{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KKI4WZM7O4QA4BF3IEWU2ECPKU","short_pith_number":"pith:KKI4WZM7","canonical_record":{"source":{"id":"2410.08604","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T08:00:49Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d84862bfa54c93fce1bd5964281afb667d2f3ec5404ea02ef0637d4eee884882","abstract_canon_sha256":"42aff7c80e5f4c75e74c48d81a62ea6667c743f3f53383c0013f7ef24c21536a"},"schema_version":"1.0"},"canonical_sha256":"5291cb659f77200e04bb412d4d104f551aa3c981026ff5e2c6334b6158ee521c","source":{"kind":"arxiv","id":"2410.08604","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.08604","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"arxiv_version","alias_value":"2410.08604v4","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.08604","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"pith_short_12","alias_value":"KKI4WZM7O4QA","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"pith_short_16","alias_value":"KKI4WZM7O4QA4BF3","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"pith_short_8","alias_value":"KKI4WZM7","created_at":"2026-07-05T11:03:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KKI4WZM7O4QA4BF3IEWU2ECPKU","target":"record","payload":{"canonical_record":{"source":{"id":"2410.08604","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T08:00:49Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d84862bfa54c93fce1bd5964281afb667d2f3ec5404ea02ef0637d4eee884882","abstract_canon_sha256":"42aff7c80e5f4c75e74c48d81a62ea6667c743f3f53383c0013f7ef24c21536a"},"schema_version":"1.0"},"canonical_sha256":"5291cb659f77200e04bb412d4d104f551aa3c981026ff5e2c6334b6158ee521c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:03:52.436792Z","signature_b64":"106G7xCpspVpJyiCZ+FRStbleCCgnzo+sM4X9awWRqBn4zhN7fst+R+1WW0NZNBv6/5u6aqpa78kG3c+BbgjDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5291cb659f77200e04bb412d4d104f551aa3c981026ff5e2c6334b6158ee521c","last_reissued_at":"2026-07-05T11:03:52.436327Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:03:52.436327Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.08604","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:03:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ItYBy4J1/UvNE6zxU57tQR7m8JZpSDM00zIs/o2K26zGcmMa5mckHgV1HJGMcQNa9nlPc+0mcB7PaRxDpN+DBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:48:42.109244Z"},"content_sha256":"c07a9b87d43bd6e29a8aa488c84ecdff5069771ffeefe6d089cb2b8cc2598708","schema_version":"1.0","event_id":"sha256:c07a9b87d43bd6e29a8aa488c84ecdff5069771ffeefe6d089cb2b8cc2598708"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KKI4WZM7O4QA4BF3IEWU2ECPKU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MergePrint: Merge-Resistant Fingerprints for Robust Black-box Ownership Verification of Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Futa Waseda, Koki Wataoka, Shojiro Yamabe, Tsubasa Takahashi","submitted_at":"2024-10-11T08:00:49Z","abstract_excerpt":"Protecting the intellectual property of Large Language Models (LLMs) has become increasingly critical due to the high cost of training. Model merging, which integrates multiple expert models into a single multi-task model, introduces a novel risk of unauthorized use of LLMs due to its efficient merging process. While fingerprinting techniques have been proposed for verifying model ownership, their resistance to model merging remains unexplored. To address this gap, we propose a novel fingerprinting method, MergePrint, which embeds robust fingerprints capable of surviving model merging. MergePr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.08604","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.08604/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:03:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hLnZkYv5EHzP1sVr+2seewjmq9DV+uAGIj9TAmjQ/i30MY3/x0CnydYM9aEnQM8NOUkbgDts8YUebk+PZ2s4BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:48:42.110101Z"},"content_sha256":"a633275b7ad49a0f84f6048f6c1f36754f8369e7b4b68739ae0d42f63ec2ee5d","schema_version":"1.0","event_id":"sha256:a633275b7ad49a0f84f6048f6c1f36754f8369e7b4b68739ae0d42f63ec2ee5d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KKI4WZM7O4QA4BF3IEWU2ECPKU/bundle.json","state_url":"https://pith.science/pith/KKI4WZM7O4QA4BF3IEWU2ECPKU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KKI4WZM7O4QA4BF3IEWU2ECPKU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T21:48:42Z","links":{"resolver":"https://pith.science/pith/KKI4WZM7O4QA4BF3IEWU2ECPKU","bundle":"https://pith.science/pith/KKI4WZM7O4QA4BF3IEWU2ECPKU/bundle.json","state":"https://pith.science/pith/KKI4WZM7O4QA4BF3IEWU2ECPKU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KKI4WZM7O4QA4BF3IEWU2ECPKU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KKI4WZM7O4QA4BF3IEWU2ECPKU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"42aff7c80e5f4c75e74c48d81a62ea6667c743f3f53383c0013f7ef24c21536a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T08:00:49Z","title_canon_sha256":"d84862bfa54c93fce1bd5964281afb667d2f3ec5404ea02ef0637d4eee884882"},"schema_version":"1.0","source":{"id":"2410.08604","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.08604","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"arxiv_version","alias_value":"2410.08604v4","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.08604","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"pith_short_12","alias_value":"KKI4WZM7O4QA","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"pith_short_16","alias_value":"KKI4WZM7O4QA4BF3","created_at":"2026-07-05T11:03:52Z"},{"alias_kind":"pith_short_8","alias_value":"KKI4WZM7","created_at":"2026-07-05T11:03:52Z"}],"graph_snapshots":[{"event_id":"sha256:a633275b7ad49a0f84f6048f6c1f36754f8369e7b4b68739ae0d42f63ec2ee5d","target":"graph","created_at":"2026-07-05T11:03:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.08604/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Protecting the intellectual property of Large Language Models (LLMs) has become increasingly critical due to the high cost of training. Model merging, which integrates multiple expert models into a single multi-task model, introduces a novel risk of unauthorized use of LLMs due to its efficient merging process. While fingerprinting techniques have been proposed for verifying model ownership, their resistance to model merging remains unexplored. To address this gap, we propose a novel fingerprinting method, MergePrint, which embeds robust fingerprints capable of surviving model merging. MergePr","authors_text":"Futa Waseda, Koki Wataoka, Shojiro Yamabe, Tsubasa Takahashi","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T08:00:49Z","title":"MergePrint: Merge-Resistant Fingerprints for Robust Black-box Ownership Verification of Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.08604","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c07a9b87d43bd6e29a8aa488c84ecdff5069771ffeefe6d089cb2b8cc2598708","target":"record","created_at":"2026-07-05T11:03:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"42aff7c80e5f4c75e74c48d81a62ea6667c743f3f53383c0013f7ef24c21536a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T08:00:49Z","title_canon_sha256":"d84862bfa54c93fce1bd5964281afb667d2f3ec5404ea02ef0637d4eee884882"},"schema_version":"1.0","source":{"id":"2410.08604","kind":"arxiv","version":4}},"canonical_sha256":"5291cb659f77200e04bb412d4d104f551aa3c981026ff5e2c6334b6158ee521c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5291cb659f77200e04bb412d4d104f551aa3c981026ff5e2c6334b6158ee521c","first_computed_at":"2026-07-05T11:03:52.436327Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:03:52.436327Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"106G7xCpspVpJyiCZ+FRStbleCCgnzo+sM4X9awWRqBn4zhN7fst+R+1WW0NZNBv6/5u6aqpa78kG3c+BbgjDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:03:52.436792Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.08604","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c07a9b87d43bd6e29a8aa488c84ecdff5069771ffeefe6d089cb2b8cc2598708","sha256:a633275b7ad49a0f84f6048f6c1f36754f8369e7b4b68739ae0d42f63ec2ee5d"],"state_sha256":"3bd2af4ce0e58a13e4ebd2c7bdfbfd5a0709d8ef5e418e864124dc13f618c234"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/qhUZSfe0f5RzFylINBS9Fmv9oeRmv6NNwss9gxoqiBu2q9RJ8VtitkXhzy1Q80Gq3HdRjb7UB4+rrgvYxVBBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T21:48:42.117763Z","bundle_sha256":"d295e7283c67f65ed5d4a928031ae4786a1fcbe5682311b956638df3416f1ab5"}}