{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LRII3UMYD7KWL7TGLDIQCVB6QM","short_pith_number":"pith:LRII3UMY","canonical_record":{"source":{"id":"2508.20718","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T12:43:21Z","cross_cats_sorted":[],"title_canon_sha256":"fe5cc87dcda69971e8f6d8e8c9412e22c8ff1dcb0dce4f0da1ae01971f8d8524","abstract_canon_sha256":"d9ed6b610cca99696c7ffecdf1bca2ba37946f0b1061ac39cc100fb758d4601f"},"schema_version":"1.0"},"canonical_sha256":"5c508dd1981fd565fe6658d101543e830e0ce8a95ab16acb4236ba16fcf74ba5","source":{"kind":"arxiv","id":"2508.20718","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.20718","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"arxiv_version","alias_value":"2508.20718v1","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.20718","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"pith_short_12","alias_value":"LRII3UMYD7KW","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"pith_short_16","alias_value":"LRII3UMYD7KWL7TG","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"pith_short_8","alias_value":"LRII3UMY","created_at":"2026-07-05T12:00:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LRII3UMYD7KWL7TGLDIQCVB6QM","target":"record","payload":{"canonical_record":{"source":{"id":"2508.20718","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T12:43:21Z","cross_cats_sorted":[],"title_canon_sha256":"fe5cc87dcda69971e8f6d8e8c9412e22c8ff1dcb0dce4f0da1ae01971f8d8524","abstract_canon_sha256":"d9ed6b610cca99696c7ffecdf1bca2ba37946f0b1061ac39cc100fb758d4601f"},"schema_version":"1.0"},"canonical_sha256":"5c508dd1981fd565fe6658d101543e830e0ce8a95ab16acb4236ba16fcf74ba5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:00:58.510976Z","signature_b64":"gfe2Jn4JJd0IJTUL9VqZhPERoOnMMrwpbzigS4erRYQTYAVG1ydKda3YvTdQjg3me4GZtUaJyR1St0xV3crEAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5c508dd1981fd565fe6658d101543e830e0ce8a95ab16acb4236ba16fcf74ba5","last_reissued_at":"2026-07-05T12:00:58.510273Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:00:58.510273Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.20718","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:00:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qHeQlWuLZpROXH7s+/QDr0QTJmlojGx14B7u9vL0n217qVyWXleIDrzkCN29mNrvGMNV1YIwzKKvlRoFNw2lCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:11:56.631033Z"},"content_sha256":"463259bee8a33c7e809d10676a208f9258406ac9c874a3dcf71ec7c78ca428a6","schema_version":"1.0","event_id":"sha256:463259bee8a33c7e809d10676a208f9258406ac9c874a3dcf71ec7c78ca428a6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LRII3UMYD7KWL7TGLDIQCVB6QM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Ruiyi Yan, Yugo Murawaki","submitted_at":"2025-08-28T12:43:21Z","abstract_excerpt":"Large language models have significantly enhanced the capacities and efficiency of text generation. On the one hand, they have improved the quality of text-based steganography. On the other hand, they have also underscored the importance of watermarking as a safeguard against malicious misuse. In this study, we focus on tokenization inconsistency (TI) between Alice and Bob in steganography and watermarking, where TI can undermine robustness. Our investigation reveals that the problematic tokens responsible for TI exhibit two key characteristics: infrequency and temporariness. Based on these fi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.20718","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.20718/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:00:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WaTn3midlxpRdINYAE2SlWs0fCn7y2ccOxgXSqRMf9HMKdczqWukoTcjprlG69VvVKZ0pErkUgxtK3NyqqUnBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:11:56.631939Z"},"content_sha256":"3dc31091d7edacb7d73985df2bc561564a0a7fdeb30462615d297acbf732d335","schema_version":"1.0","event_id":"sha256:3dc31091d7edacb7d73985df2bc561564a0a7fdeb30462615d297acbf732d335"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LRII3UMYD7KWL7TGLDIQCVB6QM/bundle.json","state_url":"https://pith.science/pith/LRII3UMYD7KWL7TGLDIQCVB6QM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LRII3UMYD7KWL7TGLDIQCVB6QM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:11:56Z","links":{"resolver":"https://pith.science/pith/LRII3UMYD7KWL7TGLDIQCVB6QM","bundle":"https://pith.science/pith/LRII3UMYD7KWL7TGLDIQCVB6QM/bundle.json","state":"https://pith.science/pith/LRII3UMYD7KWL7TGLDIQCVB6QM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LRII3UMYD7KWL7TGLDIQCVB6QM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LRII3UMYD7KWL7TGLDIQCVB6QM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d9ed6b610cca99696c7ffecdf1bca2ba37946f0b1061ac39cc100fb758d4601f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T12:43:21Z","title_canon_sha256":"fe5cc87dcda69971e8f6d8e8c9412e22c8ff1dcb0dce4f0da1ae01971f8d8524"},"schema_version":"1.0","source":{"id":"2508.20718","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.20718","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"arxiv_version","alias_value":"2508.20718v1","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.20718","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"pith_short_12","alias_value":"LRII3UMYD7KW","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"pith_short_16","alias_value":"LRII3UMYD7KWL7TG","created_at":"2026-07-05T12:00:58Z"},{"alias_kind":"pith_short_8","alias_value":"LRII3UMY","created_at":"2026-07-05T12:00:58Z"}],"graph_snapshots":[{"event_id":"sha256:3dc31091d7edacb7d73985df2bc561564a0a7fdeb30462615d297acbf732d335","target":"graph","created_at":"2026-07-05T12:00:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.20718/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models have significantly enhanced the capacities and efficiency of text generation. On the one hand, they have improved the quality of text-based steganography. On the other hand, they have also underscored the importance of watermarking as a safeguard against malicious misuse. In this study, we focus on tokenization inconsistency (TI) between Alice and Bob in steganography and watermarking, where TI can undermine robustness. Our investigation reveals that the problematic tokens responsible for TI exhibit two key characteristics: infrequency and temporariness. Based on these fi","authors_text":"Ruiyi Yan, Yugo Murawaki","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T12:43:21Z","title":"Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.20718","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:463259bee8a33c7e809d10676a208f9258406ac9c874a3dcf71ec7c78ca428a6","target":"record","created_at":"2026-07-05T12:00:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d9ed6b610cca99696c7ffecdf1bca2ba37946f0b1061ac39cc100fb758d4601f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T12:43:21Z","title_canon_sha256":"fe5cc87dcda69971e8f6d8e8c9412e22c8ff1dcb0dce4f0da1ae01971f8d8524"},"schema_version":"1.0","source":{"id":"2508.20718","kind":"arxiv","version":1}},"canonical_sha256":"5c508dd1981fd565fe6658d101543e830e0ce8a95ab16acb4236ba16fcf74ba5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5c508dd1981fd565fe6658d101543e830e0ce8a95ab16acb4236ba16fcf74ba5","first_computed_at":"2026-07-05T12:00:58.510273Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:00:58.510273Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gfe2Jn4JJd0IJTUL9VqZhPERoOnMMrwpbzigS4erRYQTYAVG1ydKda3YvTdQjg3me4GZtUaJyR1St0xV3crEAg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:00:58.510976Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.20718","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:463259bee8a33c7e809d10676a208f9258406ac9c874a3dcf71ec7c78ca428a6","sha256:3dc31091d7edacb7d73985df2bc561564a0a7fdeb30462615d297acbf732d335"],"state_sha256":"38256e98154754e9c48e5c07ef257f22e6ce07d9ae993e7352db57aa3e9f4c25"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M3E0OnU01AkpF0bWN3pyy3xXvgCvQXfIsNJRYgQFMdyyuOw8hci0DC9J5/lF28lDcAQnniaswleyd1wU0TIwDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:11:56.638116Z","bundle_sha256":"22436368ee25c25ee407f3a8ae6fed4d35826ed33ba0a8424aac4a702a966286"}}