{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QACEWYLHPGFU4NCYXH3K6QVPMY","short_pith_number":"pith:QACEWYLH","canonical_record":{"source":{"id":"2505.06827","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-11T03:41:13Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"86642db57a394ea6844c46a794f4724c1caa289115639bf947697caa5430248e","abstract_canon_sha256":"a5220e9bd7e31c50076d6e4a895a074f755c4d4036df0b2a9f8cf8835b323999"},"schema_version":"1.0"},"canonical_sha256":"80044b6167798b4e3458b9f6af42af662d3ca02d1a426db3eb3407c56ef141b8","source":{"kind":"arxiv","id":"2505.06827","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06827","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06827v1","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06827","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"pith_short_12","alias_value":"QACEWYLHPGFU","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"pith_short_16","alias_value":"QACEWYLHPGFU4NCY","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"pith_short_8","alias_value":"QACEWYLH","created_at":"2026-07-05T11:01:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QACEWYLHPGFU4NCYXH3K6QVPMY","target":"record","payload":{"canonical_record":{"source":{"id":"2505.06827","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-11T03:41:13Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"86642db57a394ea6844c46a794f4724c1caa289115639bf947697caa5430248e","abstract_canon_sha256":"a5220e9bd7e31c50076d6e4a895a074f755c4d4036df0b2a9f8cf8835b323999"},"schema_version":"1.0"},"canonical_sha256":"80044b6167798b4e3458b9f6af42af662d3ca02d1a426db3eb3407c56ef141b8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:01:37.484424Z","signature_b64":"3QtzX4rJX1YQbn/8QIrmTXgpE4XN1d33gL6/e/kV8SubE3/pKiWeegNRNLqSInhOp/ke6/NAZUqNlzH5MhHeDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"80044b6167798b4e3458b9f6af42af662d3ca02d1a426db3eb3407c56ef141b8","last_reissued_at":"2026-07-05T11:01:37.483757Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:01:37.483757Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.06827","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TehmnT7wYyNynv9gjw0x7xv4Dp+RqHSNdvmqscYeoowyhzUa5oxNvpPd46U6ECOEwkFUUQfJvPL6f08oALW6Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T17:41:33.125640Z"},"content_sha256":"39cb559078a0130126613407520fa9af4bb9e1986954c81e10a59d8d95f94e3c","schema_version":"1.0","event_id":"sha256:39cb559078a0130126613407520fa9af4bb9e1986954c81e10a59d8d95f94e3c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QACEWYLHPGFU4NCYXH3K6QVPMY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sandcastles in the Storm: Revisiting the (Im)possibility of Strong Watermarking","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Amit Sahai, Boran Erol, Connor Choi, Fabrice Y Harel-Canada, Gary Jiarui Song, Jason Liu, Nanyun Peng","submitted_at":"2025-05-11T03:41:13Z","abstract_excerpt":"Watermarking AI-generated text is critical for combating misuse. Yet recent theoretical work argues that any watermark can be erased via random walk attacks that perturb text while preserving quality. However, such attacks rely on two key assumptions: (1) rapid mixing (watermarks dissolve quickly under perturbations) and (2) reliable quality preservation (automated quality oracles perfectly guide edits). Through large-scale experiments and human-validated assessments, we find mixing is slow: 100% of perturbed texts retain traces of their origin after hundreds of edits, defying rapid mixing. Or"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06827","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.06827/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"360NE30JoMh0x7I2jdOCP/qviHIsivqN9jSiUgpkQ5xnb+l9/VCbMS69t9DXeBhdEkERONwl7sVOMtdPY0DlDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T17:41:33.126131Z"},"content_sha256":"a0b328d6941d7f2189866196a5d6d611838b8a118d0c2b17e1605faecfb818ac","schema_version":"1.0","event_id":"sha256:a0b328d6941d7f2189866196a5d6d611838b8a118d0c2b17e1605faecfb818ac"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QACEWYLHPGFU4NCYXH3K6QVPMY/bundle.json","state_url":"https://pith.science/pith/QACEWYLHPGFU4NCYXH3K6QVPMY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QACEWYLHPGFU4NCYXH3K6QVPMY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T17:41:33Z","links":{"resolver":"https://pith.science/pith/QACEWYLHPGFU4NCYXH3K6QVPMY","bundle":"https://pith.science/pith/QACEWYLHPGFU4NCYXH3K6QVPMY/bundle.json","state":"https://pith.science/pith/QACEWYLHPGFU4NCYXH3K6QVPMY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QACEWYLHPGFU4NCYXH3K6QVPMY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QACEWYLHPGFU4NCYXH3K6QVPMY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a5220e9bd7e31c50076d6e4a895a074f755c4d4036df0b2a9f8cf8835b323999","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-11T03:41:13Z","title_canon_sha256":"86642db57a394ea6844c46a794f4724c1caa289115639bf947697caa5430248e"},"schema_version":"1.0","source":{"id":"2505.06827","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06827","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06827v1","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06827","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"pith_short_12","alias_value":"QACEWYLHPGFU","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"pith_short_16","alias_value":"QACEWYLHPGFU4NCY","created_at":"2026-07-05T11:01:37Z"},{"alias_kind":"pith_short_8","alias_value":"QACEWYLH","created_at":"2026-07-05T11:01:37Z"}],"graph_snapshots":[{"event_id":"sha256:a0b328d6941d7f2189866196a5d6d611838b8a118d0c2b17e1605faecfb818ac","target":"graph","created_at":"2026-07-05T11:01:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.06827/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking AI-generated text is critical for combating misuse. Yet recent theoretical work argues that any watermark can be erased via random walk attacks that perturb text while preserving quality. However, such attacks rely on two key assumptions: (1) rapid mixing (watermarks dissolve quickly under perturbations) and (2) reliable quality preservation (automated quality oracles perfectly guide edits). Through large-scale experiments and human-validated assessments, we find mixing is slow: 100% of perturbed texts retain traces of their origin after hundreds of edits, defying rapid mixing. Or","authors_text":"Amit Sahai, Boran Erol, Connor Choi, Fabrice Y Harel-Canada, Gary Jiarui Song, Jason Liu, Nanyun Peng","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-11T03:41:13Z","title":"Sandcastles in the Storm: Revisiting the (Im)possibility of Strong Watermarking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06827","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:39cb559078a0130126613407520fa9af4bb9e1986954c81e10a59d8d95f94e3c","target":"record","created_at":"2026-07-05T11:01:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a5220e9bd7e31c50076d6e4a895a074f755c4d4036df0b2a9f8cf8835b323999","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-11T03:41:13Z","title_canon_sha256":"86642db57a394ea6844c46a794f4724c1caa289115639bf947697caa5430248e"},"schema_version":"1.0","source":{"id":"2505.06827","kind":"arxiv","version":1}},"canonical_sha256":"80044b6167798b4e3458b9f6af42af662d3ca02d1a426db3eb3407c56ef141b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"80044b6167798b4e3458b9f6af42af662d3ca02d1a426db3eb3407c56ef141b8","first_computed_at":"2026-07-05T11:01:37.483757Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:01:37.483757Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3QtzX4rJX1YQbn/8QIrmTXgpE4XN1d33gL6/e/kV8SubE3/pKiWeegNRNLqSInhOp/ke6/NAZUqNlzH5MhHeDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:01:37.484424Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.06827","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:39cb559078a0130126613407520fa9af4bb9e1986954c81e10a59d8d95f94e3c","sha256:a0b328d6941d7f2189866196a5d6d611838b8a118d0c2b17e1605faecfb818ac"],"state_sha256":"2e18893b4de248cf3b0bef8ca9f7e80e5369c14124409c45e1b8ce6052975eb1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I0KgDn8ReTfJouxBSz/S1LBlSN0NVjGIPaA4u4vcDbwXxKGAEpJF3tuCPcm3cMDp2eLUdePnMmwrmBvxHYuIBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T17:41:33.130990Z","bundle_sha256":"58d176d2ba08321227d9b5863b83d420e8806bba0e68e7c676fad22a18b92d54"}}