{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:GI4J6NAKIAT42GH45TXISTB5R5","short_pith_number":"pith:GI4J6NAK","canonical_record":{"source":{"id":"2503.04636","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-06T17:24:06Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"1663d12f563544643324a8275575aba0f5ea1b13e411375ef1a7a59de1617760","abstract_canon_sha256":"f304521cbefff70fb907feb6e8b473c38fc98c02b326216a4bad108a85f8c379"},"schema_version":"1.0"},"canonical_sha256":"32389f340a4027cd18fcecee894c3d8f441036e2299806c33dc0f410f1f699fc","source":{"kind":"arxiv","id":"2503.04636","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.04636","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"arxiv_version","alias_value":"2503.04636v2","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.04636","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"pith_short_12","alias_value":"GI4J6NAKIAT4","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"pith_short_16","alias_value":"GI4J6NAKIAT42GH4","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"pith_short_8","alias_value":"GI4J6NAK","created_at":"2026-07-05T10:31:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:GI4J6NAKIAT42GH45TXISTB5R5","target":"record","payload":{"canonical_record":{"source":{"id":"2503.04636","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-06T17:24:06Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"1663d12f563544643324a8275575aba0f5ea1b13e411375ef1a7a59de1617760","abstract_canon_sha256":"f304521cbefff70fb907feb6e8b473c38fc98c02b326216a4bad108a85f8c379"},"schema_version":"1.0"},"canonical_sha256":"32389f340a4027cd18fcecee894c3d8f441036e2299806c33dc0f410f1f699fc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:31:55.707806Z","signature_b64":"Os8Hfx19hgVqbZtoDCHpKCpA+pBxdnEfAoYZhXx9BHmazBXHu3Yzmlyxm0gcY6avlpfGMh9CquOQdUHuPW4hCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"32389f340a4027cd18fcecee894c3d8f441036e2299806c33dc0f410f1f699fc","last_reissued_at":"2026-07-05T10:31:55.707327Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:31:55.707327Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.04636","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M35ShYG0ZWMnAgk/grAgQCsKfTOErTieCn82XfpjSF/xcnMKJ7TIi0U0lvrbl79mYzHQDB3IBbdpIo0pAl0cCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:38:44.477240Z"},"content_sha256":"399722dae94d27c86e40244b8ba8adb7601ebc6e2d09dfaee68b6eb699638bf5","schema_version":"1.0","event_id":"sha256:399722dae94d27c86e40244b8ba8adb7601ebc6e2d09dfaee68b6eb699638bf5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:GI4J6NAKIAT42GH45TXISTB5R5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Aiwei Liu, Hui Xiong, Lijie Wen, Xuming Hu, Yijie Xu","submitted_at":"2025-03-06T17:24:06Z","abstract_excerpt":"As open-source large language models (LLMs) like Llama3 become more capable, it is crucial to develop watermarking techniques to detect their potential misuse. Existing watermarking methods either add watermarks during LLM inference, which is unsuitable for open-source LLMs, or primarily target classification LLMs rather than recent generative LLMs. Adapting these watermarks to open-source LLMs for misuse detection remains an open challenge. This work defines two misuse scenarios for open-source LLMs: intellectual property (IP) violation and LLM Usage Violation. Then, we explore the applicatio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.04636","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.04636/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MYV47Yv8EY+SWBywFYrCvSxcw2Y0pNyKQP8e9P7cad/hGwYAPE4eJcXGJAchi9H1H5eriVyFVV//Y9TosyJBBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:38:44.477733Z"},"content_sha256":"aa0be3d8179bbca21c2a5b7d10c8741084502b024f848735cdfe20615a014d5a","schema_version":"1.0","event_id":"sha256:aa0be3d8179bbca21c2a5b7d10c8741084502b024f848735cdfe20615a014d5a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GI4J6NAKIAT42GH45TXISTB5R5/bundle.json","state_url":"https://pith.science/pith/GI4J6NAKIAT42GH45TXISTB5R5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GI4J6NAKIAT42GH45TXISTB5R5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T13:38:44Z","links":{"resolver":"https://pith.science/pith/GI4J6NAKIAT42GH45TXISTB5R5","bundle":"https://pith.science/pith/GI4J6NAKIAT42GH45TXISTB5R5/bundle.json","state":"https://pith.science/pith/GI4J6NAKIAT42GH45TXISTB5R5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GI4J6NAKIAT42GH45TXISTB5R5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:GI4J6NAKIAT42GH45TXISTB5R5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f304521cbefff70fb907feb6e8b473c38fc98c02b326216a4bad108a85f8c379","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-06T17:24:06Z","title_canon_sha256":"1663d12f563544643324a8275575aba0f5ea1b13e411375ef1a7a59de1617760"},"schema_version":"1.0","source":{"id":"2503.04636","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.04636","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"arxiv_version","alias_value":"2503.04636v2","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.04636","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"pith_short_12","alias_value":"GI4J6NAKIAT4","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"pith_short_16","alias_value":"GI4J6NAKIAT42GH4","created_at":"2026-07-05T10:31:55Z"},{"alias_kind":"pith_short_8","alias_value":"GI4J6NAK","created_at":"2026-07-05T10:31:55Z"}],"graph_snapshots":[{"event_id":"sha256:aa0be3d8179bbca21c2a5b7d10c8741084502b024f848735cdfe20615a014d5a","target":"graph","created_at":"2026-07-05T10:31:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.04636/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As open-source large language models (LLMs) like Llama3 become more capable, it is crucial to develop watermarking techniques to detect their potential misuse. Existing watermarking methods either add watermarks during LLM inference, which is unsuitable for open-source LLMs, or primarily target classification LLMs rather than recent generative LLMs. Adapting these watermarks to open-source LLMs for misuse detection remains an open challenge. This work defines two misuse scenarios for open-source LLMs: intellectual property (IP) violation and LLM Usage Violation. Then, we explore the applicatio","authors_text":"Aiwei Liu, Hui Xiong, Lijie Wen, Xuming Hu, Yijie Xu","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-06T17:24:06Z","title":"Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.04636","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:399722dae94d27c86e40244b8ba8adb7601ebc6e2d09dfaee68b6eb699638bf5","target":"record","created_at":"2026-07-05T10:31:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f304521cbefff70fb907feb6e8b473c38fc98c02b326216a4bad108a85f8c379","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-06T17:24:06Z","title_canon_sha256":"1663d12f563544643324a8275575aba0f5ea1b13e411375ef1a7a59de1617760"},"schema_version":"1.0","source":{"id":"2503.04636","kind":"arxiv","version":2}},"canonical_sha256":"32389f340a4027cd18fcecee894c3d8f441036e2299806c33dc0f410f1f699fc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"32389f340a4027cd18fcecee894c3d8f441036e2299806c33dc0f410f1f699fc","first_computed_at":"2026-07-05T10:31:55.707327Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:31:55.707327Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Os8Hfx19hgVqbZtoDCHpKCpA+pBxdnEfAoYZhXx9BHmazBXHu3Yzmlyxm0gcY6avlpfGMh9CquOQdUHuPW4hCg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:31:55.707806Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.04636","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:399722dae94d27c86e40244b8ba8adb7601ebc6e2d09dfaee68b6eb699638bf5","sha256:aa0be3d8179bbca21c2a5b7d10c8741084502b024f848735cdfe20615a014d5a"],"state_sha256":"b339ccce53550cdfc38abfc6789372b5d148d853728f524e338e3d37f51bbc9a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"apoicgdMhhiNvzENLCPqDt58x3Cop7xisb00y0Esf5sBTaDAa5H3Gjc9FcV/Dz8DSD9w9XYV0DIjodBqh6K5CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T13:38:44.482825Z","bundle_sha256":"22d9e6b15d072780bc5498a1d5d5f69f9b52df6853f8d4c9f4dff5727d16f4e1"}}