{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HUG236NWMB3OVCXGFHNSVRAZJC","short_pith_number":"pith:HUG236NW","canonical_record":{"source":{"id":"2506.19874","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:57:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"bf3c2a191d528852f161f4c73af092e76633f9f5c67af27421eeece27d775011","abstract_canon_sha256":"6355d06907d6fcd06b228b8787272b511ad835c1100eb9e7ddcfaad4938cb2f5"},"schema_version":"1.0"},"canonical_sha256":"3d0dadf9b66076ea8ae629db2ac41948993579cd40b2045ef49d5cab36b6cd86","source":{"kind":"arxiv","id":"2506.19874","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.19874","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"arxiv_version","alias_value":"2506.19874v2","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.19874","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"pith_short_12","alias_value":"HUG236NWMB3O","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"pith_short_16","alias_value":"HUG236NWMB3OVCXG","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"pith_short_8","alias_value":"HUG236NW","created_at":"2026-07-05T11:27:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HUG236NWMB3OVCXGFHNSVRAZJC","target":"record","payload":{"canonical_record":{"source":{"id":"2506.19874","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:57:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"bf3c2a191d528852f161f4c73af092e76633f9f5c67af27421eeece27d775011","abstract_canon_sha256":"6355d06907d6fcd06b228b8787272b511ad835c1100eb9e7ddcfaad4938cb2f5"},"schema_version":"1.0"},"canonical_sha256":"3d0dadf9b66076ea8ae629db2ac41948993579cd40b2045ef49d5cab36b6cd86","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:27:31.726490Z","signature_b64":"HxgHrQ5aqBWvCb8OMhiut77691srgvksokq6vcP9/pDQ/FCQ7bNdY+fYXAGk27u+JYjny8rGBrtV0txlEvNPAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3d0dadf9b66076ea8ae629db2ac41948993579cd40b2045ef49d5cab36b6cd86","last_reissued_at":"2026-07-05T11:27:31.725802Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:27:31.725802Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.19874","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:27:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K3QbmPw6LN887x/eIs4iahK9ICCyz3BEYQypGPYv759oVVumsifknX1l1c2KKtA1gQw6xePJouxF4t4edcZ3Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:52:15.305542Z"},"content_sha256":"7131673696842fe1182022a6e14f92dc2f33c9701985f6659a5c86e6aa792e5a","schema_version":"1.0","event_id":"sha256:7131673696842fe1182022a6e14f92dc2f33c9701985f6659a5c86e6aa792e5a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HUG236NWMB3OVCXGFHNSVRAZJC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Provable (In)Secure Model Weight Release Schemes","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Bintao Tang, Terry Jingchen Zhang, Wenyuan Jiang, Xin Yang, Yuhao Wang, Zimo Ji","submitted_at":"2025-06-23T11:57:41Z","abstract_excerpt":"Recent secure weight release schemes claim to enable open-source model distribution while protecting model ownership and preventing misuse. However, these approaches lack rigorous security foundations and provide only informal security guarantees. Inspired by established works in cryptography, we formalize the security of weight release schemes by introducing several concrete security definitions. We then demonstrate our definition's utility through a case study of TaylorMLP, a prominent secure weight release scheme. Our analysis reveals vulnerabilities that allow parameter extraction thus sho"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.19874","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.19874/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:27:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SBSkWZIBSYeXvImDZQ3SNQ6baaL0oCaChbrtQq5/uIGJ+IknIMx2PrMcyvJhcgvnaDL7aY2ipJNmvX7IQgRjBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:52:15.306061Z"},"content_sha256":"6472b8d0c4c61d0ad9552b952e85bd1dc8975043c8e9aed648d141f074533b3f","schema_version":"1.0","event_id":"sha256:6472b8d0c4c61d0ad9552b952e85bd1dc8975043c8e9aed648d141f074533b3f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HUG236NWMB3OVCXGFHNSVRAZJC/bundle.json","state_url":"https://pith.science/pith/HUG236NWMB3OVCXGFHNSVRAZJC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HUG236NWMB3OVCXGFHNSVRAZJC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:52:15Z","links":{"resolver":"https://pith.science/pith/HUG236NWMB3OVCXGFHNSVRAZJC","bundle":"https://pith.science/pith/HUG236NWMB3OVCXGFHNSVRAZJC/bundle.json","state":"https://pith.science/pith/HUG236NWMB3OVCXGFHNSVRAZJC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HUG236NWMB3OVCXGFHNSVRAZJC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HUG236NWMB3OVCXGFHNSVRAZJC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6355d06907d6fcd06b228b8787272b511ad835c1100eb9e7ddcfaad4938cb2f5","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:57:41Z","title_canon_sha256":"bf3c2a191d528852f161f4c73af092e76633f9f5c67af27421eeece27d775011"},"schema_version":"1.0","source":{"id":"2506.19874","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.19874","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"arxiv_version","alias_value":"2506.19874v2","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.19874","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"pith_short_12","alias_value":"HUG236NWMB3O","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"pith_short_16","alias_value":"HUG236NWMB3OVCXG","created_at":"2026-07-05T11:27:31Z"},{"alias_kind":"pith_short_8","alias_value":"HUG236NW","created_at":"2026-07-05T11:27:31Z"}],"graph_snapshots":[{"event_id":"sha256:6472b8d0c4c61d0ad9552b952e85bd1dc8975043c8e9aed648d141f074533b3f","target":"graph","created_at":"2026-07-05T11:27:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.19874/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent secure weight release schemes claim to enable open-source model distribution while protecting model ownership and preventing misuse. However, these approaches lack rigorous security foundations and provide only informal security guarantees. Inspired by established works in cryptography, we formalize the security of weight release schemes by introducing several concrete security definitions. We then demonstrate our definition's utility through a case study of TaylorMLP, a prominent secure weight release scheme. Our analysis reveals vulnerabilities that allow parameter extraction thus sho","authors_text":"Bintao Tang, Terry Jingchen Zhang, Wenyuan Jiang, Xin Yang, Yuhao Wang, Zimo Ji","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:57:41Z","title":"Towards Provable (In)Secure Model Weight Release Schemes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.19874","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7131673696842fe1182022a6e14f92dc2f33c9701985f6659a5c86e6aa792e5a","target":"record","created_at":"2026-07-05T11:27:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6355d06907d6fcd06b228b8787272b511ad835c1100eb9e7ddcfaad4938cb2f5","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:57:41Z","title_canon_sha256":"bf3c2a191d528852f161f4c73af092e76633f9f5c67af27421eeece27d775011"},"schema_version":"1.0","source":{"id":"2506.19874","kind":"arxiv","version":2}},"canonical_sha256":"3d0dadf9b66076ea8ae629db2ac41948993579cd40b2045ef49d5cab36b6cd86","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3d0dadf9b66076ea8ae629db2ac41948993579cd40b2045ef49d5cab36b6cd86","first_computed_at":"2026-07-05T11:27:31.725802Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:27:31.725802Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HxgHrQ5aqBWvCb8OMhiut77691srgvksokq6vcP9/pDQ/FCQ7bNdY+fYXAGk27u+JYjny8rGBrtV0txlEvNPAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:27:31.726490Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.19874","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7131673696842fe1182022a6e14f92dc2f33c9701985f6659a5c86e6aa792e5a","sha256:6472b8d0c4c61d0ad9552b952e85bd1dc8975043c8e9aed648d141f074533b3f"],"state_sha256":"c054e8eac6127020d2411b9f14a0eb4a50187d17d97a410a36ae0b8718f03b8d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qsAqOD6s1I5BiVCjnhgK8Ddn8ymEfSnOl0NYJmRYsR/pIUleyWHGqUqIQIW4wxX+jpYOHgRJlDQCLEoZMQY4CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:52:15.310308Z","bundle_sha256":"c32ef5140f972d4d435965520adfc606b94777bd88e26a745770791dd0646c8f"}}