{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MRRCR4Y42CMVHQM7Q3XZKRKJ4I","short_pith_number":"pith:MRRCR4Y4","canonical_record":{"source":{"id":"2408.10446","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-19T22:58:30Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c8722ef969a67d1a988049171223ec8afad5a0557b27822131773757de241f98","abstract_canon_sha256":"1c921c502a1091338ed0dcd8217511e086ea7499b5b530ede657a05ac577793a"},"schema_version":"1.0"},"canonical_sha256":"646228f31cd09953c19f86ef954549e20cc725c07709866a0338d6daa1f72786","source":{"kind":"arxiv","id":"2408.10446","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10446","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10446v1","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10446","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"pith_short_12","alias_value":"MRRCR4Y42CMV","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"pith_short_16","alias_value":"MRRCR4Y42CMVHQM7","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"pith_short_8","alias_value":"MRRCR4Y4","created_at":"2026-07-05T08:57:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MRRCR4Y42CMVHQM7Q3XZKRKJ4I","target":"record","payload":{"canonical_record":{"source":{"id":"2408.10446","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-19T22:58:30Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c8722ef969a67d1a988049171223ec8afad5a0557b27822131773757de241f98","abstract_canon_sha256":"1c921c502a1091338ed0dcd8217511e086ea7499b5b530ede657a05ac577793a"},"schema_version":"1.0"},"canonical_sha256":"646228f31cd09953c19f86ef954549e20cc725c07709866a0338d6daa1f72786","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:57:12.043610Z","signature_b64":"lmMq2g33MSiij3+DcedY4zO+0xKLns2Jb3AZXfv7GzfG/njbh8WFcw9lTPeVYJCGP+EvP+OnPbqaolrfkmaSBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"646228f31cd09953c19f86ef954549e20cc725c07709866a0338d6daa1f72786","last_reissued_at":"2026-07-05T08:57:12.043130Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:57:12.043130Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.10446","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UGpxDvHUU3W9vWSHC86mp3pxOhMIZHS10L7XcdEXnWZlceZILxXfskolPeOLhsT4mB6+O2U10rjg+cF+L6BgDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T04:49:48.730125Z"},"content_sha256":"2fe8c255b77fb2dccbf5f34d35e17361c910cc9bc3fd1d08c4d7d8db52983350","schema_version":"1.0","event_id":"sha256:2fe8c255b77fb2dccbf5f34d35e17361c910cc9bc3fd1d08c4d7d8db52983350"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MRRCR4Y42CMVHQM7Q3XZKRKJ4I","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Brittleness of AI-Generated Image Watermarking Techniques: Examining Their Robustness Against Visual Paraphrasing Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Aman Chadha, Amitava Das, Amit Sheth, Ashhar Aziz, Krish Sharma, Niyar R Barman, Shashwat Bajpai, Shwetangshu Biswas, Vasu Sharma, Vinija Jain","submitted_at":"2024-08-19T22:58:30Z","abstract_excerpt":"The rapid advancement of text-to-image generation systems, exemplified by models like Stable Diffusion, Midjourney, Imagen, and DALL-E, has heightened concerns about their potential misuse. In response, companies like Meta and Google have intensified their efforts to implement watermarking techniques on AI-generated images to curb the circulation of potentially misleading visuals. However, in this paper, we argue that current image watermarking methods are fragile and susceptible to being circumvented through visual paraphrase attacks. The proposed visual paraphraser operates in two steps. Fir"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10446","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.10446/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"G3PvlRDjOo1Kensiu9+OB85Oy7uexudQqlmX8YoeaAGoKVWspGsfVztHMGjIcJIpE9vEtUYvSUnPAc1ot0LMDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T04:49:48.730640Z"},"content_sha256":"3b9d9e1b09f4377c8569e76b79798d80c8495c3693de05063b13407f8fe7bfd7","schema_version":"1.0","event_id":"sha256:3b9d9e1b09f4377c8569e76b79798d80c8495c3693de05063b13407f8fe7bfd7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MRRCR4Y42CMVHQM7Q3XZKRKJ4I/bundle.json","state_url":"https://pith.science/pith/MRRCR4Y42CMVHQM7Q3XZKRKJ4I/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MRRCR4Y42CMVHQM7Q3XZKRKJ4I/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T04:49:48Z","links":{"resolver":"https://pith.science/pith/MRRCR4Y42CMVHQM7Q3XZKRKJ4I","bundle":"https://pith.science/pith/MRRCR4Y42CMVHQM7Q3XZKRKJ4I/bundle.json","state":"https://pith.science/pith/MRRCR4Y42CMVHQM7Q3XZKRKJ4I/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MRRCR4Y42CMVHQM7Q3XZKRKJ4I/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MRRCR4Y42CMVHQM7Q3XZKRKJ4I","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1c921c502a1091338ed0dcd8217511e086ea7499b5b530ede657a05ac577793a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-19T22:58:30Z","title_canon_sha256":"c8722ef969a67d1a988049171223ec8afad5a0557b27822131773757de241f98"},"schema_version":"1.0","source":{"id":"2408.10446","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10446","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10446v1","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10446","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"pith_short_12","alias_value":"MRRCR4Y42CMV","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"pith_short_16","alias_value":"MRRCR4Y42CMVHQM7","created_at":"2026-07-05T08:57:12Z"},{"alias_kind":"pith_short_8","alias_value":"MRRCR4Y4","created_at":"2026-07-05T08:57:12Z"}],"graph_snapshots":[{"event_id":"sha256:3b9d9e1b09f4377c8569e76b79798d80c8495c3693de05063b13407f8fe7bfd7","target":"graph","created_at":"2026-07-05T08:57:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.10446/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid advancement of text-to-image generation systems, exemplified by models like Stable Diffusion, Midjourney, Imagen, and DALL-E, has heightened concerns about their potential misuse. In response, companies like Meta and Google have intensified their efforts to implement watermarking techniques on AI-generated images to curb the circulation of potentially misleading visuals. However, in this paper, we argue that current image watermarking methods are fragile and susceptible to being circumvented through visual paraphrase attacks. The proposed visual paraphraser operates in two steps. Fir","authors_text":"Aman Chadha, Amitava Das, Amit Sheth, Ashhar Aziz, Krish Sharma, Niyar R Barman, Shashwat Bajpai, Shwetangshu Biswas, Vasu Sharma, Vinija Jain","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-19T22:58:30Z","title":"The Brittleness of AI-Generated Image Watermarking Techniques: Examining Their Robustness Against Visual Paraphrasing Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10446","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2fe8c255b77fb2dccbf5f34d35e17361c910cc9bc3fd1d08c4d7d8db52983350","target":"record","created_at":"2026-07-05T08:57:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1c921c502a1091338ed0dcd8217511e086ea7499b5b530ede657a05ac577793a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-19T22:58:30Z","title_canon_sha256":"c8722ef969a67d1a988049171223ec8afad5a0557b27822131773757de241f98"},"schema_version":"1.0","source":{"id":"2408.10446","kind":"arxiv","version":1}},"canonical_sha256":"646228f31cd09953c19f86ef954549e20cc725c07709866a0338d6daa1f72786","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"646228f31cd09953c19f86ef954549e20cc725c07709866a0338d6daa1f72786","first_computed_at":"2026-07-05T08:57:12.043130Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:57:12.043130Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lmMq2g33MSiij3+DcedY4zO+0xKLns2Jb3AZXfv7GzfG/njbh8WFcw9lTPeVYJCGP+EvP+OnPbqaolrfkmaSBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:57:12.043610Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.10446","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2fe8c255b77fb2dccbf5f34d35e17361c910cc9bc3fd1d08c4d7d8db52983350","sha256:3b9d9e1b09f4377c8569e76b79798d80c8495c3693de05063b13407f8fe7bfd7"],"state_sha256":"9c8158e265cf6097c6e5dc5d04d627a63220398e5c51f8bfc636eee3cdd72d14"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LTGiI6aYm3OY2NZsjdRrOK4n9o0KM/QpaBVahyptZtPo7UWK8sB1GCb+1T2+6AjronJ5Gwmjc7hmiTe2YYaGDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T04:49:48.734737Z","bundle_sha256":"cac2da217dc9b415a48f61fb7695fb0d47c7deec60705927f453c0cbf3c1d20f"}}