{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:GOCIW2ONPTNCJ3OYXU4ZJGFKYE","short_pith_number":"pith:GOCIW2ON","canonical_record":{"source":{"id":"2310.07726","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-27T06:32:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7297956595cc4c41d6081eae10b1255236af5ab43b271c66e1cf0b534ae6c9b8","abstract_canon_sha256":"68ea65f81944f4d4b124c0fc2902c0c5ed662ecdab8f30249fff56fd424cf001"},"schema_version":"1.0"},"canonical_sha256":"33848b69cd7cda24edd8bd399498aac113ea7eeccad873607d6796d4780ab641","source":{"kind":"arxiv","id":"2310.07726","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.07726","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"arxiv_version","alias_value":"2310.07726v4","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.07726","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"pith_short_12","alias_value":"GOCIW2ONPTNC","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"pith_short_16","alias_value":"GOCIW2ONPTNCJ3OY","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"pith_short_8","alias_value":"GOCIW2ON","created_at":"2026-07-05T10:08:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:GOCIW2ONPTNCJ3OYXU4ZJGFKYE","target":"record","payload":{"canonical_record":{"source":{"id":"2310.07726","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-27T06:32:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7297956595cc4c41d6081eae10b1255236af5ab43b271c66e1cf0b534ae6c9b8","abstract_canon_sha256":"68ea65f81944f4d4b124c0fc2902c0c5ed662ecdab8f30249fff56fd424cf001"},"schema_version":"1.0"},"canonical_sha256":"33848b69cd7cda24edd8bd399498aac113ea7eeccad873607d6796d4780ab641","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:08:12.670041Z","signature_b64":"xBRBzMqvM9E8pHzkfsRY144JKpNdysLNziLTt7Cg+Ps6teQII/F6hpy6dSjYRxlI9XvwA0qKhHxnI8qSSq96DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"33848b69cd7cda24edd8bd399498aac113ea7eeccad873607d6796d4780ab641","last_reissued_at":"2026-07-05T10:08:12.669580Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:08:12.669580Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.07726","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:08:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fM3zmKy0nsyGkfGpkbzpkuphlU3D82CNeMt0+Vv+ygHZ4dnOwkHsSUByAAHdcGFaZgg4AVSbrTXlfHvMF6VbCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T07:33:03.183292Z"},"content_sha256":"388e23a99c63c176fe834ef84296acdf3fa3196a61db3f6f5cc776dc4cacab32","schema_version":"1.0","event_id":"sha256:388e23a99c63c176fe834ef84296acdf3fa3196a61db3f6f5cc776dc4cacab32"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:GOCIW2ONPTNCJ3OYXU4ZJGFKYE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Warfare:Breaking the Watermark Protection of AI-Generated Content","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Guanlin Li, Guoyin Wang, Han Qiu, Jie Zhang, Jiwei Li, Shangwei Guo, Tianwei Zhang, Yifei Chen","submitted_at":"2023-09-27T06:32:00Z","abstract_excerpt":"AI-Generated Content (AIGC) is rapidly expanding, with services using advanced generative models to create realistic images and fluent text. Regulating such content is crucial to prevent policy violations, such as unauthorized commercialization or unsafe content distribution. Watermarking is a promising solution for content attribution and verification, but we demonstrate its vulnerability to two key attacks: (1) Watermark removal, where adversaries erase embedded marks to evade regulation, and (2) Watermark forging, where they generate illicit content with forged watermarks, leading to misatt"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.07726","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.07726/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:08:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AdR3ofz9xBDWhnSStdszZXTeaoSHd0v+Smp3yb8MaxSRqN9zaCYGHgPn4TbGIcNn5MVOKtxx80Lgl47tueNHAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T07:33:03.184168Z"},"content_sha256":"4e169d2601764a393d334f81e735ea0b07378cbc96040ce7f0cd40c48b76d9d6","schema_version":"1.0","event_id":"sha256:4e169d2601764a393d334f81e735ea0b07378cbc96040ce7f0cd40c48b76d9d6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GOCIW2ONPTNCJ3OYXU4ZJGFKYE/bundle.json","state_url":"https://pith.science/pith/GOCIW2ONPTNCJ3OYXU4ZJGFKYE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GOCIW2ONPTNCJ3OYXU4ZJGFKYE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T07:33:03Z","links":{"resolver":"https://pith.science/pith/GOCIW2ONPTNCJ3OYXU4ZJGFKYE","bundle":"https://pith.science/pith/GOCIW2ONPTNCJ3OYXU4ZJGFKYE/bundle.json","state":"https://pith.science/pith/GOCIW2ONPTNCJ3OYXU4ZJGFKYE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GOCIW2ONPTNCJ3OYXU4ZJGFKYE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:GOCIW2ONPTNCJ3OYXU4ZJGFKYE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"68ea65f81944f4d4b124c0fc2902c0c5ed662ecdab8f30249fff56fd424cf001","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-27T06:32:00Z","title_canon_sha256":"7297956595cc4c41d6081eae10b1255236af5ab43b271c66e1cf0b534ae6c9b8"},"schema_version":"1.0","source":{"id":"2310.07726","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.07726","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"arxiv_version","alias_value":"2310.07726v4","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.07726","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"pith_short_12","alias_value":"GOCIW2ONPTNC","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"pith_short_16","alias_value":"GOCIW2ONPTNCJ3OY","created_at":"2026-07-05T10:08:12Z"},{"alias_kind":"pith_short_8","alias_value":"GOCIW2ON","created_at":"2026-07-05T10:08:12Z"}],"graph_snapshots":[{"event_id":"sha256:4e169d2601764a393d334f81e735ea0b07378cbc96040ce7f0cd40c48b76d9d6","target":"graph","created_at":"2026-07-05T10:08:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.07726/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI-Generated Content (AIGC) is rapidly expanding, with services using advanced generative models to create realistic images and fluent text. Regulating such content is crucial to prevent policy violations, such as unauthorized commercialization or unsafe content distribution. Watermarking is a promising solution for content attribution and verification, but we demonstrate its vulnerability to two key attacks: (1) Watermark removal, where adversaries erase embedded marks to evade regulation, and (2) Watermark forging, where they generate illicit content with forged watermarks, leading to misatt","authors_text":"Guanlin Li, Guoyin Wang, Han Qiu, Jie Zhang, Jiwei Li, Shangwei Guo, Tianwei Zhang, Yifei Chen","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-27T06:32:00Z","title":"Warfare:Breaking the Watermark Protection of AI-Generated Content"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.07726","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:388e23a99c63c176fe834ef84296acdf3fa3196a61db3f6f5cc776dc4cacab32","target":"record","created_at":"2026-07-05T10:08:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"68ea65f81944f4d4b124c0fc2902c0c5ed662ecdab8f30249fff56fd424cf001","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-27T06:32:00Z","title_canon_sha256":"7297956595cc4c41d6081eae10b1255236af5ab43b271c66e1cf0b534ae6c9b8"},"schema_version":"1.0","source":{"id":"2310.07726","kind":"arxiv","version":4}},"canonical_sha256":"33848b69cd7cda24edd8bd399498aac113ea7eeccad873607d6796d4780ab641","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"33848b69cd7cda24edd8bd399498aac113ea7eeccad873607d6796d4780ab641","first_computed_at":"2026-07-05T10:08:12.669580Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:08:12.669580Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xBRBzMqvM9E8pHzkfsRY144JKpNdysLNziLTt7Cg+Ps6teQII/F6hpy6dSjYRxlI9XvwA0qKhHxnI8qSSq96DA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:08:12.670041Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.07726","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:388e23a99c63c176fe834ef84296acdf3fa3196a61db3f6f5cc776dc4cacab32","sha256:4e169d2601764a393d334f81e735ea0b07378cbc96040ce7f0cd40c48b76d9d6"],"state_sha256":"b35b76fa70bcfd2ad3358ed9868092843d1d313492401a54f07924811493a85d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"anKemHthPdVGTT7+Z90mBPsrhZO3vZCrmco0SyzqiplcypPNKJY/BWlyYyjV4s95OSXd9vmbWdFM4qcS7/VdDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T07:33:03.192523Z","bundle_sha256":"3544780a5739985cf652a0d3a462b6d2459aa705d169941a62bcfc5bbdd7250b"}}