{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:PMFQUSM6676QULD4UWSSX7G3VM","short_pith_number":"pith:PMFQUSM6","canonical_record":{"source":{"id":"2307.15593","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-28T14:52:08Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"5a15c4e56b7c848adf515399f2d2bb51c73086e06db5a818bb7a3da47f4adaab","abstract_canon_sha256":"fc8542de9e688e1fd80b14fe4612d397364072fcf6c1f51526dd9307418b2f42"},"schema_version":"1.0"},"canonical_sha256":"7b0b0a499ef7fd0a2c7ca5a52bfcdbab015d86f2b945d91f3d1ad367643d8fe5","source":{"kind":"arxiv","id":"2307.15593","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.15593","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"arxiv_version","alias_value":"2307.15593v3","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.15593","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"pith_short_12","alias_value":"PMFQUSM6676Q","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"pith_short_16","alias_value":"PMFQUSM6676QULD4","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"pith_short_8","alias_value":"PMFQUSM6","created_at":"2026-07-05T08:28:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:PMFQUSM6676QULD4UWSSX7G3VM","target":"record","payload":{"canonical_record":{"source":{"id":"2307.15593","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-28T14:52:08Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"5a15c4e56b7c848adf515399f2d2bb51c73086e06db5a818bb7a3da47f4adaab","abstract_canon_sha256":"fc8542de9e688e1fd80b14fe4612d397364072fcf6c1f51526dd9307418b2f42"},"schema_version":"1.0"},"canonical_sha256":"7b0b0a499ef7fd0a2c7ca5a52bfcdbab015d86f2b945d91f3d1ad367643d8fe5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:28:01.718475Z","signature_b64":"jbVTv5ZipbfZ3Hb9YGcbluN+P9ojIMb7koAiCvtQr99rzSvyfT+83ItAhXCppkhuaRyW8YwfDw6TO9r5DQjuCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7b0b0a499ef7fd0a2c7ca5a52bfcdbab015d86f2b945d91f3d1ad367643d8fe5","last_reissued_at":"2026-07-05T08:28:01.718003Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:28:01.718003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.15593","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:28:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GCGBpSllJxDZ088c9J0oNBgrhMX8U38i7Hok65iY87Z/9K4Sq/Vt3a0pABT3wzzhcnrwslCOQyv1XYJcdDQzDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T15:19:51.588100Z"},"content_sha256":"8d69c8d28b09ab98aec33fea9682bb504ce2806e551b0eae7582c123d7685afd","schema_version":"1.0","event_id":"sha256:8d69c8d28b09ab98aec33fea9682bb504ce2806e551b0eae7582c123d7685afd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:PMFQUSM6676QULD4UWSSX7G3VM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robust Distortion-free Watermarks for Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"John Thickstun, Percy Liang, Rohith Kuditipudi, Tatsunori Hashimoto","submitted_at":"2023-07-28T14:52:08Z","abstract_excerpt":"We propose a methodology for planting watermarks in text from an autoregressive language model that are robust to perturbations without changing the distribution over text up to a certain maximum generation budget. We generate watermarked text by mapping a sequence of random numbers -- which we compute using a randomized watermark key -- to a sample from the language model. To detect watermarked text, any party who knows the key can align the text to the random number sequence. We instantiate our watermark methodology with two sampling schemes: inverse transform sampling and exponential minimu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.15593","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.15593/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:28:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ppJCAONMXlewj+U3HQpNpcAKX94h+Cd/zs4tId9jvdvB41Q+XDPGzaFCHu1FIOJxUf1sj5tDAUOh/+MweQCpDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T15:19:51.588494Z"},"content_sha256":"4d0814c137be3b3542735ab34836be37596a12c8b0bc074554738b7d29c40d74","schema_version":"1.0","event_id":"sha256:4d0814c137be3b3542735ab34836be37596a12c8b0bc074554738b7d29c40d74"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PMFQUSM6676QULD4UWSSX7G3VM/bundle.json","state_url":"https://pith.science/pith/PMFQUSM6676QULD4UWSSX7G3VM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PMFQUSM6676QULD4UWSSX7G3VM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T15:19:51Z","links":{"resolver":"https://pith.science/pith/PMFQUSM6676QULD4UWSSX7G3VM","bundle":"https://pith.science/pith/PMFQUSM6676QULD4UWSSX7G3VM/bundle.json","state":"https://pith.science/pith/PMFQUSM6676QULD4UWSSX7G3VM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PMFQUSM6676QULD4UWSSX7G3VM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:PMFQUSM6676QULD4UWSSX7G3VM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fc8542de9e688e1fd80b14fe4612d397364072fcf6c1f51526dd9307418b2f42","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-28T14:52:08Z","title_canon_sha256":"5a15c4e56b7c848adf515399f2d2bb51c73086e06db5a818bb7a3da47f4adaab"},"schema_version":"1.0","source":{"id":"2307.15593","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.15593","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"arxiv_version","alias_value":"2307.15593v3","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.15593","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"pith_short_12","alias_value":"PMFQUSM6676Q","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"pith_short_16","alias_value":"PMFQUSM6676QULD4","created_at":"2026-07-05T08:28:01Z"},{"alias_kind":"pith_short_8","alias_value":"PMFQUSM6","created_at":"2026-07-05T08:28:01Z"}],"graph_snapshots":[{"event_id":"sha256:4d0814c137be3b3542735ab34836be37596a12c8b0bc074554738b7d29c40d74","target":"graph","created_at":"2026-07-05T08:28:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.15593/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose a methodology for planting watermarks in text from an autoregressive language model that are robust to perturbations without changing the distribution over text up to a certain maximum generation budget. We generate watermarked text by mapping a sequence of random numbers -- which we compute using a randomized watermark key -- to a sample from the language model. To detect watermarked text, any party who knows the key can align the text to the random number sequence. We instantiate our watermark methodology with two sampling schemes: inverse transform sampling and exponential minimu","authors_text":"John Thickstun, Percy Liang, Rohith Kuditipudi, Tatsunori Hashimoto","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-28T14:52:08Z","title":"Robust Distortion-free Watermarks for Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.15593","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8d69c8d28b09ab98aec33fea9682bb504ce2806e551b0eae7582c123d7685afd","target":"record","created_at":"2026-07-05T08:28:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fc8542de9e688e1fd80b14fe4612d397364072fcf6c1f51526dd9307418b2f42","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-28T14:52:08Z","title_canon_sha256":"5a15c4e56b7c848adf515399f2d2bb51c73086e06db5a818bb7a3da47f4adaab"},"schema_version":"1.0","source":{"id":"2307.15593","kind":"arxiv","version":3}},"canonical_sha256":"7b0b0a499ef7fd0a2c7ca5a52bfcdbab015d86f2b945d91f3d1ad367643d8fe5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7b0b0a499ef7fd0a2c7ca5a52bfcdbab015d86f2b945d91f3d1ad367643d8fe5","first_computed_at":"2026-07-05T08:28:01.718003Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:28:01.718003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jbVTv5ZipbfZ3Hb9YGcbluN+P9ojIMb7koAiCvtQr99rzSvyfT+83ItAhXCppkhuaRyW8YwfDw6TO9r5DQjuCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:28:01.718475Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.15593","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8d69c8d28b09ab98aec33fea9682bb504ce2806e551b0eae7582c123d7685afd","sha256:4d0814c137be3b3542735ab34836be37596a12c8b0bc074554738b7d29c40d74"],"state_sha256":"1f6d6570c1df668729edc4b52fa971c89303f452cb37b980b4fc38af2f919394"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m2Ewdq4dTnWWEe5RapoQsthenkMki8ivZJ+YSlAxr3PYlLly4bkNlZL9HildLfxyavimN+ETeT+uoRK1WrRNBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T15:19:51.592191Z","bundle_sha256":"1a30d2bc0bfd13d0dd5f8f930ca56123fcc29069b35c28854463f7e46a4ecc40"}}