{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Q3FOVRAWTOZDGI7RTB5WYCEQ5H","short_pith_number":"pith:Q3FOVRAW","canonical_record":{"source":{"id":"2404.14055","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-22T10:11:31Z","cross_cats_sorted":[],"title_canon_sha256":"51c7022610fe60eb317a309e9a0faf2fa2b165460289aa43413338816d3c630f","abstract_canon_sha256":"78736d07937db5be8bfa422337a42e820a475f4241c41f4a43f48f8d1753e9e0"},"schema_version":"1.0"},"canonical_sha256":"86caeac4169bb23323f1987b6c0890e9e388e09a7d54da42c022a48d2efb6b64","source":{"kind":"arxiv","id":"2404.14055","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.14055","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"arxiv_version","alias_value":"2404.14055v3","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.14055","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"pith_short_12","alias_value":"Q3FOVRAWTOZD","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"pith_short_16","alias_value":"Q3FOVRAWTOZDGI7R","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"pith_short_8","alias_value":"Q3FOVRAW","created_at":"2026-07-05T08:45:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Q3FOVRAWTOZDGI7RTB5WYCEQ5H","target":"record","payload":{"canonical_record":{"source":{"id":"2404.14055","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-22T10:11:31Z","cross_cats_sorted":[],"title_canon_sha256":"51c7022610fe60eb317a309e9a0faf2fa2b165460289aa43413338816d3c630f","abstract_canon_sha256":"78736d07937db5be8bfa422337a42e820a475f4241c41f4a43f48f8d1753e9e0"},"schema_version":"1.0"},"canonical_sha256":"86caeac4169bb23323f1987b6c0890e9e388e09a7d54da42c022a48d2efb6b64","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:45:27.663286Z","signature_b64":"mvdQplngrqz7A24G4i6t2KlIN/7oXipvj6lR+ejz/OpqOW2PZmdYsEpi6HZl0Js+bQdZTvuIzeX3eoj/ZC1yBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"86caeac4169bb23323f1987b6c0890e9e388e09a7d54da42c022a48d2efb6b64","last_reissued_at":"2026-07-05T08:45:27.662858Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:45:27.662858Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.14055","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:45:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NGdcpmDjmsN17ddYlsVRS9yrYsOOiVU736Snll3dqVVL2lebbi2ApCocGsoJfGdsAdrSPUQONE/3AulMZ2DmBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T11:23:53.403520Z"},"content_sha256":"fd30818876456c007da773a25a78e871ac3564da0cf81eccbdcf3cfdd40fe958","schema_version":"1.0","event_id":"sha256:fd30818876456c007da773a25a78e871ac3564da0cf81eccbdcf3cfdd40fe958"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Q3FOVRAWTOZDGI7RTB5WYCEQ5H","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hai Ci, Mike Zheng Shou, Pei Yang, Yiren Song","submitted_at":"2024-04-22T10:11:31Z","abstract_excerpt":"We revisit Tree-Ring Watermarking, a recent diffusion model watermarking method that demonstrates great robustness to various attacks. We conduct an in-depth study on it and reveal that the distribution shift unintentionally introduced by the watermarking process, apart from watermark pattern matching, contributes to its exceptional robustness. Our investigation further exposes inherent flaws in its original design, particularly in its ability to identify multiple distinct keys, where distribution shift offers no assistance. Based on these findings and analysis, we present RingID for enhanced "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.14055","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.14055/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:45:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4Mt2GzAR/rMcJytNwAOI/BMprCgkerqKqtR8C1mReA0doRgDS5m5D3isE2Q1UDEIlRSbdIgphpjzDa0MwzuXAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T11:23:53.404397Z"},"content_sha256":"66c2feea3bc024984979d0699b1ce90bac9ae4b2c23c2695fc9d7a2ed0ab47d7","schema_version":"1.0","event_id":"sha256:66c2feea3bc024984979d0699b1ce90bac9ae4b2c23c2695fc9d7a2ed0ab47d7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q3FOVRAWTOZDGI7RTB5WYCEQ5H/bundle.json","state_url":"https://pith.science/pith/Q3FOVRAWTOZDGI7RTB5WYCEQ5H/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q3FOVRAWTOZDGI7RTB5WYCEQ5H/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T11:23:53Z","links":{"resolver":"https://pith.science/pith/Q3FOVRAWTOZDGI7RTB5WYCEQ5H","bundle":"https://pith.science/pith/Q3FOVRAWTOZDGI7RTB5WYCEQ5H/bundle.json","state":"https://pith.science/pith/Q3FOVRAWTOZDGI7RTB5WYCEQ5H/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q3FOVRAWTOZDGI7RTB5WYCEQ5H/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Q3FOVRAWTOZDGI7RTB5WYCEQ5H","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78736d07937db5be8bfa422337a42e820a475f4241c41f4a43f48f8d1753e9e0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-22T10:11:31Z","title_canon_sha256":"51c7022610fe60eb317a309e9a0faf2fa2b165460289aa43413338816d3c630f"},"schema_version":"1.0","source":{"id":"2404.14055","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.14055","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"arxiv_version","alias_value":"2404.14055v3","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.14055","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"pith_short_12","alias_value":"Q3FOVRAWTOZD","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"pith_short_16","alias_value":"Q3FOVRAWTOZDGI7R","created_at":"2026-07-05T08:45:27Z"},{"alias_kind":"pith_short_8","alias_value":"Q3FOVRAW","created_at":"2026-07-05T08:45:27Z"}],"graph_snapshots":[{"event_id":"sha256:66c2feea3bc024984979d0699b1ce90bac9ae4b2c23c2695fc9d7a2ed0ab47d7","target":"graph","created_at":"2026-07-05T08:45:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.14055/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We revisit Tree-Ring Watermarking, a recent diffusion model watermarking method that demonstrates great robustness to various attacks. We conduct an in-depth study on it and reveal that the distribution shift unintentionally introduced by the watermarking process, apart from watermark pattern matching, contributes to its exceptional robustness. Our investigation further exposes inherent flaws in its original design, particularly in its ability to identify multiple distinct keys, where distribution shift offers no assistance. Based on these findings and analysis, we present RingID for enhanced ","authors_text":"Hai Ci, Mike Zheng Shou, Pei Yang, Yiren Song","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-22T10:11:31Z","title":"RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.14055","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fd30818876456c007da773a25a78e871ac3564da0cf81eccbdcf3cfdd40fe958","target":"record","created_at":"2026-07-05T08:45:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78736d07937db5be8bfa422337a42e820a475f4241c41f4a43f48f8d1753e9e0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-22T10:11:31Z","title_canon_sha256":"51c7022610fe60eb317a309e9a0faf2fa2b165460289aa43413338816d3c630f"},"schema_version":"1.0","source":{"id":"2404.14055","kind":"arxiv","version":3}},"canonical_sha256":"86caeac4169bb23323f1987b6c0890e9e388e09a7d54da42c022a48d2efb6b64","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"86caeac4169bb23323f1987b6c0890e9e388e09a7d54da42c022a48d2efb6b64","first_computed_at":"2026-07-05T08:45:27.662858Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:45:27.662858Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mvdQplngrqz7A24G4i6t2KlIN/7oXipvj6lR+ejz/OpqOW2PZmdYsEpi6HZl0Js+bQdZTvuIzeX3eoj/ZC1yBg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:45:27.663286Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.14055","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fd30818876456c007da773a25a78e871ac3564da0cf81eccbdcf3cfdd40fe958","sha256:66c2feea3bc024984979d0699b1ce90bac9ae4b2c23c2695fc9d7a2ed0ab47d7"],"state_sha256":"242cace66753dcd550a18e91fe57427ade507cbe2a0798f0d3f0ee6ceef5ea8d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c5CZT642zg5+ZS5b0bUT8Oo8JZjTUBG0EOr310mJUSgCZ9yo9pN2r4uF/nMaXNX3bnLQuuu8KXeTpfm6sbm5CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T11:23:53.410021Z","bundle_sha256":"6e5f41c8e1483b11c60563546df089de3c04c132650ed1c61b8ec5f51d296fcf"}}