{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:IQVGA6KVQHNAMZ5KS3OK5KXSNF","short_pith_number":"pith:IQVGA6KV","canonical_record":{"source":{"id":"2311.09535","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T03:22:53Z","cross_cats_sorted":[],"title_canon_sha256":"9dc3d7af41d523c10b181ff2b00e1135d7fb2c886df7650152ed3686d8bf28ea","abstract_canon_sha256":"89cb2cfa86a051cf45e011b4db061d617fbe6b9dfde565571d549208afb6edc0"},"schema_version":"1.0"},"canonical_sha256":"442a60795581da0667aa96dcaeaaf269437918b99523be1fee7f8f83aaac5775","source":{"kind":"arxiv","id":"2311.09535","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.09535","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"arxiv_version","alias_value":"2311.09535v3","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.09535","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"pith_short_12","alias_value":"IQVGA6KVQHNA","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"pith_short_16","alias_value":"IQVGA6KVQHNAMZ5K","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"pith_short_8","alias_value":"IQVGA6KV","created_at":"2026-07-05T08:47:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:IQVGA6KVQHNAMZ5KS3OK5KXSNF","target":"record","payload":{"canonical_record":{"source":{"id":"2311.09535","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T03:22:53Z","cross_cats_sorted":[],"title_canon_sha256":"9dc3d7af41d523c10b181ff2b00e1135d7fb2c886df7650152ed3686d8bf28ea","abstract_canon_sha256":"89cb2cfa86a051cf45e011b4db061d617fbe6b9dfde565571d549208afb6edc0"},"schema_version":"1.0"},"canonical_sha256":"442a60795581da0667aa96dcaeaaf269437918b99523be1fee7f8f83aaac5775","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:47:48.014459Z","signature_b64":"K1IpwcgqJoWv57AE2mqI+0ot2ZC8i3urdfUn1wHaAYrvb+XHXq260Zx9KcMuskoZqPTtgo6DcM9pbRI0nf/IDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"442a60795581da0667aa96dcaeaaf269437918b99523be1fee7f8f83aaac5775","last_reissued_at":"2026-07-05T08:47:48.013647Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:47:48.013647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.09535","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:47:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VNgwK5ayp3txJab8q/e5CLHTmLc7BfRhTC+FHtrZSVvQRAe5oU6OfO7+Qtomk6RSMzUcHLDq1FqKEozxKA+CCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:08:05.685962Z"},"content_sha256":"e670c8e6e8e1fbc0ffa7354d6e7393fe90bc16ec07a5c13b830cfdefd3dd0151","schema_version":"1.0","event_id":"sha256:e670c8e6e8e1fbc0ffa7354d6e7393fe90bc16ec07a5c13b830cfdefd3dd0151"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:IQVGA6KVQHNAMZ5KS3OK5KXSNF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jie Zhang, Kai Zeng, Kejiang Chen, Kunsheng Tang, Nenghai Yu, Shuai Li, Weiming Zhang","submitted_at":"2023-11-16T03:22:53Z","abstract_excerpt":"Large language models (LLMs) have demonstrated outstanding performance, making them valuable digital assets with significant commercial potential. Unfortunately, the LLM and its API are susceptible to intellectual property theft. Watermarking is a classic solution for copyright verification. However, most recent emerging LLM watermarking methods focus on identifying AI-generated texts rather than watermarking LLM itself. Only a few attempts are based on weight quantification and backdoor watermarking, which are not robust or covert enough, limiting their applicability in practice.\n  To address"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.09535","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.09535/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:47:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xJ9j46PzbY2YnZHQxtLkrK20uYxS46N86lhdNtTd3IednXLUblu5pGyhsaxDX2o+wzygaKnwWysbqHAwFBrfCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:08:05.686871Z"},"content_sha256":"7b47e3e46851094e65e32c71fa9e2a12f386f31c3d716834749eee4d141f66e8","schema_version":"1.0","event_id":"sha256:7b47e3e46851094e65e32c71fa9e2a12f386f31c3d716834749eee4d141f66e8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IQVGA6KVQHNAMZ5KS3OK5KXSNF/bundle.json","state_url":"https://pith.science/pith/IQVGA6KVQHNAMZ5KS3OK5KXSNF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IQVGA6KVQHNAMZ5KS3OK5KXSNF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T12:08:05Z","links":{"resolver":"https://pith.science/pith/IQVGA6KVQHNAMZ5KS3OK5KXSNF","bundle":"https://pith.science/pith/IQVGA6KVQHNAMZ5KS3OK5KXSNF/bundle.json","state":"https://pith.science/pith/IQVGA6KVQHNAMZ5KS3OK5KXSNF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IQVGA6KVQHNAMZ5KS3OK5KXSNF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:IQVGA6KVQHNAMZ5KS3OK5KXSNF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"89cb2cfa86a051cf45e011b4db061d617fbe6b9dfde565571d549208afb6edc0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T03:22:53Z","title_canon_sha256":"9dc3d7af41d523c10b181ff2b00e1135d7fb2c886df7650152ed3686d8bf28ea"},"schema_version":"1.0","source":{"id":"2311.09535","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.09535","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"arxiv_version","alias_value":"2311.09535v3","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.09535","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"pith_short_12","alias_value":"IQVGA6KVQHNA","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"pith_short_16","alias_value":"IQVGA6KVQHNAMZ5K","created_at":"2026-07-05T08:47:48Z"},{"alias_kind":"pith_short_8","alias_value":"IQVGA6KV","created_at":"2026-07-05T08:47:48Z"}],"graph_snapshots":[{"event_id":"sha256:7b47e3e46851094e65e32c71fa9e2a12f386f31c3d716834749eee4d141f66e8","target":"graph","created_at":"2026-07-05T08:47:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.09535/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have demonstrated outstanding performance, making them valuable digital assets with significant commercial potential. Unfortunately, the LLM and its API are susceptible to intellectual property theft. Watermarking is a classic solution for copyright verification. However, most recent emerging LLM watermarking methods focus on identifying AI-generated texts rather than watermarking LLM itself. Only a few attempts are based on weight quantification and backdoor watermarking, which are not robust or covert enough, limiting their applicability in practice.\n  To address","authors_text":"Jie Zhang, Kai Zeng, Kejiang Chen, Kunsheng Tang, Nenghai Yu, Shuai Li, Weiming Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T03:22:53Z","title":"Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.09535","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e670c8e6e8e1fbc0ffa7354d6e7393fe90bc16ec07a5c13b830cfdefd3dd0151","target":"record","created_at":"2026-07-05T08:47:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"89cb2cfa86a051cf45e011b4db061d617fbe6b9dfde565571d549208afb6edc0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T03:22:53Z","title_canon_sha256":"9dc3d7af41d523c10b181ff2b00e1135d7fb2c886df7650152ed3686d8bf28ea"},"schema_version":"1.0","source":{"id":"2311.09535","kind":"arxiv","version":3}},"canonical_sha256":"442a60795581da0667aa96dcaeaaf269437918b99523be1fee7f8f83aaac5775","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"442a60795581da0667aa96dcaeaaf269437918b99523be1fee7f8f83aaac5775","first_computed_at":"2026-07-05T08:47:48.013647Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:47:48.013647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"K1IpwcgqJoWv57AE2mqI+0ot2ZC8i3urdfUn1wHaAYrvb+XHXq260Zx9KcMuskoZqPTtgo6DcM9pbRI0nf/IDg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:47:48.014459Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.09535","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e670c8e6e8e1fbc0ffa7354d6e7393fe90bc16ec07a5c13b830cfdefd3dd0151","sha256:7b47e3e46851094e65e32c71fa9e2a12f386f31c3d716834749eee4d141f66e8"],"state_sha256":"c7a1e6e93ed13301f8c2f7c8690a151c27e97f9bb5a7a14ba05953bf623aa4bd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZatTePBJv9e3ogS0L8woKNxgaQ7ylPl6wGlbaJt6D6L7Gh0aayJKVL/wGyPo4vmOUlNV9OAIf5m3UB5NjUT2Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T12:08:05.694334Z","bundle_sha256":"97888cf1aa0fd7fd6c5346989fc0b3e51ba1e93a594052f10069d2e27e8368f3"}}