{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:F4ICRAFAKETGVHMB4CBWCPKHUI","short_pith_number":"pith:F4ICRAFA","canonical_record":{"source":{"id":"2507.20650","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:14:21Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"deeb9d2e573f60f99a70eefa258887320d68b94ba943ca485dfe629ca6923923","abstract_canon_sha256":"390add172b40aa2958d94f2c5b90f93a8dd392c8eaab43392c33fed4558fec40"},"schema_version":"1.0"},"canonical_sha256":"2f102880a051266a9d81e083613d47a21cb2d769c011a7f50a91d571b04aba90","source":{"kind":"arxiv","id":"2507.20650","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.20650","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"arxiv_version","alias_value":"2507.20650v1","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.20650","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"pith_short_12","alias_value":"F4ICRAFAKETG","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"pith_short_16","alias_value":"F4ICRAFAKETGVHMB","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"pith_short_8","alias_value":"F4ICRAFA","created_at":"2026-07-05T11:44:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:F4ICRAFAKETGVHMB4CBWCPKHUI","target":"record","payload":{"canonical_record":{"source":{"id":"2507.20650","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:14:21Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"deeb9d2e573f60f99a70eefa258887320d68b94ba943ca485dfe629ca6923923","abstract_canon_sha256":"390add172b40aa2958d94f2c5b90f93a8dd392c8eaab43392c33fed4558fec40"},"schema_version":"1.0"},"canonical_sha256":"2f102880a051266a9d81e083613d47a21cb2d769c011a7f50a91d571b04aba90","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:44:53.897158Z","signature_b64":"fijY4zfWzcCn/Bj5hQwHWIBv1SqU1zL7H5I5Q1XMuBa+Tg5Tr4B/wahQEXX2ogQH5oIIeiBcH3mKw04qC1qOCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2f102880a051266a9d81e083613d47a21cb2d769c011a7f50a91d571b04aba90","last_reissued_at":"2026-07-05T11:44:53.896684Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:44:53.896684Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.20650","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fATYVVfU/CRl7Pnrh1B4/Vsk5KT95E6S0wsEHBM4Lwy3P9uKRHULy7WnsTV4vUdL4EOnoHBmVNNiUPBJhpbEAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T18:07:15.466773Z"},"content_sha256":"a49754cf4f7d5de95709fb1b84b59a95ea2866ed95ad4cec64653b1e604dac12","schema_version":"1.0","event_id":"sha256:a49754cf4f7d5de95709fb1b84b59a95ea2866ed95ad4cec64653b1e604dac12"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:F4ICRAFAKETGVHMB4CBWCPKHUI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Hot-Swap MarkBoard: An Efficient Black-box Watermarking Approach for Large-scale Model Distribution","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Diandian Guo, Jiang Fang, Jiyan Sun, Liru Geng, Mengke Wan, Peizhuo Lv, Wei Ma, Yezeng Chen, Yinlong Liu, Zhicheng Zhang","submitted_at":"2025-07-28T09:14:21Z","abstract_excerpt":"Recently, Deep Learning (DL) models have been increasingly deployed on end-user devices as On-Device AI, offering improved efficiency and privacy. However, this deployment trend poses more serious Intellectual Property (IP) risks, as models are distributed on numerous local devices, making them vulnerable to theft and redistribution. Most existing ownership protection solutions (e.g., backdoor-based watermarking) are designed for cloud-based AI-as-a-Service (AIaaS) and are not directly applicable to large-scale distribution scenarios, where each user-specific model instance must carry a unique"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.20650","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.20650/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VKo96XVqwiquT0h+RqMBa9lDIf3oe1r78VpH5UYeYYZ9AIRXHDV42eUke4RsNkfLj0D3u1IOh9YRbuxugbX0Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T18:07:15.467322Z"},"content_sha256":"31b158c801ccc324ce0f94d86664f7a9bdeb2a6fb7b6254bf6b9a6e226f2bf22","schema_version":"1.0","event_id":"sha256:31b158c801ccc324ce0f94d86664f7a9bdeb2a6fb7b6254bf6b9a6e226f2bf22"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F4ICRAFAKETGVHMB4CBWCPKHUI/bundle.json","state_url":"https://pith.science/pith/F4ICRAFAKETGVHMB4CBWCPKHUI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F4ICRAFAKETGVHMB4CBWCPKHUI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T18:07:15Z","links":{"resolver":"https://pith.science/pith/F4ICRAFAKETGVHMB4CBWCPKHUI","bundle":"https://pith.science/pith/F4ICRAFAKETGVHMB4CBWCPKHUI/bundle.json","state":"https://pith.science/pith/F4ICRAFAKETGVHMB4CBWCPKHUI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F4ICRAFAKETGVHMB4CBWCPKHUI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:F4ICRAFAKETGVHMB4CBWCPKHUI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"390add172b40aa2958d94f2c5b90f93a8dd392c8eaab43392c33fed4558fec40","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:14:21Z","title_canon_sha256":"deeb9d2e573f60f99a70eefa258887320d68b94ba943ca485dfe629ca6923923"},"schema_version":"1.0","source":{"id":"2507.20650","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.20650","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"arxiv_version","alias_value":"2507.20650v1","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.20650","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"pith_short_12","alias_value":"F4ICRAFAKETG","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"pith_short_16","alias_value":"F4ICRAFAKETGVHMB","created_at":"2026-07-05T11:44:53Z"},{"alias_kind":"pith_short_8","alias_value":"F4ICRAFA","created_at":"2026-07-05T11:44:53Z"}],"graph_snapshots":[{"event_id":"sha256:31b158c801ccc324ce0f94d86664f7a9bdeb2a6fb7b6254bf6b9a6e226f2bf22","target":"graph","created_at":"2026-07-05T11:44:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.20650/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, Deep Learning (DL) models have been increasingly deployed on end-user devices as On-Device AI, offering improved efficiency and privacy. However, this deployment trend poses more serious Intellectual Property (IP) risks, as models are distributed on numerous local devices, making them vulnerable to theft and redistribution. Most existing ownership protection solutions (e.g., backdoor-based watermarking) are designed for cloud-based AI-as-a-Service (AIaaS) and are not directly applicable to large-scale distribution scenarios, where each user-specific model instance must carry a unique","authors_text":"Diandian Guo, Jiang Fang, Jiyan Sun, Liru Geng, Mengke Wan, Peizhuo Lv, Wei Ma, Yezeng Chen, Yinlong Liu, Zhicheng Zhang","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:14:21Z","title":"Hot-Swap MarkBoard: An Efficient Black-box Watermarking Approach for Large-scale Model Distribution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.20650","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a49754cf4f7d5de95709fb1b84b59a95ea2866ed95ad4cec64653b1e604dac12","target":"record","created_at":"2026-07-05T11:44:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"390add172b40aa2958d94f2c5b90f93a8dd392c8eaab43392c33fed4558fec40","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:14:21Z","title_canon_sha256":"deeb9d2e573f60f99a70eefa258887320d68b94ba943ca485dfe629ca6923923"},"schema_version":"1.0","source":{"id":"2507.20650","kind":"arxiv","version":1}},"canonical_sha256":"2f102880a051266a9d81e083613d47a21cb2d769c011a7f50a91d571b04aba90","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2f102880a051266a9d81e083613d47a21cb2d769c011a7f50a91d571b04aba90","first_computed_at":"2026-07-05T11:44:53.896684Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:44:53.896684Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fijY4zfWzcCn/Bj5hQwHWIBv1SqU1zL7H5I5Q1XMuBa+Tg5Tr4B/wahQEXX2ogQH5oIIeiBcH3mKw04qC1qOCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:44:53.897158Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.20650","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a49754cf4f7d5de95709fb1b84b59a95ea2866ed95ad4cec64653b1e604dac12","sha256:31b158c801ccc324ce0f94d86664f7a9bdeb2a6fb7b6254bf6b9a6e226f2bf22"],"state_sha256":"41f780677d5837a590bcc31882b12469c7e00a7cb2579f71c88e69e33b00daa6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eC/0cIH+hMh1huFLQ7al8rEBFtCgAHHuH1vv6o+bJP1DMncgG4j0oQmOPt6++B0mF9P7XGwwUgfvY2QP8G+aDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T18:07:15.472568Z","bundle_sha256":"ae4a8260e0cf8b606754b9ce4bf80084ab7880e3885d9cfcd6ee8923f2cb3c68"}}