{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:G2WGDL37WBLSZ7FXABCRKQ7NFJ","short_pith_number":"pith:G2WGDL37","canonical_record":{"source":{"id":"2608.03539","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-04T12:16:06Z","cross_cats_sorted":[],"title_canon_sha256":"1bb12d49b7cdb3459f9e24e3a76234b5785c3252039b75d00e82148cf4e130b9","abstract_canon_sha256":"a8020de7626c38e2d96959bf568df20614928d09ca0db481066e525e637d081f"},"schema_version":"1.0"},"canonical_sha256":"36ac61af7fb0572cfcb700451543ed2a61eb321275a3bba61328724a1d71309e","source":{"kind":"arxiv","id":"2608.03539","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03539","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03539v1","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03539","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"pith_short_12","alias_value":"G2WGDL37WBLS","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"pith_short_16","alias_value":"G2WGDL37WBLSZ7FX","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"pith_short_8","alias_value":"G2WGDL37","created_at":"2026-08-05T01:36:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:G2WGDL37WBLSZ7FXABCRKQ7NFJ","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03539","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-04T12:16:06Z","cross_cats_sorted":[],"title_canon_sha256":"1bb12d49b7cdb3459f9e24e3a76234b5785c3252039b75d00e82148cf4e130b9","abstract_canon_sha256":"a8020de7626c38e2d96959bf568df20614928d09ca0db481066e525e637d081f"},"schema_version":"1.0"},"canonical_sha256":"36ac61af7fb0572cfcb700451543ed2a61eb321275a3bba61328724a1d71309e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T01:36:04.239107Z","signature_b64":"Crq51vloZCRHKJJk6RjzwFJQCCFXNTWlpmrorsSRaGEbyw+5MZ5agUXeV3Sdmz6euGpY8lfg4aTX4qeUuEu+Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"36ac61af7fb0572cfcb700451543ed2a61eb321275a3bba61328724a1d71309e","last_reissued_at":"2026-08-05T01:36:04.237591Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T01:36:04.237591Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03539","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:36:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YqzVE06pmh3NAXs8VOFXAPphD2UAbG/9aK/LmPVckrd6c58Z94iQAg/EZcvd7NAmxlL4Sua+JtecnV08UUyLDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T20:02:38.567723Z"},"content_sha256":"3c68d43e24a1864b654b05f77d2fa48e38ffe88a118d855413c8832eaa22b3ad","schema_version":"1.0","event_id":"sha256:3c68d43e24a1864b654b05f77d2fa48e38ffe88a118d855413c8832eaa22b3ad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:G2WGDL37WBLSZ7FXABCRKQ7NFJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Bokang Zeng, Jiaojiao Jiang, Rui Bao, Tong Guan, Xiaoyan Feng, Xiaoyu Li, Zheng Gao","submitted_at":"2026-08-04T12:16:06Z","abstract_excerpt":"Most in-generation diffusion watermarks embed patterns independent of the image that carries them, and attackers transplant the marks onto images the generator did not produce, resulting in forgery. Binding the mark to visual semantics prevents such transplantation, yet existing bindings anchor to a proxy image rather than the image they mark. Realizing visual-semantic binding inside generation faces two challenges. The mark derives from the image itself yet enters the sampling trajectory before that image exists, and may itself shift the semantics it binds. The binding also meets opposite sen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03539","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03539/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:36:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uN1lA0kx40obq6eIeJHGKMMRKeEv4WcHXK2XkBjawysGBACxibYoyJslDlT84fhv/NfdrgPHe6zR2BpOzmI+Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T20:02:38.568234Z"},"content_sha256":"0ba2bca159e91e1c12ce0b256c915e885681206c81a7ef4fead1a10227d10ea3","schema_version":"1.0","event_id":"sha256:0ba2bca159e91e1c12ce0b256c915e885681206c81a7ef4fead1a10227d10ea3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/G2WGDL37WBLSZ7FXABCRKQ7NFJ/bundle.json","state_url":"https://pith.science/pith/G2WGDL37WBLSZ7FXABCRKQ7NFJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/G2WGDL37WBLSZ7FXABCRKQ7NFJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T20:02:38Z","links":{"resolver":"https://pith.science/pith/G2WGDL37WBLSZ7FXABCRKQ7NFJ","bundle":"https://pith.science/pith/G2WGDL37WBLSZ7FXABCRKQ7NFJ/bundle.json","state":"https://pith.science/pith/G2WGDL37WBLSZ7FXABCRKQ7NFJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/G2WGDL37WBLSZ7FXABCRKQ7NFJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:G2WGDL37WBLSZ7FXABCRKQ7NFJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a8020de7626c38e2d96959bf568df20614928d09ca0db481066e525e637d081f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-04T12:16:06Z","title_canon_sha256":"1bb12d49b7cdb3459f9e24e3a76234b5785c3252039b75d00e82148cf4e130b9"},"schema_version":"1.0","source":{"id":"2608.03539","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03539","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03539v1","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03539","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"pith_short_12","alias_value":"G2WGDL37WBLS","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"pith_short_16","alias_value":"G2WGDL37WBLSZ7FX","created_at":"2026-08-05T01:36:04Z"},{"alias_kind":"pith_short_8","alias_value":"G2WGDL37","created_at":"2026-08-05T01:36:04Z"}],"graph_snapshots":[{"event_id":"sha256:0ba2bca159e91e1c12ce0b256c915e885681206c81a7ef4fead1a10227d10ea3","target":"graph","created_at":"2026-08-05T01:36:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03539/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Most in-generation diffusion watermarks embed patterns independent of the image that carries them, and attackers transplant the marks onto images the generator did not produce, resulting in forgery. Binding the mark to visual semantics prevents such transplantation, yet existing bindings anchor to a proxy image rather than the image they mark. Realizing visual-semantic binding inside generation faces two challenges. The mark derives from the image itself yet enters the sampling trajectory before that image exists, and may itself shift the semantics it binds. The binding also meets opposite sen","authors_text":"Bokang Zeng, Jiaojiao Jiang, Rui Bao, Tong Guan, Xiaoyan Feng, Xiaoyu Li, Zheng Gao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-04T12:16:06Z","title":"IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03539","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3c68d43e24a1864b654b05f77d2fa48e38ffe88a118d855413c8832eaa22b3ad","target":"record","created_at":"2026-08-05T01:36:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a8020de7626c38e2d96959bf568df20614928d09ca0db481066e525e637d081f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-04T12:16:06Z","title_canon_sha256":"1bb12d49b7cdb3459f9e24e3a76234b5785c3252039b75d00e82148cf4e130b9"},"schema_version":"1.0","source":{"id":"2608.03539","kind":"arxiv","version":1}},"canonical_sha256":"36ac61af7fb0572cfcb700451543ed2a61eb321275a3bba61328724a1d71309e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"36ac61af7fb0572cfcb700451543ed2a61eb321275a3bba61328724a1d71309e","first_computed_at":"2026-08-05T01:36:04.237591Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T01:36:04.237591Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Crq51vloZCRHKJJk6RjzwFJQCCFXNTWlpmrorsSRaGEbyw+5MZ5agUXeV3Sdmz6euGpY8lfg4aTX4qeUuEu+Bg==","signature_status":"signed_v1","signed_at":"2026-08-05T01:36:04.239107Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03539","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3c68d43e24a1864b654b05f77d2fa48e38ffe88a118d855413c8832eaa22b3ad","sha256:0ba2bca159e91e1c12ce0b256c915e885681206c81a7ef4fead1a10227d10ea3"],"state_sha256":"947691ffa09c84baf4bd1dd81d7cdfd6155205f6946c0670c9d2bd6b51b7c393"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nJ7wI2Xj3cQ4hBeFh1O5JSJuzfc6pR8t58P3nQA/bwN6qocF6ueL2cQyoSsTaPXLFqakrMVFSbfUzGwiw/+vCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T20:02:38.572370Z","bundle_sha256":"7e7af161e048df658c64d507c17b9e8d2f1bc9aaf6052f369700ec36a4ea939f"}}