{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LS3JZKDUSPGNV5XZJTO6KMUWM7","short_pith_number":"pith:LS3JZKDU","canonical_record":{"source":{"id":"2503.10269","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-13T11:25:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"82d547582241f7dc8cb0d1eea8d829b2d20aa2aa0bbeb956f2998accd19019d4","abstract_canon_sha256":"4e6825a7450035835009adbf0290515109f66ba13c8cc0465818e89c5beb7a09"},"schema_version":"1.0"},"canonical_sha256":"5cb69ca87493ccdaf6f94cdde5329667ea4cc1ffc446034ba85e86326c9b231d","source":{"kind":"arxiv","id":"2503.10269","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.10269","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"arxiv_version","alias_value":"2503.10269v1","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.10269","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"pith_short_12","alias_value":"LS3JZKDUSPGN","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"pith_short_16","alias_value":"LS3JZKDUSPGNV5XZ","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"pith_short_8","alias_value":"LS3JZKDU","created_at":"2026-07-05T10:30:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LS3JZKDUSPGNV5XZJTO6KMUWM7","target":"record","payload":{"canonical_record":{"source":{"id":"2503.10269","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-13T11:25:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"82d547582241f7dc8cb0d1eea8d829b2d20aa2aa0bbeb956f2998accd19019d4","abstract_canon_sha256":"4e6825a7450035835009adbf0290515109f66ba13c8cc0465818e89c5beb7a09"},"schema_version":"1.0"},"canonical_sha256":"5cb69ca87493ccdaf6f94cdde5329667ea4cc1ffc446034ba85e86326c9b231d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:30:41.757061Z","signature_b64":"yHvRC9RXUKaNYelYusn8v0Og61OlJ6841DYkXJoyH/D2yd8XeCL9825NFzIX9eCwOOwU9DkF+XWXECEcD3WKBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5cb69ca87493ccdaf6f94cdde5329667ea4cc1ffc446034ba85e86326c9b231d","last_reissued_at":"2026-07-05T10:30:41.756555Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:30:41.756555Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.10269","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:30:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OY8X8X6yrvRlRtZbvIydXVBBmC3oF8N1lkUfeKIh49fKxKfI1Bqh61BnxLGsnv9fQ89k7vbzob3MjXj+nmiYBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T18:03:38.406111Z"},"content_sha256":"e0fb8f4d5edbb7a4a99c7a5780ff8d5bd8ee3837e5bfb9e92ccc84c037eed186","schema_version":"1.0","event_id":"sha256:e0fb8f4d5edbb7a4a99c7a5780ff8d5bd8ee3837e5bfb9e92ccc84c037eed186"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LS3JZKDUSPGNV5XZJTO6KMUWM7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verification","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"El-Mahdi El-Mhamdi, Nicolas Usunier, Wassim Bouaziz","submitted_at":"2025-03-13T11:25:25Z","abstract_excerpt":"Protecting the use of audio datasets is a major concern for data owners, particularly with the recent rise of audio deep learning models. While watermarks can be used to protect the data itself, they do not allow to identify a deep learning model trained on a protected dataset. In this paper, we adapt to audio data the recently introduced data taggants approach. Data taggants is a method to verify if a neural network was trained on a protected image dataset with top-$k$ predictions access to the model only. This method relies on a targeted data poisoning scheme by discreetly altering a small f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.10269","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.10269/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:30:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aEmgchmhM4AVqWuMF6kzga4MmouPf2YJgy70fr+enYkziksYNvpqQG57HcP6IWMlYFXTyPZzVP9wAiF6OpwyCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T18:03:38.406499Z"},"content_sha256":"a73bb2cf6303f206780154ccbd1aaecd777f4d327edd40b710346732f5aa2fc3","schema_version":"1.0","event_id":"sha256:a73bb2cf6303f206780154ccbd1aaecd777f4d327edd40b710346732f5aa2fc3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LS3JZKDUSPGNV5XZJTO6KMUWM7/bundle.json","state_url":"https://pith.science/pith/LS3JZKDUSPGNV5XZJTO6KMUWM7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LS3JZKDUSPGNV5XZJTO6KMUWM7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-12T18:03:38Z","links":{"resolver":"https://pith.science/pith/LS3JZKDUSPGNV5XZJTO6KMUWM7","bundle":"https://pith.science/pith/LS3JZKDUSPGNV5XZJTO6KMUWM7/bundle.json","state":"https://pith.science/pith/LS3JZKDUSPGNV5XZJTO6KMUWM7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LS3JZKDUSPGNV5XZJTO6KMUWM7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LS3JZKDUSPGNV5XZJTO6KMUWM7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4e6825a7450035835009adbf0290515109f66ba13c8cc0465818e89c5beb7a09","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-13T11:25:25Z","title_canon_sha256":"82d547582241f7dc8cb0d1eea8d829b2d20aa2aa0bbeb956f2998accd19019d4"},"schema_version":"1.0","source":{"id":"2503.10269","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.10269","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"arxiv_version","alias_value":"2503.10269v1","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.10269","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"pith_short_12","alias_value":"LS3JZKDUSPGN","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"pith_short_16","alias_value":"LS3JZKDUSPGNV5XZ","created_at":"2026-07-05T10:30:41Z"},{"alias_kind":"pith_short_8","alias_value":"LS3JZKDU","created_at":"2026-07-05T10:30:41Z"}],"graph_snapshots":[{"event_id":"sha256:a73bb2cf6303f206780154ccbd1aaecd777f4d327edd40b710346732f5aa2fc3","target":"graph","created_at":"2026-07-05T10:30:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.10269/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Protecting the use of audio datasets is a major concern for data owners, particularly with the recent rise of audio deep learning models. While watermarks can be used to protect the data itself, they do not allow to identify a deep learning model trained on a protected dataset. In this paper, we adapt to audio data the recently introduced data taggants approach. Data taggants is a method to verify if a neural network was trained on a protected image dataset with top-$k$ predictions access to the model only. This method relies on a targeted data poisoning scheme by discreetly altering a small f","authors_text":"El-Mahdi El-Mhamdi, Nicolas Usunier, Wassim Bouaziz","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-13T11:25:25Z","title":"Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.10269","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e0fb8f4d5edbb7a4a99c7a5780ff8d5bd8ee3837e5bfb9e92ccc84c037eed186","target":"record","created_at":"2026-07-05T10:30:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4e6825a7450035835009adbf0290515109f66ba13c8cc0465818e89c5beb7a09","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-13T11:25:25Z","title_canon_sha256":"82d547582241f7dc8cb0d1eea8d829b2d20aa2aa0bbeb956f2998accd19019d4"},"schema_version":"1.0","source":{"id":"2503.10269","kind":"arxiv","version":1}},"canonical_sha256":"5cb69ca87493ccdaf6f94cdde5329667ea4cc1ffc446034ba85e86326c9b231d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5cb69ca87493ccdaf6f94cdde5329667ea4cc1ffc446034ba85e86326c9b231d","first_computed_at":"2026-07-05T10:30:41.756555Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:30:41.756555Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yHvRC9RXUKaNYelYusn8v0Og61OlJ6841DYkXJoyH/D2yd8XeCL9825NFzIX9eCwOOwU9DkF+XWXECEcD3WKBA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:30:41.757061Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.10269","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e0fb8f4d5edbb7a4a99c7a5780ff8d5bd8ee3837e5bfb9e92ccc84c037eed186","sha256:a73bb2cf6303f206780154ccbd1aaecd777f4d327edd40b710346732f5aa2fc3"],"state_sha256":"085349036f85a4c34fff71115d659b4abfdb78e173cc43fd2b36d14b69efe07b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jvh85H4fPVBnpeaUFcQlIi+Jv25f12kLPD8oGE7/jFZCtefyzsho5zPGWPScc0K2lUdhFD3MOL4LWeLmev4uAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-12T18:03:38.408935Z","bundle_sha256":"86c014bdc8cdb86e95f4c916353924547536c3f963475c69e580078edfe0cd8f"}}