{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JTTOKFTBYM3USWSDPCEBQGAYP5","short_pith_number":"pith:JTTOKFTB","canonical_record":{"source":{"id":"2502.06418","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-10T12:55:08Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"65940f844d2705e7d813ef397a5ce3d4bc7611606b201d78267a5da3b2b51db5","abstract_canon_sha256":"013875e020b56799b22bce5bb25fa408f79967be7395f5be082f7211c47c45b5"},"schema_version":"1.0"},"canonical_sha256":"4ce6e51661c337495a4378881818187f4245aa42e1f53309d0407ecd16fd4ecd","source":{"kind":"arxiv","id":"2502.06418","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.06418","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"arxiv_version","alias_value":"2502.06418v1","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.06418","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"pith_short_12","alias_value":"JTTOKFTBYM3U","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"pith_short_16","alias_value":"JTTOKFTBYM3USWSD","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"pith_short_8","alias_value":"JTTOKFTB","created_at":"2026-07-05T10:12:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JTTOKFTBYM3USWSDPCEBQGAYP5","target":"record","payload":{"canonical_record":{"source":{"id":"2502.06418","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-10T12:55:08Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"65940f844d2705e7d813ef397a5ce3d4bc7611606b201d78267a5da3b2b51db5","abstract_canon_sha256":"013875e020b56799b22bce5bb25fa408f79967be7395f5be082f7211c47c45b5"},"schema_version":"1.0"},"canonical_sha256":"4ce6e51661c337495a4378881818187f4245aa42e1f53309d0407ecd16fd4ecd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:12:06.217399Z","signature_b64":"+6lGSD3bBW0BshinNnqqEzakuNDP+R2CLr8Y7pMnQxLgpxvOG9HTBY48mrJZuL8G+nK2EYtfMdjioignahKtCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4ce6e51661c337495a4378881818187f4245aa42e1f53309d0407ecd16fd4ecd","last_reissued_at":"2026-07-05T10:12:06.216916Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:12:06.216916Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.06418","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:12:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eVKf94Zna/u3mEWK13L19UpW8hkGSLtHewKOJdo7SY7F8OQJyjlPNNnkJ8b1CkL5u7cAwmnKUeW6MpzSaZrYDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:41:37.918016Z"},"content_sha256":"380889374d6fa45825437fccfd883ba99d239ab25c10a777392754ea4b4775a2","schema_version":"1.0","event_id":"sha256:380889374d6fa45825437fccfd883ba99d239ab25c10a777392754ea4b4775a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JTTOKFTBYM3USWSDPCEBQGAYP5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Bin Gong, Kui Ren, Peng Cheng, Qinglong Wang, Xinyu Zhang, YiTao Zhang, Zhongjie Ba","submitted_at":"2025-02-10T12:55:08Z","abstract_excerpt":"Watermarking plays a key role in the provenance and detection of AI-generated content. While existing methods prioritize robustness against real-world distortions (e.g., JPEG compression and noise addition), we reveal a fundamental tradeoff: such robust watermarks inherently improve the redundancy of detectable patterns encoded into images, creating exploitable information leakage. To leverage this, we propose an attack framework that extracts leakage of watermark patterns through multi-channel feature learning using a pre-trained vision model. Unlike prior works requiring massive data or dete"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.06418","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.06418/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:12:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JJi+CHoNBGkGdAI7W/XAwYP4ViiBn9VOHFAjZsoYhJY75eP22bn/eKfbPd0Mu146QqH+XDKSAPNlBEMkzX8BDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:41:37.918512Z"},"content_sha256":"0c2bd39791742e572913c4d25d4b4af6985bfc100ed23d8a695db3e2c245e742","schema_version":"1.0","event_id":"sha256:0c2bd39791742e572913c4d25d4b4af6985bfc100ed23d8a695db3e2c245e742"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JTTOKFTBYM3USWSDPCEBQGAYP5/bundle.json","state_url":"https://pith.science/pith/JTTOKFTBYM3USWSDPCEBQGAYP5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JTTOKFTBYM3USWSDPCEBQGAYP5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:41:37Z","links":{"resolver":"https://pith.science/pith/JTTOKFTBYM3USWSDPCEBQGAYP5","bundle":"https://pith.science/pith/JTTOKFTBYM3USWSDPCEBQGAYP5/bundle.json","state":"https://pith.science/pith/JTTOKFTBYM3USWSDPCEBQGAYP5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JTTOKFTBYM3USWSDPCEBQGAYP5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JTTOKFTBYM3USWSDPCEBQGAYP5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"013875e020b56799b22bce5bb25fa408f79967be7395f5be082f7211c47c45b5","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-10T12:55:08Z","title_canon_sha256":"65940f844d2705e7d813ef397a5ce3d4bc7611606b201d78267a5da3b2b51db5"},"schema_version":"1.0","source":{"id":"2502.06418","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.06418","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"arxiv_version","alias_value":"2502.06418v1","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.06418","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"pith_short_12","alias_value":"JTTOKFTBYM3U","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"pith_short_16","alias_value":"JTTOKFTBYM3USWSD","created_at":"2026-07-05T10:12:06Z"},{"alias_kind":"pith_short_8","alias_value":"JTTOKFTB","created_at":"2026-07-05T10:12:06Z"}],"graph_snapshots":[{"event_id":"sha256:0c2bd39791742e572913c4d25d4b4af6985bfc100ed23d8a695db3e2c245e742","target":"graph","created_at":"2026-07-05T10:12:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.06418/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking plays a key role in the provenance and detection of AI-generated content. While existing methods prioritize robustness against real-world distortions (e.g., JPEG compression and noise addition), we reveal a fundamental tradeoff: such robust watermarks inherently improve the redundancy of detectable patterns encoded into images, creating exploitable information leakage. To leverage this, we propose an attack framework that extracts leakage of watermark patterns through multi-channel feature learning using a pre-trained vision model. Unlike prior works requiring massive data or dete","authors_text":"Bin Gong, Kui Ren, Peng Cheng, Qinglong Wang, Xinyu Zhang, YiTao Zhang, Zhongjie Ba","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.06418","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:380889374d6fa45825437fccfd883ba99d239ab25c10a777392754ea4b4775a2","target":"record","created_at":"2026-07-05T10:12:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"013875e020b56799b22bce5bb25fa408f79967be7395f5be082f7211c47c45b5","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-10T12:55:08Z","title_canon_sha256":"65940f844d2705e7d813ef397a5ce3d4bc7611606b201d78267a5da3b2b51db5"},"schema_version":"1.0","source":{"id":"2502.06418","kind":"arxiv","version":1}},"canonical_sha256":"4ce6e51661c337495a4378881818187f4245aa42e1f53309d0407ecd16fd4ecd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4ce6e51661c337495a4378881818187f4245aa42e1f53309d0407ecd16fd4ecd","first_computed_at":"2026-07-05T10:12:06.216916Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:12:06.216916Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+6lGSD3bBW0BshinNnqqEzakuNDP+R2CLr8Y7pMnQxLgpxvOG9HTBY48mrJZuL8G+nK2EYtfMdjioignahKtCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:12:06.217399Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.06418","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:380889374d6fa45825437fccfd883ba99d239ab25c10a777392754ea4b4775a2","sha256:0c2bd39791742e572913c4d25d4b4af6985bfc100ed23d8a695db3e2c245e742"],"state_sha256":"a96f82ac6fa582286a32e8ba6ce61b57dba14838b96237cab2c669ed09c098d9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"By7WY+6f/OgY1zs1gz1UK2oWe5nN2ctVpe0RMD3tJuTLhj+d3lWCEadwamnvAYWoRQrT2yc3Zg0SdAF+4qoZAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:41:37.924144Z","bundle_sha256":"0916eec628adf70afd535e282796beb416b765e790c49657ca6476db4f2b0955"}}