{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RE75OOR6M2XS4LHWP5XD44IE2Y","short_pith_number":"pith:RE75OOR6","canonical_record":{"source":{"id":"2407.21034","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-07-17T06:51:24Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8754464b1ff2cb7e528790f488d5987b987c90fd9de3753c82d9d19bf857aefa","abstract_canon_sha256":"cb25001bbce5023736513affaf6f46db2c494b8d357762c557ab6296e2db85e9"},"schema_version":"1.0"},"canonical_sha256":"893fd73a3e66af2e2cf67f6e3e7104d6305e0d04ee532845c21622088c79e8e8","source":{"kind":"arxiv","id":"2407.21034","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.21034","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"arxiv_version","alias_value":"2407.21034v3","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.21034","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"pith_short_12","alias_value":"RE75OOR6M2XS","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"pith_short_16","alias_value":"RE75OOR6M2XS4LHW","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"pith_short_8","alias_value":"RE75OOR6","created_at":"2026-07-05T09:13:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RE75OOR6M2XS4LHWP5XD44IE2Y","target":"record","payload":{"canonical_record":{"source":{"id":"2407.21034","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-07-17T06:51:24Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8754464b1ff2cb7e528790f488d5987b987c90fd9de3753c82d9d19bf857aefa","abstract_canon_sha256":"cb25001bbce5023736513affaf6f46db2c494b8d357762c557ab6296e2db85e9"},"schema_version":"1.0"},"canonical_sha256":"893fd73a3e66af2e2cf67f6e3e7104d6305e0d04ee532845c21622088c79e8e8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:13:06.405847Z","signature_b64":"8wITA3s1Vp4cRwqSD2rrv8WdUyuGXWgaqEz9MPbJfUxoRJVRwOHV9Arl5m9zZQrKwHtvOx0O+kxYDvOHNgSZAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"893fd73a3e66af2e2cf67f6e3e7104d6305e0d04ee532845c21622088c79e8e8","last_reissued_at":"2026-07-05T09:13:06.405377Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:13:06.405377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.21034","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:13:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8Uai/1MJgoWHwM81FgdR3FQH5vmYUKUwRjFtDG3xsvMD0+2zv4mCnGN0Xm43ANlXSjugM1+LDZPSNHrDq14XBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T20:40:02.765664Z"},"content_sha256":"631e2ba89dbe2328bb040cd4865e770e4b1fe242ea935361acf0391df40d63fb","schema_version":"1.0","event_id":"sha256:631e2ba89dbe2328bb040cd4865e770e4b1fe242ea935361acf0391df40d63fb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RE75OOR6M2XS4LHWP5XD44IE2Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Watermarking Recommender Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.IR","authors_text":"Cheng Long, Hongxu Chen, Hongzhi Yin, Sixiao Zhang, Wei Yuan","submitted_at":"2024-07-17T06:51:24Z","abstract_excerpt":"Recommender systems embody significant commercial value and represent crucial intellectual property. However, the integrity of these systems is constantly challenged by malicious actors seeking to steal their underlying models. Safeguarding against such threats is paramount to upholding the rights and interests of the model owner. While model watermarking has emerged as a potent defense mechanism in various domains, its direct application to recommender systems remains unexplored and non-trivial. In this paper, we address this gap by introducing Autoregressive Out-of-distribution Watermarking "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.21034","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.21034/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:13:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GGwYS04cnkmNj2oHFVxyt7wyr/X0btlKhb/MOSzvXss8rBuSZUS73l5rrhxOuUncj34CyZ3zqLa78nK0fuK9BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T20:40:02.766056Z"},"content_sha256":"df1372799ac38c41024e453c89a05c1f27c119c6bd97ed810f4816b8a57ebe94","schema_version":"1.0","event_id":"sha256:df1372799ac38c41024e453c89a05c1f27c119c6bd97ed810f4816b8a57ebe94"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RE75OOR6M2XS4LHWP5XD44IE2Y/bundle.json","state_url":"https://pith.science/pith/RE75OOR6M2XS4LHWP5XD44IE2Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RE75OOR6M2XS4LHWP5XD44IE2Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T20:40:02Z","links":{"resolver":"https://pith.science/pith/RE75OOR6M2XS4LHWP5XD44IE2Y","bundle":"https://pith.science/pith/RE75OOR6M2XS4LHWP5XD44IE2Y/bundle.json","state":"https://pith.science/pith/RE75OOR6M2XS4LHWP5XD44IE2Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RE75OOR6M2XS4LHWP5XD44IE2Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RE75OOR6M2XS4LHWP5XD44IE2Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cb25001bbce5023736513affaf6f46db2c494b8d357762c557ab6296e2db85e9","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-07-17T06:51:24Z","title_canon_sha256":"8754464b1ff2cb7e528790f488d5987b987c90fd9de3753c82d9d19bf857aefa"},"schema_version":"1.0","source":{"id":"2407.21034","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.21034","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"arxiv_version","alias_value":"2407.21034v3","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.21034","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"pith_short_12","alias_value":"RE75OOR6M2XS","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"pith_short_16","alias_value":"RE75OOR6M2XS4LHW","created_at":"2026-07-05T09:13:06Z"},{"alias_kind":"pith_short_8","alias_value":"RE75OOR6","created_at":"2026-07-05T09:13:06Z"}],"graph_snapshots":[{"event_id":"sha256:df1372799ac38c41024e453c89a05c1f27c119c6bd97ed810f4816b8a57ebe94","target":"graph","created_at":"2026-07-05T09:13:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.21034/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recommender systems embody significant commercial value and represent crucial intellectual property. However, the integrity of these systems is constantly challenged by malicious actors seeking to steal their underlying models. Safeguarding against such threats is paramount to upholding the rights and interests of the model owner. While model watermarking has emerged as a potent defense mechanism in various domains, its direct application to recommender systems remains unexplored and non-trivial. In this paper, we address this gap by introducing Autoregressive Out-of-distribution Watermarking ","authors_text":"Cheng Long, Hongxu Chen, Hongzhi Yin, Sixiao Zhang, Wei Yuan","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-07-17T06:51:24Z","title":"Watermarking Recommender Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.21034","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:631e2ba89dbe2328bb040cd4865e770e4b1fe242ea935361acf0391df40d63fb","target":"record","created_at":"2026-07-05T09:13:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cb25001bbce5023736513affaf6f46db2c494b8d357762c557ab6296e2db85e9","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-07-17T06:51:24Z","title_canon_sha256":"8754464b1ff2cb7e528790f488d5987b987c90fd9de3753c82d9d19bf857aefa"},"schema_version":"1.0","source":{"id":"2407.21034","kind":"arxiv","version":3}},"canonical_sha256":"893fd73a3e66af2e2cf67f6e3e7104d6305e0d04ee532845c21622088c79e8e8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"893fd73a3e66af2e2cf67f6e3e7104d6305e0d04ee532845c21622088c79e8e8","first_computed_at":"2026-07-05T09:13:06.405377Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:13:06.405377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8wITA3s1Vp4cRwqSD2rrv8WdUyuGXWgaqEz9MPbJfUxoRJVRwOHV9Arl5m9zZQrKwHtvOx0O+kxYDvOHNgSZAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:13:06.405847Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.21034","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:631e2ba89dbe2328bb040cd4865e770e4b1fe242ea935361acf0391df40d63fb","sha256:df1372799ac38c41024e453c89a05c1f27c119c6bd97ed810f4816b8a57ebe94"],"state_sha256":"d8a41283d2f2c5ce3d68d24ec6eb3aed0979e51a2380cb1455b1cc18a3897283"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oliqWXmqMs8zI/b7ag8Xs8Gi4Mz0modn0i960Tu8B7cBDmjpBp5Myyqu5UeajMk/sKbFaThH4AgBzowdWP4/Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T20:40:02.769536Z","bundle_sha256":"56e66e47dd9bf0c7da8a7276e503f53ed7720d2a54dd042f88311cd4a7142b76"}}