{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:P6IUVESJRWM45BIZF75OWJXQV4","short_pith_number":"pith:P6IUVESJ","canonical_record":{"source":{"id":"2607.05353","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T17:32:01Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"180ace27515ecd1c8119f64f6c077125df23a54b85a59a40c4955c80e996271a","abstract_canon_sha256":"99ca53ec1c88195eeb2e32dd101fb65786708c2d56a8c3af2dabfedec45a2012"},"schema_version":"1.0"},"canonical_sha256":"7f914a92498d99ce85192ffaeb26f0af24cabcc76dfed1eb6c14069ecb6dcf49","source":{"kind":"arxiv","id":"2607.05353","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.05353","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"arxiv_version","alias_value":"2607.05353v1","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.05353","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"pith_short_12","alias_value":"P6IUVESJRWM4","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"pith_short_16","alias_value":"P6IUVESJRWM45BIZ","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"pith_short_8","alias_value":"P6IUVESJ","created_at":"2026-07-07T03:19:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:P6IUVESJRWM45BIZF75OWJXQV4","target":"record","payload":{"canonical_record":{"source":{"id":"2607.05353","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T17:32:01Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"180ace27515ecd1c8119f64f6c077125df23a54b85a59a40c4955c80e996271a","abstract_canon_sha256":"99ca53ec1c88195eeb2e32dd101fb65786708c2d56a8c3af2dabfedec45a2012"},"schema_version":"1.0"},"canonical_sha256":"7f914a92498d99ce85192ffaeb26f0af24cabcc76dfed1eb6c14069ecb6dcf49","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T03:19:24.599828Z","signature_b64":"mRmrZOLr/RYOfZe77h1f5IqANEduNz/iYesJhi/4CHNxrxlzCKo56EvS1EwXP/eq3q4HDgWXC4esyEiCQIbtAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7f914a92498d99ce85192ffaeb26f0af24cabcc76dfed1eb6c14069ecb6dcf49","last_reissued_at":"2026-07-07T03:19:24.599386Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T03:19:24.599386Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.05353","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T03:19:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lt7cdsq1sWW8AjZD0ZWzHQZEmHQXgQiCxJAABlcr9jfJEeDjtvDQQH0N9uV9dt959X2vbkUtl0E1cTIBpANeDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:03:52.582490Z"},"content_sha256":"dc5e1225b0a534e77aeabff0cb293af19bc3f44e465f0bb04604ffa180c6bfbd","schema_version":"1.0","event_id":"sha256:dc5e1225b0a534e77aeabff0cb293af19bc3f44e465f0bb04604ffa180c6bfbd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:P6IUVESJRWM45BIZF75OWJXQV4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Selective Disclosure Watermarking for Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Qi Long, Xiang Li, Xuyang Chen, Yangxinyu Xie","submitted_at":"2026-07-06T17:32:01Z","abstract_excerpt":"Watermarking methods embed imperceptible and verifiable signals into text generated by large language models (LLMs). Existing approaches include zero-bit schemes for distinguishing synthetic text from human writing and multi-bit schemes for embedding metadata. However, current multi-bit watermarking methods do not allow selective disclosure: verifying any part of the watermark requires revealing the entire embedded message. This lack of control leads to unnecessary information exposure and raises privacy concerns. We propose Hierarchical Vocabulary Routing (HeRo), a watermarking framework that"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.05353","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.05353/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T03:19:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n2AAYq50EnlAx/01AnigTbBqbJvLtEU0MUVJEA9xRs8SfO80gCwHJkNgneXNoa7ZGtQOAtWqeHOCRSPJGb4uDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:03:52.583046Z"},"content_sha256":"34a9b3adabbe5f4658e4dec90e8f2c16e2db205db7b0988da7ef143c6538fc84","schema_version":"1.0","event_id":"sha256:34a9b3adabbe5f4658e4dec90e8f2c16e2db205db7b0988da7ef143c6538fc84"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P6IUVESJRWM45BIZF75OWJXQV4/bundle.json","state_url":"https://pith.science/pith/P6IUVESJRWM45BIZF75OWJXQV4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P6IUVESJRWM45BIZF75OWJXQV4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T18:03:52Z","links":{"resolver":"https://pith.science/pith/P6IUVESJRWM45BIZF75OWJXQV4","bundle":"https://pith.science/pith/P6IUVESJRWM45BIZF75OWJXQV4/bundle.json","state":"https://pith.science/pith/P6IUVESJRWM45BIZF75OWJXQV4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P6IUVESJRWM45BIZF75OWJXQV4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:P6IUVESJRWM45BIZF75OWJXQV4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"99ca53ec1c88195eeb2e32dd101fb65786708c2d56a8c3af2dabfedec45a2012","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T17:32:01Z","title_canon_sha256":"180ace27515ecd1c8119f64f6c077125df23a54b85a59a40c4955c80e996271a"},"schema_version":"1.0","source":{"id":"2607.05353","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.05353","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"arxiv_version","alias_value":"2607.05353v1","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.05353","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"pith_short_12","alias_value":"P6IUVESJRWM4","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"pith_short_16","alias_value":"P6IUVESJRWM45BIZ","created_at":"2026-07-07T03:19:24Z"},{"alias_kind":"pith_short_8","alias_value":"P6IUVESJ","created_at":"2026-07-07T03:19:24Z"}],"graph_snapshots":[{"event_id":"sha256:34a9b3adabbe5f4658e4dec90e8f2c16e2db205db7b0988da7ef143c6538fc84","target":"graph","created_at":"2026-07-07T03:19:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.05353/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking methods embed imperceptible and verifiable signals into text generated by large language models (LLMs). Existing approaches include zero-bit schemes for distinguishing synthetic text from human writing and multi-bit schemes for embedding metadata. However, current multi-bit watermarking methods do not allow selective disclosure: verifying any part of the watermark requires revealing the entire embedded message. This lack of control leads to unnecessary information exposure and raises privacy concerns. We propose Hierarchical Vocabulary Routing (HeRo), a watermarking framework that","authors_text":"Qi Long, Xiang Li, Xuyang Chen, Yangxinyu Xie","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T17:32:01Z","title":"Selective Disclosure Watermarking for Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.05353","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dc5e1225b0a534e77aeabff0cb293af19bc3f44e465f0bb04604ffa180c6bfbd","target":"record","created_at":"2026-07-07T03:19:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"99ca53ec1c88195eeb2e32dd101fb65786708c2d56a8c3af2dabfedec45a2012","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T17:32:01Z","title_canon_sha256":"180ace27515ecd1c8119f64f6c077125df23a54b85a59a40c4955c80e996271a"},"schema_version":"1.0","source":{"id":"2607.05353","kind":"arxiv","version":1}},"canonical_sha256":"7f914a92498d99ce85192ffaeb26f0af24cabcc76dfed1eb6c14069ecb6dcf49","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7f914a92498d99ce85192ffaeb26f0af24cabcc76dfed1eb6c14069ecb6dcf49","first_computed_at":"2026-07-07T03:19:24.599386Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T03:19:24.599386Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mRmrZOLr/RYOfZe77h1f5IqANEduNz/iYesJhi/4CHNxrxlzCKo56EvS1EwXP/eq3q4HDgWXC4esyEiCQIbtAA==","signature_status":"signed_v1","signed_at":"2026-07-07T03:19:24.599828Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.05353","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dc5e1225b0a534e77aeabff0cb293af19bc3f44e465f0bb04604ffa180c6bfbd","sha256:34a9b3adabbe5f4658e4dec90e8f2c16e2db205db7b0988da7ef143c6538fc84"],"state_sha256":"6f228e6f6223fc1fe11a80034d933ad691d9b353440a73c057942b4feebd7188"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PxSJLYzb+VkNURsE+ClMtAGfCoxWSLDfxVVbR58pUp6Hc3sejGK+E4mB0p3mLFc/rGwkyyFa87VkF6aIs7WYBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T18:03:52.586652Z","bundle_sha256":"9eb1df4a300743fb2a453c15bf14fefab296759603c9130f994b7d7c869c293c"}}