{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:RANDFUSCA74YOCS4F4DGYSYPA3","short_pith_number":"pith:RANDFUSC","canonical_record":{"source":{"id":"2305.09684","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-13T10:36:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a6ec014be375dbd5f7cb8704e62e38b4fe977b5cb9ab16f28de8286272f552dd","abstract_canon_sha256":"d062fcf96e6a784839d8f0687ffa6e4c7ecf37a3bf66880862e2e1583cbcde3f"},"schema_version":"1.0"},"canonical_sha256":"881a32d24207f9870a5c2f066c4b0f06cdcc1b40264a85101e6457b81bf6a507","source":{"kind":"arxiv","id":"2305.09684","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.09684","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"arxiv_version","alias_value":"2305.09684v1","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.09684","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_12","alias_value":"RANDFUSCA74Y","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_16","alias_value":"RANDFUSCA74YOCS4","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_8","alias_value":"RANDFUSC","created_at":"2026-07-05T06:10:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:RANDFUSCA74YOCS4F4DGYSYPA3","target":"record","payload":{"canonical_record":{"source":{"id":"2305.09684","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-13T10:36:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a6ec014be375dbd5f7cb8704e62e38b4fe977b5cb9ab16f28de8286272f552dd","abstract_canon_sha256":"d062fcf96e6a784839d8f0687ffa6e4c7ecf37a3bf66880862e2e1583cbcde3f"},"schema_version":"1.0"},"canonical_sha256":"881a32d24207f9870a5c2f066c4b0f06cdcc1b40264a85101e6457b81bf6a507","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:10:52.658216Z","signature_b64":"12/NhIVXPZMg2yXBVh9sMQoVj+A1D4LT1Q2r7QvRn7EZZkE7/4F9A8o3/E0T84jsRDYnXP7HwjBLgSioNyVhDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"881a32d24207f9870a5c2f066c4b0f06cdcc1b40264a85101e6457b81bf6a507","last_reissued_at":"2026-07-05T06:10:52.657796Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:10:52.657796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.09684","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:10:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EYgT/5LfxeuNpc25M5ecTZH1lQrNAQds6WQs8MnyLkI3gQKW5YpR6h5nA7qqiInKF9R7R/BOeBAAQ0MQ6kSUDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T21:17:46.521357Z"},"content_sha256":"457e3391d76e399b13f6f8fa0a5a98b8ad82a1faf569ad0985dcf55ac58bba77","schema_version":"1.0","event_id":"sha256:457e3391d76e399b13f6f8fa0a5a98b8ad82a1faf569ad0985dcf55ac58bba77"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:RANDFUSCA74YOCS4F4DGYSYPA3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Decision-based iterative fragile watermarking for model integrity verification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hang Su, Heng Yin, Xinpeng Zhang, Zhaoxia Yin, Zhenzhe Gao","submitted_at":"2023-05-13T10:36:11Z","abstract_excerpt":"Typically, foundation models are hosted on cloud servers to meet the high demand for their services. However, this exposes them to security risks, as attackers can modify them after uploading to the cloud or transferring from a local system. To address this issue, we propose an iterative decision-based fragile watermarking algorithm that transforms normal training samples into fragile samples that are sensitive to model changes. We then compare the output of sensitive samples from the original model to that of the compromised model during validation to assess the model's completeness.The propo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.09684","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.09684/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:10:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jx9WHnEQMi+Lf30Q56j7XU6prdiB3R2C9KXbehxKCY8btxu+/Wie1dYnD4XFt/Ig5eLv7/6YWsOn16nOwP2oDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T21:17:46.521884Z"},"content_sha256":"450d79f1fd9918943e7cdb3d305b77d5078b5ab5e963658be262dda7f90de2ab","schema_version":"1.0","event_id":"sha256:450d79f1fd9918943e7cdb3d305b77d5078b5ab5e963658be262dda7f90de2ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RANDFUSCA74YOCS4F4DGYSYPA3/bundle.json","state_url":"https://pith.science/pith/RANDFUSCA74YOCS4F4DGYSYPA3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RANDFUSCA74YOCS4F4DGYSYPA3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T21:17:46Z","links":{"resolver":"https://pith.science/pith/RANDFUSCA74YOCS4F4DGYSYPA3","bundle":"https://pith.science/pith/RANDFUSCA74YOCS4F4DGYSYPA3/bundle.json","state":"https://pith.science/pith/RANDFUSCA74YOCS4F4DGYSYPA3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RANDFUSCA74YOCS4F4DGYSYPA3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RANDFUSCA74YOCS4F4DGYSYPA3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d062fcf96e6a784839d8f0687ffa6e4c7ecf37a3bf66880862e2e1583cbcde3f","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-13T10:36:11Z","title_canon_sha256":"a6ec014be375dbd5f7cb8704e62e38b4fe977b5cb9ab16f28de8286272f552dd"},"schema_version":"1.0","source":{"id":"2305.09684","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.09684","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"arxiv_version","alias_value":"2305.09684v1","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.09684","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_12","alias_value":"RANDFUSCA74Y","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_16","alias_value":"RANDFUSCA74YOCS4","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_8","alias_value":"RANDFUSC","created_at":"2026-07-05T06:10:52Z"}],"graph_snapshots":[{"event_id":"sha256:450d79f1fd9918943e7cdb3d305b77d5078b5ab5e963658be262dda7f90de2ab","target":"graph","created_at":"2026-07-05T06:10:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.09684/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Typically, foundation models are hosted on cloud servers to meet the high demand for their services. However, this exposes them to security risks, as attackers can modify them after uploading to the cloud or transferring from a local system. To address this issue, we propose an iterative decision-based fragile watermarking algorithm that transforms normal training samples into fragile samples that are sensitive to model changes. We then compare the output of sensitive samples from the original model to that of the compromised model during validation to assess the model's completeness.The propo","authors_text":"Hang Su, Heng Yin, Xinpeng Zhang, Zhaoxia Yin, Zhenzhe Gao","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-13T10:36:11Z","title":"Decision-based iterative fragile watermarking for model integrity verification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.09684","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:457e3391d76e399b13f6f8fa0a5a98b8ad82a1faf569ad0985dcf55ac58bba77","target":"record","created_at":"2026-07-05T06:10:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d062fcf96e6a784839d8f0687ffa6e4c7ecf37a3bf66880862e2e1583cbcde3f","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-13T10:36:11Z","title_canon_sha256":"a6ec014be375dbd5f7cb8704e62e38b4fe977b5cb9ab16f28de8286272f552dd"},"schema_version":"1.0","source":{"id":"2305.09684","kind":"arxiv","version":1}},"canonical_sha256":"881a32d24207f9870a5c2f066c4b0f06cdcc1b40264a85101e6457b81bf6a507","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"881a32d24207f9870a5c2f066c4b0f06cdcc1b40264a85101e6457b81bf6a507","first_computed_at":"2026-07-05T06:10:52.657796Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:10:52.657796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"12/NhIVXPZMg2yXBVh9sMQoVj+A1D4LT1Q2r7QvRn7EZZkE7/4F9A8o3/E0T84jsRDYnXP7HwjBLgSioNyVhDg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:10:52.658216Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.09684","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:457e3391d76e399b13f6f8fa0a5a98b8ad82a1faf569ad0985dcf55ac58bba77","sha256:450d79f1fd9918943e7cdb3d305b77d5078b5ab5e963658be262dda7f90de2ab"],"state_sha256":"b2fa00c04483bf537e2bb67aca6dd76a212bbbceacd70ce26fe74e3fda0fe5af"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"64RDZOT8HgVauG4mf3JNJTqfrGgtVtG4a5I06bTZQz0n2wt7vF3BqF5hBYBVKQlAIsr11WZhjSjkGW1w4RxcDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T21:17:46.529045Z","bundle_sha256":"9a114a8c1303456d54e33da6c5bd36db0af5b8de92fd3160853e98a6b716e736"}}