{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QNT4K7Q26A4M3GKWT4XNRRUV6L","short_pith_number":"pith:QNT4K7Q2","canonical_record":{"source":{"id":"2509.09703","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-09-05T05:59:50Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a11adf2fe28b716eb08dd89f782b47e4a5c268c53f2c25f370445c21826c9eda","abstract_canon_sha256":"b8e5cdae06a74bbf0314889a9274abbb76c7981ed3a06aa68ac2ff99072b919a"},"schema_version":"1.0"},"canonical_sha256":"8367c57e1af038cd99569f2ed8c695f2f778715dde84558c6b37cdf04800d218","source":{"kind":"arxiv","id":"2509.09703","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.09703","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"arxiv_version","alias_value":"2509.09703v1","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.09703","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"pith_short_12","alias_value":"QNT4K7Q26A4M","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"pith_short_16","alias_value":"QNT4K7Q26A4M3GKW","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"pith_short_8","alias_value":"QNT4K7Q2","created_at":"2026-07-05T12:09:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QNT4K7Q26A4M3GKWT4XNRRUV6L","target":"record","payload":{"canonical_record":{"source":{"id":"2509.09703","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-09-05T05:59:50Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a11adf2fe28b716eb08dd89f782b47e4a5c268c53f2c25f370445c21826c9eda","abstract_canon_sha256":"b8e5cdae06a74bbf0314889a9274abbb76c7981ed3a06aa68ac2ff99072b919a"},"schema_version":"1.0"},"canonical_sha256":"8367c57e1af038cd99569f2ed8c695f2f778715dde84558c6b37cdf04800d218","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:09:47.440968Z","signature_b64":"Y1RG5933LZcnlToKOeSKn5+3BWg3NeLlMAH0eBGBAXNp8+JoyK7yZaiCYJYTSbcD3IKF6i/G7lHt0Js4LWQdCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8367c57e1af038cd99569f2ed8c695f2f778715dde84558c6b37cdf04800d218","last_reissued_at":"2026-07-05T12:09:47.440484Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:09:47.440484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.09703","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gAaDbvG8XdFDuc1uzdHm+m9UpgPvWwEw+eYtsZnwqkEHmjUbleKLY8oiftLMAMjH6M2+bsryOt/bO8Jepxy7BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T10:05:18.662158Z"},"content_sha256":"d21f1a9ff446c8695c6f897a04c139fcd990d574a56921bf2310fdb53acf4eea","schema_version":"1.0","event_id":"sha256:d21f1a9ff446c8695c6f897a04c139fcd990d574a56921bf2310fdb53acf4eea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QNT4K7Q26A4M3GKWT4XNRRUV6L","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Changting Lin, Meng Han, Shengwei Tian, Xixiang Zhao, Xubin Yue, Zhenhua Xu","submitted_at":"2025-09-05T05:59:50Z","abstract_excerpt":"The widespread deployment of large language models (LLMs) has intensified concerns around intellectual property (IP) protection, as model theft and unauthorized redistribution become increasingly feasible. To address this, model fingerprinting aims to embed verifiable ownership traces into LLMs. However, existing methods face inherent trade-offs between stealthness, robustness, and generalizability, being either detectable via distributional shifts, vulnerable to adversarial modifications, or easily invalidated once the fingerprint is revealed. In this work, we introduce CTCC, a novel rule-dri"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.09703","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.09703/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XvVCbFfpzAWkO+qTiDb+kWdr9qDVrIAOJzcf06ZxyYBRiuwjVsWj+SLoZ+THxNvM08r/oO++qjIVW8PCaSV2BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T10:05:18.662719Z"},"content_sha256":"2ba562a769c6f0b754cb1a7f840357ded617f8be225c4f6a083271b9ae1e14e2","schema_version":"1.0","event_id":"sha256:2ba562a769c6f0b754cb1a7f840357ded617f8be225c4f6a083271b9ae1e14e2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QNT4K7Q26A4M3GKWT4XNRRUV6L/bundle.json","state_url":"https://pith.science/pith/QNT4K7Q26A4M3GKWT4XNRRUV6L/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QNT4K7Q26A4M3GKWT4XNRRUV6L/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T10:05:18Z","links":{"resolver":"https://pith.science/pith/QNT4K7Q26A4M3GKWT4XNRRUV6L","bundle":"https://pith.science/pith/QNT4K7Q26A4M3GKWT4XNRRUV6L/bundle.json","state":"https://pith.science/pith/QNT4K7Q26A4M3GKWT4XNRRUV6L/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QNT4K7Q26A4M3GKWT4XNRRUV6L/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QNT4K7Q26A4M3GKWT4XNRRUV6L","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b8e5cdae06a74bbf0314889a9274abbb76c7981ed3a06aa68ac2ff99072b919a","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-09-05T05:59:50Z","title_canon_sha256":"a11adf2fe28b716eb08dd89f782b47e4a5c268c53f2c25f370445c21826c9eda"},"schema_version":"1.0","source":{"id":"2509.09703","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.09703","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"arxiv_version","alias_value":"2509.09703v1","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.09703","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"pith_short_12","alias_value":"QNT4K7Q26A4M","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"pith_short_16","alias_value":"QNT4K7Q26A4M3GKW","created_at":"2026-07-05T12:09:47Z"},{"alias_kind":"pith_short_8","alias_value":"QNT4K7Q2","created_at":"2026-07-05T12:09:47Z"}],"graph_snapshots":[{"event_id":"sha256:2ba562a769c6f0b754cb1a7f840357ded617f8be225c4f6a083271b9ae1e14e2","target":"graph","created_at":"2026-07-05T12:09:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.09703/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread deployment of large language models (LLMs) has intensified concerns around intellectual property (IP) protection, as model theft and unauthorized redistribution become increasingly feasible. To address this, model fingerprinting aims to embed verifiable ownership traces into LLMs. However, existing methods face inherent trade-offs between stealthness, robustness, and generalizability, being either detectable via distributional shifts, vulnerable to adversarial modifications, or easily invalidated once the fingerprint is revealed. In this work, we introduce CTCC, a novel rule-dri","authors_text":"Changting Lin, Meng Han, Shengwei Tian, Xixiang Zhao, Xubin Yue, Zhenhua Xu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-09-05T05:59:50Z","title":"CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.09703","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d21f1a9ff446c8695c6f897a04c139fcd990d574a56921bf2310fdb53acf4eea","target":"record","created_at":"2026-07-05T12:09:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b8e5cdae06a74bbf0314889a9274abbb76c7981ed3a06aa68ac2ff99072b919a","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-09-05T05:59:50Z","title_canon_sha256":"a11adf2fe28b716eb08dd89f782b47e4a5c268c53f2c25f370445c21826c9eda"},"schema_version":"1.0","source":{"id":"2509.09703","kind":"arxiv","version":1}},"canonical_sha256":"8367c57e1af038cd99569f2ed8c695f2f778715dde84558c6b37cdf04800d218","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8367c57e1af038cd99569f2ed8c695f2f778715dde84558c6b37cdf04800d218","first_computed_at":"2026-07-05T12:09:47.440484Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:47.440484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Y1RG5933LZcnlToKOeSKn5+3BWg3NeLlMAH0eBGBAXNp8+JoyK7yZaiCYJYTSbcD3IKF6i/G7lHt0Js4LWQdCg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:47.440968Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.09703","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d21f1a9ff446c8695c6f897a04c139fcd990d574a56921bf2310fdb53acf4eea","sha256:2ba562a769c6f0b754cb1a7f840357ded617f8be225c4f6a083271b9ae1e14e2"],"state_sha256":"bf1a95d30edf398123d9dafc073a9852b9694fb93825d027884536b175d4a3b7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pETHtp19lLT4PukROs+6f3qT2vmgSekxqUtlccTmj8q1Isd4rclI9vd5ZP0hzH815A03rYLrys+0NyzYLM/wCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T10:05:18.669166Z","bundle_sha256":"11d95820d4f4cc46e79df4799d0e0926772a6b15cc6d78747e67661e49377017"}}