02606","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2025-07-03T13:30:58Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.AS"],"title_canon_sha256":"f818703b620eb731da679d7acf71eec49dc51af510d696cf8c8bb85c0d888c4b","abstract_canon_sha256":"c4a19a1e88fa18fa4dcbd5f3cba5a983236d87bb91013309f888b30a14e445dc"},"schema_version":"1.0"},"canonical_sha256":"24f49d42368f8dbb2e1722629817d256ce873f0dc7622b4d1dbe671e5b3afe9d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-09T01:05:07.625699Z","signature_b64":"bOhIF/9XYMQ1IE8b6oiEb5B+CC2SPdQdcoquedU3TP+n5zLzsyQw2I2a1p56773sAKtgDRBmDlxYp/31sCIOAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"24f49d42368f8dbb2e1722629817d256ce873f0dc7622b4d1dbe671e5b3afe9d","last_reissued_at":"2026-06-09T01:05:07.624456Z","signature_status":"signed_v1","first_computed_at":"2026-06-09T01:05:07.624456Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.02606","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-09T01:05:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BiovEIhVa03deL2QSC/HsTcNOFhBGDB/iezMbN+hZ3/OgXAqy1SoyRT9lUYLHlxiJ6qqv0FZkPqlEhvgLelBCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:52:38.510226Z"},"content_sha256":"593a90426c3f13788edf861b5690aca082163face234e47479548c332e502f02","schema_version":"1.0","event_id":"sha256:593a90426c3f13788edf861b5690aca082163face234e47479548c332e502f02"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ET2J2QRWR6G3WLQXEJRJQF6SK3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"De-AntiFake: Rethinking the Protective Perturbations Against Voice Cloning Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG","eess.AS"],"primary_cat":"cs.SD","authors_text":"Chang Liu, Kejiang Chen, Nenghai Yu, Wei Fan, Weiming Zhang","submitted_at":"2025-07-03T13:30:58Z","abstract_excerpt":"The rapid advancement of speech generation models has heightened privacy and security concerns related to voice cloning (VC). Recent studies have investigated disrupting unauthorized voice cloning by introducing adversarial perturbations. However, determined attackers can mitigate these protective perturbations and successfully execute VC. In this study, we conduct the first systematic evaluation of these protective perturbations against VC under realistic threat models that include perturbation purification. Our findings reveal that while existing purification methods can neutralize a conside"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.02606","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.02606/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-09T01:05:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fjprqRUIaT4fpv2a7Ze7BKt9h3rJ7pdZqfw0xRvmhRDSzVk4ib/qQSOW12/OulXUmytkNBvMQOpZayXEUYVzAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:52:38.510763Z"},"content_sha256":"defe4c9bf045a72acc1cb1381dc849133eac478cf108af47d02d0608656912a4","schema_version":"1.0","event_id":"sha256:defe4c9bf045a72acc1cb1381dc849133eac478cf108af47d02d0608656912a4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ET2J2QRWR6G3WLQXEJRJQF6SK3/bundle.json","state_url":"https://pith.science/pith/ET2J2QRWR6G3WLQXEJRJQF6SK3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ET2J2QRWR6G3WLQXEJRJQF6SK3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T04:52:38Z","links":{"resolver":"https://pith.science/pith/ET2J2QRWR6G3WLQXEJRJQF6SK3","bundle":"https://pith.science/pith/ET2J2QRWR6G3WLQXEJRJQF6SK3/bundle.json","state":"https://pith.science/pith/ET2J2QRWR6G3WLQXEJRJQF6SK3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ET2J2QRWR6G3WLQXEJRJQF6SK3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ET2J2QRWR6G3WLQXEJRJQF6SK3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c4a19a1e88fa18fa4dcbd5f3cba5a983236d87bb91013309f888b30a14e445dc","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2025-07-03T13:30:58Z","title_canon_sha256":"f818703b620eb731da679d7acf71eec49dc51af510d696cf8c8bb85c0d888c4b"},"schema_version":"1.0","source":{"id":"2507.02606","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.02606","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"arxiv_version","alias_value":"2507.02606v1","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.02606","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"pith_short_12","alias_value":"ET2J2QRWR6G3","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"pith_short_16","alias_value":"ET2J2QRWR6G3WLQX","created_at":"2026-06-09T01:05:07Z"},{"alias_kind":"pith_short_8","alias_value":"ET2J2QRW","created_at":"2026-06-09T01:05:07Z"}],"graph_snapshots":[{"event_id":"sha256:defe4c9bf045a72acc1cb1381dc849133eac478cf108af47d02d0608656912a4","target":"graph","created_at":"2026-06-09T01:05:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.02606/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid advancement of speech generation models has heightened privacy and security concerns related to voice cloning (VC). Recent studies have investigated disrupting unauthorized voice cloning by introducing adversarial perturbations. However, determined attackers can mitigate these protective perturbations and successfully execute VC. In this study, we conduct the first systematic evaluation of these protective perturbations against VC under realistic threat models that include perturbation purification. Our findings reveal that while existing purification methods can neutralize a conside","authors_text":"Chang Liu, Kejiang Chen, Nenghai Yu, Wei Fan, Weiming Zhang","cross_cats":["cs.AI","cs.CR","cs.LG","eess.AS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2025-07-03T13:30:58Z","title":"De-AntiFake: Rethinking the Protective Perturbations Against Voice Cloning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.02606","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:593a90426c3f13788edf861b5690aca082163face234e47479548c332e502f02","target":"record","created_at":"2026-06-09T01:05:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c4a19a1e88fa18fa4dcbd5f3cba5a983236d87bb91013309f888b30a14e445dc","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2025-07-03T13:30:58Z","title_canon_sha256":"f818703b620eb731da679d7acf71eec49dc51af510d696cf8c8bb85c0d888c4b"},"schema_version":"1.0","source":{"id":"2507.02606","kind":"arxiv","version":1}},"canonical_sha256":"24f49d42368f8dbb2e1722629817d256ce873f0dc7622b4d1dbe671e5b3afe9d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"24f49d42368f8dbb2e1722629817d256ce873f0dc7622b4d1dbe671e5b3afe9d","first_computed_at":"2026-06-09T01:05:07.624456Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-09T01:05:07.624456Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bOhIF/9XYMQ1IE8b6oiEb5B+CC2SPdQdcoquedU3TP+n5zLzsyQw2I2a1p56773sAKtgDRBmDlxYp/31sCIOAw==","signature_status":"signed_v1","signed_at":"2026-06-09T01:05:07.625699Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.02606","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:593a90426c3f13788edf861b5690aca082163face234e47479548c332e502f02","sha256:defe4c9bf045a72acc1cb1381dc849133eac478cf108af47d02d0608656912a4"],"state_sha256":"ee1c2e76bee3e0869c0bf71e756f16e179a85f8cc0ad085baf1d02365c842535"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HvwvLWP4GbLoPKtc/tp/Sh5FsMAD/I4RJ/YGoXouyo/Z6gki8imc2UX0rBdHnOhG1tLgdkLXo+4ABOzX4v3aBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T04:52:38.526118Z","bundle_sha256":"84f032358d38a8ef95717a3ad5f7ca310b705445e7992ffe906f04f01215256b"}}