{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:M5Q6PFSFSU3QVUVMWMGNO53NTY","short_pith_number":"pith:M5Q6PFSF","canonical_record":{"source":{"id":"2503.11324","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-03-14T11:45:10Z","cross_cats_sorted":["cs.CV","eess.IV"],"title_canon_sha256":"56c3eb934f8d09e2a40110d7db4639d7eb2fd64e2365833e18b29eafa84ed095","abstract_canon_sha256":"2984f8b46ec8bcdf723d75fe06714aaa6fe27391aa4ff8185977084f6d3f1951"},"schema_version":"1.0"},"canonical_sha256":"6761e7964595370ad2acb30cd7776d9e34e4d219d2c7421e20e1e03288c1fbd1","source":{"kind":"arxiv","id":"2503.11324","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.11324","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"arxiv_version","alias_value":"2503.11324v1","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.11324","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"pith_short_12","alias_value":"M5Q6PFSFSU3Q","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"pith_short_16","alias_value":"M5Q6PFSFSU3QVUVM","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"pith_short_8","alias_value":"M5Q6PFSF","created_at":"2026-07-05T10:31:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:M5Q6PFSFSU3QVUVMWMGNO53NTY","target":"record","payload":{"canonical_record":{"source":{"id":"2503.11324","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-03-14T11:45:10Z","cross_cats_sorted":["cs.CV","eess.IV"],"title_canon_sha256":"56c3eb934f8d09e2a40110d7db4639d7eb2fd64e2365833e18b29eafa84ed095","abstract_canon_sha256":"2984f8b46ec8bcdf723d75fe06714aaa6fe27391aa4ff8185977084f6d3f1951"},"schema_version":"1.0"},"canonical_sha256":"6761e7964595370ad2acb30cd7776d9e34e4d219d2c7421e20e1e03288c1fbd1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:31:28.670479Z","signature_b64":"asAxdUtZ2EWZj0yfCTwSp8pOsrfgyCX9oPvfuRHcfJZzbX7BtiFx0O2PD0yQGOy7wO1y3IDD32JNc15+LDhBCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6761e7964595370ad2acb30cd7776d9e34e4d219d2c7421e20e1e03288c1fbd1","last_reissued_at":"2026-07-05T10:31:28.669896Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:31:28.669896Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.11324","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"emBBpJBq9UppsaXTXPkKj6YLoICiwznfPenWQdU3zqnR32FluSMf2OW8GwVBho1Ip47Hhd1Ymp84wiPxyeMEAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T23:30:52.409525Z"},"content_sha256":"23e8c9d29460d82c7adf459e923b2715b2811791ff4fb31dfcfbde43c415d659","schema_version":"1.0","event_id":"sha256:23e8c9d29460d82c7adf459e923b2715b2811791ff4fb31dfcfbde43c415d659"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:M5Q6PFSFSU3QVUVMWMGNO53NTY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","eess.IV"],"primary_cat":"cs.MM","authors_text":"Fei Richard Yu, Gang Xu, Hongbin Xu, Ming Li, Songbai Tan, Xin Meng, Xuerui Qiu, Ziyi Wang","submitted_at":"2025-03-14T11:45:10Z","abstract_excerpt":"With the success of autoregressive learning in large language models, it has become a dominant approach for text-to-image generation, offering high efficiency and visual quality. However, invisible watermarking for visual autoregressive (VAR) models remains underexplored, despite its importance in misuse prevention. Existing watermarking methods, designed for diffusion models, often struggle to adapt to the sequential nature of VAR models. To bridge this gap, we propose Safe-VAR, the first watermarking framework specifically designed for autoregressive text-to-image generation. Our study revea"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.11324","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.11324/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QoZYopoenVWBTsjuG6CtUUjZ0EwlJaGlS1tJHovW6yj/kBhxFaM58NIcs8cRTwByTn2TQMJOO+wU0+uGHis7Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T23:30:52.410040Z"},"content_sha256":"d0173edfc9fbaeb754acdaaff997d403275e538f5a69f70cffb43da8ff504a2f","schema_version":"1.0","event_id":"sha256:d0173edfc9fbaeb754acdaaff997d403275e538f5a69f70cffb43da8ff504a2f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M5Q6PFSFSU3QVUVMWMGNO53NTY/bundle.json","state_url":"https://pith.science/pith/M5Q6PFSFSU3QVUVMWMGNO53NTY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M5Q6PFSFSU3QVUVMWMGNO53NTY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T23:30:52Z","links":{"resolver":"https://pith.science/pith/M5Q6PFSFSU3QVUVMWMGNO53NTY","bundle":"https://pith.science/pith/M5Q6PFSFSU3QVUVMWMGNO53NTY/bundle.json","state":"https://pith.science/pith/M5Q6PFSFSU3QVUVMWMGNO53NTY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M5Q6PFSFSU3QVUVMWMGNO53NTY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:M5Q6PFSFSU3QVUVMWMGNO53NTY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2984f8b46ec8bcdf723d75fe06714aaa6fe27391aa4ff8185977084f6d3f1951","cross_cats_sorted":["cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-03-14T11:45:10Z","title_canon_sha256":"56c3eb934f8d09e2a40110d7db4639d7eb2fd64e2365833e18b29eafa84ed095"},"schema_version":"1.0","source":{"id":"2503.11324","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.11324","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"arxiv_version","alias_value":"2503.11324v1","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.11324","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"pith_short_12","alias_value":"M5Q6PFSFSU3Q","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"pith_short_16","alias_value":"M5Q6PFSFSU3QVUVM","created_at":"2026-07-05T10:31:28Z"},{"alias_kind":"pith_short_8","alias_value":"M5Q6PFSF","created_at":"2026-07-05T10:31:28Z"}],"graph_snapshots":[{"event_id":"sha256:d0173edfc9fbaeb754acdaaff997d403275e538f5a69f70cffb43da8ff504a2f","target":"graph","created_at":"2026-07-05T10:31:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.11324/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the success of autoregressive learning in large language models, it has become a dominant approach for text-to-image generation, offering high efficiency and visual quality. However, invisible watermarking for visual autoregressive (VAR) models remains underexplored, despite its importance in misuse prevention. Existing watermarking methods, designed for diffusion models, often struggle to adapt to the sequential nature of VAR models. To bridge this gap, we propose Safe-VAR, the first watermarking framework specifically designed for autoregressive text-to-image generation. Our study revea","authors_text":"Fei Richard Yu, Gang Xu, Hongbin Xu, Ming Li, Songbai Tan, Xin Meng, Xuerui Qiu, Ziyi Wang","cross_cats":["cs.CV","eess.IV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-03-14T11:45:10Z","title":"Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.11324","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:23e8c9d29460d82c7adf459e923b2715b2811791ff4fb31dfcfbde43c415d659","target":"record","created_at":"2026-07-05T10:31:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2984f8b46ec8bcdf723d75fe06714aaa6fe27391aa4ff8185977084f6d3f1951","cross_cats_sorted":["cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-03-14T11:45:10Z","title_canon_sha256":"56c3eb934f8d09e2a40110d7db4639d7eb2fd64e2365833e18b29eafa84ed095"},"schema_version":"1.0","source":{"id":"2503.11324","kind":"arxiv","version":1}},"canonical_sha256":"6761e7964595370ad2acb30cd7776d9e34e4d219d2c7421e20e1e03288c1fbd1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6761e7964595370ad2acb30cd7776d9e34e4d219d2c7421e20e1e03288c1fbd1","first_computed_at":"2026-07-05T10:31:28.669896Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:31:28.669896Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"asAxdUtZ2EWZj0yfCTwSp8pOsrfgyCX9oPvfuRHcfJZzbX7BtiFx0O2PD0yQGOy7wO1y3IDD32JNc15+LDhBCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:31:28.670479Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.11324","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:23e8c9d29460d82c7adf459e923b2715b2811791ff4fb31dfcfbde43c415d659","sha256:d0173edfc9fbaeb754acdaaff997d403275e538f5a69f70cffb43da8ff504a2f"],"state_sha256":"98f55be75f4c775a9ec87c8a9679e62bc3533a74a7c45b55ec4d3043c9fa6756"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kzD3mh4dmRMxy9i77QT0oOatFQrE6aIVcDd14cUMprxxTAqIlgb8Ow25Hq7Au/NMYa3t5+YNh6q5KULj0aazBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T23:30:52.414933Z","bundle_sha256":"d03afd45a8d9a193b4c68bb2bb17dbb88e3a5f818a867d6f6df72fe74735f9db"}}