{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HZOZHYRLKW3UQVS7SWVQKMRQGA","short_pith_number":"pith:HZOZHYRL","canonical_record":{"source":{"id":"2508.21072","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-28T17:59:59Z","cross_cats_sorted":[],"title_canon_sha256":"5f5fda65b69d0a0e94fee4114d91d99e4c1b86f44243314723745795bfd629ac","abstract_canon_sha256":"3531beca5fee7230140c7ec022a985c6d10630a84b33d6ddf7c1aaf13ab76d06"},"schema_version":"1.0"},"canonical_sha256":"3e5d93e22b55b748565f95ab05323030142e024f2ed8dfa779d3afa277f4d498","source":{"kind":"arxiv","id":"2508.21072","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.21072","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"arxiv_version","alias_value":"2508.21072v1","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.21072","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"pith_short_12","alias_value":"HZOZHYRLKW3U","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"pith_short_16","alias_value":"HZOZHYRLKW3UQVS7","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"pith_short_8","alias_value":"HZOZHYRL","created_at":"2026-07-05T12:01:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HZOZHYRLKW3UQVS7SWVQKMRQGA","target":"record","payload":{"canonical_record":{"source":{"id":"2508.21072","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-28T17:59:59Z","cross_cats_sorted":[],"title_canon_sha256":"5f5fda65b69d0a0e94fee4114d91d99e4c1b86f44243314723745795bfd629ac","abstract_canon_sha256":"3531beca5fee7230140c7ec022a985c6d10630a84b33d6ddf7c1aaf13ab76d06"},"schema_version":"1.0"},"canonical_sha256":"3e5d93e22b55b748565f95ab05323030142e024f2ed8dfa779d3afa277f4d498","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:01:16.234766Z","signature_b64":"kcwFtUg2QV4j7gYNG+g8n5/o+uVbUUku9/yF3Gdhr+sQk/il5QcboLQ35+E0IlIsjTbjZ/mdAkuR8qhG8h52Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3e5d93e22b55b748565f95ab05323030142e024f2ed8dfa779d3afa277f4d498","last_reissued_at":"2026-07-05T12:01:16.234255Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:01:16.234255Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.21072","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d68zVqXhc4Q9fxS+zRsEd91UGHOdVaJ+/40/AqpAO+4WtsMjger/c5a5V0MuxYt44CBl5BbRiYqacMwgyCk7Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:30:06.554502Z"},"content_sha256":"dac9ae3ea4add8d82e84451d57f58549fec59f5a95109c71b9a735de1bcb1780","schema_version":"1.0","event_id":"sha256:dac9ae3ea4add8d82e84451d57f58549fec59f5a95109c71b9a735de1bcb1780"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HZOZHYRLKW3UQVS7SWVQKMRQGA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Fahad Shamshad, Karthik Nandakumar, Nils Lukas, Noor Hussein, Tameem Bakr, Yahia Shaaban","submitted_at":"2025-08-28T17:59:59Z","abstract_excerpt":"Content watermarking is an important tool for the authentication and copyright protection of digital media. However, it is unclear whether existing watermarks are robust against adversarial attacks. We present the winning solution to the NeurIPS 2024 Erasing the Invisible challenge, which stress-tests watermark robustness under varying degrees of adversary knowledge. The challenge consisted of two tracks: a black-box and beige-box track, depending on whether the adversary knows which watermarking method was used by the provider. For the beige-box track, we leverage an adaptive VAE-based evasio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.21072","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.21072/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yznosC4dFnNtqr6WqQOetFma27EhvfQXMUL669jmMyxTPiH0CIjWB8I9DD7ZPI4tdaHXngkBrN3/ktxLxGL/Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:30:06.555013Z"},"content_sha256":"70a3a058284ed9bf1e6bd74d808fb99b6505c257af274cd07c99e7ab22be8e1c","schema_version":"1.0","event_id":"sha256:70a3a058284ed9bf1e6bd74d808fb99b6505c257af274cd07c99e7ab22be8e1c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HZOZHYRLKW3UQVS7SWVQKMRQGA/bundle.json","state_url":"https://pith.science/pith/HZOZHYRLKW3UQVS7SWVQKMRQGA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HZOZHYRLKW3UQVS7SWVQKMRQGA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T13:30:06Z","links":{"resolver":"https://pith.science/pith/HZOZHYRLKW3UQVS7SWVQKMRQGA","bundle":"https://pith.science/pith/HZOZHYRLKW3UQVS7SWVQKMRQGA/bundle.json","state":"https://pith.science/pith/HZOZHYRLKW3UQVS7SWVQKMRQGA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HZOZHYRLKW3UQVS7SWVQKMRQGA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HZOZHYRLKW3UQVS7SWVQKMRQGA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3531beca5fee7230140c7ec022a985c6d10630a84b33d6ddf7c1aaf13ab76d06","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-28T17:59:59Z","title_canon_sha256":"5f5fda65b69d0a0e94fee4114d91d99e4c1b86f44243314723745795bfd629ac"},"schema_version":"1.0","source":{"id":"2508.21072","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.21072","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"arxiv_version","alias_value":"2508.21072v1","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.21072","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"pith_short_12","alias_value":"HZOZHYRLKW3U","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"pith_short_16","alias_value":"HZOZHYRLKW3UQVS7","created_at":"2026-07-05T12:01:16Z"},{"alias_kind":"pith_short_8","alias_value":"HZOZHYRL","created_at":"2026-07-05T12:01:16Z"}],"graph_snapshots":[{"event_id":"sha256:70a3a058284ed9bf1e6bd74d808fb99b6505c257af274cd07c99e7ab22be8e1c","target":"graph","created_at":"2026-07-05T12:01:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.21072/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Content watermarking is an important tool for the authentication and copyright protection of digital media. However, it is unclear whether existing watermarks are robust against adversarial attacks. We present the winning solution to the NeurIPS 2024 Erasing the Invisible challenge, which stress-tests watermark robustness under varying degrees of adversary knowledge. The challenge consisted of two tracks: a black-box and beige-box track, depending on whether the adversary knows which watermarking method was used by the provider. For the beige-box track, we leverage an adaptive VAE-based evasio","authors_text":"Fahad Shamshad, Karthik Nandakumar, Nils Lukas, Noor Hussein, Tameem Bakr, Yahia Shaaban","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-28T17:59:59Z","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.21072","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dac9ae3ea4add8d82e84451d57f58549fec59f5a95109c71b9a735de1bcb1780","target":"record","created_at":"2026-07-05T12:01:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3531beca5fee7230140c7ec022a985c6d10630a84b33d6ddf7c1aaf13ab76d06","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-28T17:59:59Z","title_canon_sha256":"5f5fda65b69d0a0e94fee4114d91d99e4c1b86f44243314723745795bfd629ac"},"schema_version":"1.0","source":{"id":"2508.21072","kind":"arxiv","version":1}},"canonical_sha256":"3e5d93e22b55b748565f95ab05323030142e024f2ed8dfa779d3afa277f4d498","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3e5d93e22b55b748565f95ab05323030142e024f2ed8dfa779d3afa277f4d498","first_computed_at":"2026-07-05T12:01:16.234255Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:01:16.234255Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kcwFtUg2QV4j7gYNG+g8n5/o+uVbUUku9/yF3Gdhr+sQk/il5QcboLQ35+E0IlIsjTbjZ/mdAkuR8qhG8h52Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:01:16.234766Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.21072","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dac9ae3ea4add8d82e84451d57f58549fec59f5a95109c71b9a735de1bcb1780","sha256:70a3a058284ed9bf1e6bd74d808fb99b6505c257af274cd07c99e7ab22be8e1c"],"state_sha256":"6bf2a322f5e406a6cb92b2fc24affd02f845fcd88f77ba7706778212a365ae2d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2ODQ4aHEFO89I/4cySjAJMjcxW1glxoDAsoFBUrQyUNSYMsbwhOl4RW9KyCKXPfLdy3Xl4WocA5kB4jTjHEGDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T13:30:06.560188Z","bundle_sha256":"3d3001f6eff32b2575373241c172f15868c9c60260fda16ed31fa53a09e367d6"}}