{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:RRO7LTQHKKXBQOBFAVUAWYSLA5","short_pith_number":"pith:RRO7LTQH","canonical_record":{"source":{"id":"2204.01960","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-04-05T03:29:30Z","cross_cats_sorted":["cs.AI","stat.ML"],"title_canon_sha256":"429ecd5b216d1826438a5a4f997de576fe6f88863a136380c0c5b869c323f53b","abstract_canon_sha256":"6b563ee4e9333b11f30bc1994df2501918d08ac6cb01cd25a2c23ec2d0425ba0"},"schema_version":"1.0"},"canonical_sha256":"8c5df5ce0752ae18382505680b624b07704f346c220e7a462504b5e36faf48b0","source":{"kind":"arxiv","id":"2204.01960","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.01960","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"2204.01960v1","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.01960","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"RRO7LTQHKKXB","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"pith_short_16","alias_value":"RRO7LTQHKKXBQOBF","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"pith_short_8","alias_value":"RRO7LTQH","created_at":"2026-07-05T04:11:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:RRO7LTQHKKXBQOBFAVUAWYSLA5","target":"record","payload":{"canonical_record":{"source":{"id":"2204.01960","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-04-05T03:29:30Z","cross_cats_sorted":["cs.AI","stat.ML"],"title_canon_sha256":"429ecd5b216d1826438a5a4f997de576fe6f88863a136380c0c5b869c323f53b","abstract_canon_sha256":"6b563ee4e9333b11f30bc1994df2501918d08ac6cb01cd25a2c23ec2d0425ba0"},"schema_version":"1.0"},"canonical_sha256":"8c5df5ce0752ae18382505680b624b07704f346c220e7a462504b5e36faf48b0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:11:34.869164Z","signature_b64":"NmVGgbidA7/qGfxtM2hY6QVvPqwmD0PK/3uyP028mblcj1fSNv2tFuHwWnoDU+VrJuZyrqSaJB2av0MBTcQHDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8c5df5ce0752ae18382505680b624b07704f346c220e7a462504b5e36faf48b0","last_reissued_at":"2026-07-05T04:11:34.868678Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:11:34.868678Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.01960","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4mM2h2asWiSnbDgdWuTpuw5ScNmfBlYArGROkhASKoLliuU+smWclmpOvPgm/XcUjkahcdcNDoxxfB/aa3SKBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-25T18:13:43.070331Z"},"content_sha256":"ffc71eac57d57ff5707c5f407ecedf5d7ca3078ae8cce94ec27dfa80224fae03","schema_version":"1.0","event_id":"sha256:ffc71eac57d57ff5707c5f407ecedf5d7ca3078ae8cce94ec27dfa80224fae03"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:RRO7LTQHKKXBQOBFAVUAWYSLA5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","stat.ML"],"primary_cat":"cs.CV","authors_text":"Farinaz Koushanfar, Julian McAuley, Ke Huang, Paarth Neekhara, Shehzeen Hussain, Xinqiao Zhang","submitted_at":"2022-04-05T03:29:30Z","abstract_excerpt":"Deepfakes and manipulated media are becoming a prominent threat due to the recent advances in realistic image and video synthesis techniques. There have been several attempts at combating Deepfakes using machine learning classifiers. However, such classifiers do not generalize well to black-box image synthesis techniques and have been shown to be vulnerable to adversarial examples. To address these challenges, we introduce a deep learning based semi-fragile watermarking technique that allows media authentication by verifying an invisible secret message embedded in the image pixels. Instead of "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.01960","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.01960/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U8WS3ao1qc8OCZohA9ilvXvasWhzGwC599nWEKSZgVnMxSsrid1/VCYR9WturqNKlyPJhPI9IPqLraoHiCjJCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-25T18:13:43.070711Z"},"content_sha256":"8c1f264e6daa105ccad4743fd011a1468144f0fbbe469140c2678916eb873f15","schema_version":"1.0","event_id":"sha256:8c1f264e6daa105ccad4743fd011a1468144f0fbbe469140c2678916eb873f15"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RRO7LTQHKKXBQOBFAVUAWYSLA5/bundle.json","state_url":"https://pith.science/pith/RRO7LTQHKKXBQOBFAVUAWYSLA5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RRO7LTQHKKXBQOBFAVUAWYSLA5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-25T18:13:43Z","links":{"resolver":"https://pith.science/pith/RRO7LTQHKKXBQOBFAVUAWYSLA5","bundle":"https://pith.science/pith/RRO7LTQHKKXBQOBFAVUAWYSLA5/bundle.json","state":"https://pith.science/pith/RRO7LTQHKKXBQOBFAVUAWYSLA5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RRO7LTQHKKXBQOBFAVUAWYSLA5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:RRO7LTQHKKXBQOBFAVUAWYSLA5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6b563ee4e9333b11f30bc1994df2501918d08ac6cb01cd25a2c23ec2d0425ba0","cross_cats_sorted":["cs.AI","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-04-05T03:29:30Z","title_canon_sha256":"429ecd5b216d1826438a5a4f997de576fe6f88863a136380c0c5b869c323f53b"},"schema_version":"1.0","source":{"id":"2204.01960","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.01960","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"2204.01960v1","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.01960","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"RRO7LTQHKKXB","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"pith_short_16","alias_value":"RRO7LTQHKKXBQOBF","created_at":"2026-07-05T04:11:34Z"},{"alias_kind":"pith_short_8","alias_value":"RRO7LTQH","created_at":"2026-07-05T04:11:34Z"}],"graph_snapshots":[{"event_id":"sha256:8c1f264e6daa105ccad4743fd011a1468144f0fbbe469140c2678916eb873f15","target":"graph","created_at":"2026-07-05T04:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.01960/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deepfakes and manipulated media are becoming a prominent threat due to the recent advances in realistic image and video synthesis techniques. There have been several attempts at combating Deepfakes using machine learning classifiers. However, such classifiers do not generalize well to black-box image synthesis techniques and have been shown to be vulnerable to adversarial examples. To address these challenges, we introduce a deep learning based semi-fragile watermarking technique that allows media authentication by verifying an invisible secret message embedded in the image pixels. Instead of ","authors_text":"Farinaz Koushanfar, Julian McAuley, Ke Huang, Paarth Neekhara, Shehzeen Hussain, Xinqiao Zhang","cross_cats":["cs.AI","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-04-05T03:29:30Z","title":"FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.01960","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ffc71eac57d57ff5707c5f407ecedf5d7ca3078ae8cce94ec27dfa80224fae03","target":"record","created_at":"2026-07-05T04:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6b563ee4e9333b11f30bc1994df2501918d08ac6cb01cd25a2c23ec2d0425ba0","cross_cats_sorted":["cs.AI","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-04-05T03:29:30Z","title_canon_sha256":"429ecd5b216d1826438a5a4f997de576fe6f88863a136380c0c5b869c323f53b"},"schema_version":"1.0","source":{"id":"2204.01960","kind":"arxiv","version":1}},"canonical_sha256":"8c5df5ce0752ae18382505680b624b07704f346c220e7a462504b5e36faf48b0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8c5df5ce0752ae18382505680b624b07704f346c220e7a462504b5e36faf48b0","first_computed_at":"2026-07-05T04:11:34.868678Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:11:34.868678Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NmVGgbidA7/qGfxtM2hY6QVvPqwmD0PK/3uyP028mblcj1fSNv2tFuHwWnoDU+VrJuZyrqSaJB2av0MBTcQHDA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:11:34.869164Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.01960","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ffc71eac57d57ff5707c5f407ecedf5d7ca3078ae8cce94ec27dfa80224fae03","sha256:8c1f264e6daa105ccad4743fd011a1468144f0fbbe469140c2678916eb873f15"],"state_sha256":"b41c49e5d5cd2b3d9d721057c39fecfeda65424a065de6b0500acee53327d1be"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"usSQpzoeSRt/Syc73z5XSCXJZ4NGLz5OUpNlHHYsaplb5NpbVIpgjjUNErP7c7mWg6ch5gB39gyzqXL34ZJFBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-25T18:13:43.073214Z","bundle_sha256":"b6bd1d61dc3fb72e124bb03ed941dde223cbe3fc59e320398859a05746a0bec9"}}