{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SKSXZEXNCF5YX3H4QCQZNOKVA5","short_pith_number":"pith:SKSXZEXN","canonical_record":{"source":{"id":"2506.23731","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T11:08:10Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"2120859ca131351ffb81aa260c111a87369455751e0db2be4ad4577ec8db1ffd","abstract_canon_sha256":"b0dae63d3ae1dc3b25b423b1be6928a94a69ab48ba57bf3221e0308a03946fd3"},"schema_version":"1.0"},"canonical_sha256":"92a57c92ed117b8becfc80a196b955075a74cf3690d1d29104166b0059533293","source":{"kind":"arxiv","id":"2506.23731","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.23731","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"arxiv_version","alias_value":"2506.23731v1","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.23731","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"pith_short_12","alias_value":"SKSXZEXNCF5Y","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"pith_short_16","alias_value":"SKSXZEXNCF5YX3H4","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"pith_short_8","alias_value":"SKSXZEXN","created_at":"2026-07-05T11:29:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SKSXZEXNCF5YX3H4QCQZNOKVA5","target":"record","payload":{"canonical_record":{"source":{"id":"2506.23731","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T11:08:10Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"2120859ca131351ffb81aa260c111a87369455751e0db2be4ad4577ec8db1ffd","abstract_canon_sha256":"b0dae63d3ae1dc3b25b423b1be6928a94a69ab48ba57bf3221e0308a03946fd3"},"schema_version":"1.0"},"canonical_sha256":"92a57c92ed117b8becfc80a196b955075a74cf3690d1d29104166b0059533293","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:29:27.194176Z","signature_b64":"Ye9aTGi2E++tnYXFcv1z/7snfhroVhzabJmae+XuI0VhsyHtjEyZEXzHYsi6sE8IJvXlRO9zgd7OraSVIGHHCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"92a57c92ed117b8becfc80a196b955075a74cf3690d1d29104166b0059533293","last_reissued_at":"2026-07-05T11:29:27.193605Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:29:27.193605Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.23731","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3U9sxbE8M12h9amWWf3tKEgxaHkeTRdtisRKHUtASqCiOylrwH0IvhVvt0Z8J7IdcAQFNGvgNEeS/hrp95DtAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T22:31:18.757765Z"},"content_sha256":"f3f1c20a0ccfffe33bfb909ac61744fd1adf32200e460d32485aa172a9f49537","schema_version":"1.0","event_id":"sha256:f3f1c20a0ccfffe33bfb909ac61744fd1adf32200e460d32485aa172a9f49537"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SKSXZEXNCF5YX3H4QCQZNOKVA5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Adam Dziedzic, Franziska Boenisch, Jan Dubi\\'nski, Michel Meintz","submitted_at":"2025-06-30T11:08:10Z","abstract_excerpt":"Image generative models have become increasingly popular, but training them requires large datasets that are costly to collect and curate. To circumvent these costs, some parties may exploit existing models by using the generated images as training data for their own models. In general, watermarking is a valuable tool for detecting unauthorized use of generated images. However, when these images are used to train a new model, watermarking can only enable detection if the watermark persists through training and remains identifiable in the outputs of the newly trained model - a property known as"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.23731","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.23731/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6RbwjsukSOCXIYuWsICRaL41W3gxPUefYncASXmxsbY8HOMVzyqdefMtgzJuyMPAk3BpRAVY3d17bgPuY4oIAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T22:31:18.758689Z"},"content_sha256":"217bf5c2aeb9426c16983c2f496bd1a9922b5ce618ad56bf72c00a46ea36d81f","schema_version":"1.0","event_id":"sha256:217bf5c2aeb9426c16983c2f496bd1a9922b5ce618ad56bf72c00a46ea36d81f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SKSXZEXNCF5YX3H4QCQZNOKVA5/bundle.json","state_url":"https://pith.science/pith/SKSXZEXNCF5YX3H4QCQZNOKVA5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SKSXZEXNCF5YX3H4QCQZNOKVA5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T22:31:18Z","links":{"resolver":"https://pith.science/pith/SKSXZEXNCF5YX3H4QCQZNOKVA5","bundle":"https://pith.science/pith/SKSXZEXNCF5YX3H4QCQZNOKVA5/bundle.json","state":"https://pith.science/pith/SKSXZEXNCF5YX3H4QCQZNOKVA5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SKSXZEXNCF5YX3H4QCQZNOKVA5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SKSXZEXNCF5YX3H4QCQZNOKVA5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b0dae63d3ae1dc3b25b423b1be6928a94a69ab48ba57bf3221e0308a03946fd3","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T11:08:10Z","title_canon_sha256":"2120859ca131351ffb81aa260c111a87369455751e0db2be4ad4577ec8db1ffd"},"schema_version":"1.0","source":{"id":"2506.23731","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.23731","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"arxiv_version","alias_value":"2506.23731v1","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.23731","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"pith_short_12","alias_value":"SKSXZEXNCF5Y","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"pith_short_16","alias_value":"SKSXZEXNCF5YX3H4","created_at":"2026-07-05T11:29:27Z"},{"alias_kind":"pith_short_8","alias_value":"SKSXZEXN","created_at":"2026-07-05T11:29:27Z"}],"graph_snapshots":[{"event_id":"sha256:217bf5c2aeb9426c16983c2f496bd1a9922b5ce618ad56bf72c00a46ea36d81f","target":"graph","created_at":"2026-07-05T11:29:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.23731/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Image generative models have become increasingly popular, but training them requires large datasets that are costly to collect and curate. To circumvent these costs, some parties may exploit existing models by using the generated images as training data for their own models. In general, watermarking is a valuable tool for detecting unauthorized use of generated images. However, when these images are used to train a new model, watermarking can only enable detection if the watermark persists through training and remains identifiable in the outputs of the newly trained model - a property known as","authors_text":"Adam Dziedzic, Franziska Boenisch, Jan Dubi\\'nski, Michel Meintz","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T11:08:10Z","title":"Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.23731","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f3f1c20a0ccfffe33bfb909ac61744fd1adf32200e460d32485aa172a9f49537","target":"record","created_at":"2026-07-05T11:29:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b0dae63d3ae1dc3b25b423b1be6928a94a69ab48ba57bf3221e0308a03946fd3","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T11:08:10Z","title_canon_sha256":"2120859ca131351ffb81aa260c111a87369455751e0db2be4ad4577ec8db1ffd"},"schema_version":"1.0","source":{"id":"2506.23731","kind":"arxiv","version":1}},"canonical_sha256":"92a57c92ed117b8becfc80a196b955075a74cf3690d1d29104166b0059533293","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"92a57c92ed117b8becfc80a196b955075a74cf3690d1d29104166b0059533293","first_computed_at":"2026-07-05T11:29:27.193605Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:29:27.193605Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ye9aTGi2E++tnYXFcv1z/7snfhroVhzabJmae+XuI0VhsyHtjEyZEXzHYsi6sE8IJvXlRO9zgd7OraSVIGHHCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:29:27.194176Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.23731","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f3f1c20a0ccfffe33bfb909ac61744fd1adf32200e460d32485aa172a9f49537","sha256:217bf5c2aeb9426c16983c2f496bd1a9922b5ce618ad56bf72c00a46ea36d81f"],"state_sha256":"36e8cda4ba5030e8a7637d3a717450ae9c7ccf2b913286d7fb84a387717b3fbb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rHC60Ab3dlpEtn2PaVH2t2WIfuYZo7kYk3hXQLL+jM30mlcFSH2OfofFQxhOBpReyQ6MTQZc9yRc3b01v4xKCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T22:31:18.766346Z","bundle_sha256":"0a1b22a75bc98ae02cd5f5d16dc948b5d83c2539965c35d47a2ff4c844b88901"}}