{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UPZAHSCACRVIPQWK2WKDP4MDMC","short_pith_number":"pith:UPZAHSCA","canonical_record":{"source":{"id":"2404.05188","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-08T04:30:33Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"bdc4485a324f6856d0013d47ad96ec7c012cbb48316206f482a8ad7dc5432d51","abstract_canon_sha256":"8980adf2a9aa4f2e064748674c2fbe4af33263a3ced03b0d90fac531680b8e08"},"schema_version":"1.0"},"canonical_sha256":"a3f203c840146a87c2cad59437f18360a0ad5e9dad1dfad77a7f7f1bf9c481fe","source":{"kind":"arxiv","id":"2404.05188","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.05188","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"arxiv_version","alias_value":"2404.05188v2","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.05188","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"pith_short_12","alias_value":"UPZAHSCACRVI","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"pith_short_16","alias_value":"UPZAHSCACRVIPQWK","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"pith_short_8","alias_value":"UPZAHSCA","created_at":"2026-07-05T09:30:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UPZAHSCACRVIPQWK2WKDP4MDMC","target":"record","payload":{"canonical_record":{"source":{"id":"2404.05188","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-08T04:30:33Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"bdc4485a324f6856d0013d47ad96ec7c012cbb48316206f482a8ad7dc5432d51","abstract_canon_sha256":"8980adf2a9aa4f2e064748674c2fbe4af33263a3ced03b0d90fac531680b8e08"},"schema_version":"1.0"},"canonical_sha256":"a3f203c840146a87c2cad59437f18360a0ad5e9dad1dfad77a7f7f1bf9c481fe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:30:12.239397Z","signature_b64":"1qPapWAFaXp9oVQVCdE/e27Ezp7V1mTkhpXQfTum3M0ACWQ9KQSUEu6ec5E4XJp8XHXfs5vhVR5Wmyqg4vMnDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a3f203c840146a87c2cad59437f18360a0ad5e9dad1dfad77a7f7f1bf9c481fe","last_reissued_at":"2026-07-05T09:30:12.238962Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:30:12.238962Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.05188","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:30:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+efgejTZQfzXaG3EGa5Kv0Z+B+tjRHHTwk36QWzNRsvTohpGRQCEgH8aCn55/zO8vdYpBKQ0kQ3tqdNpgxPXBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T06:51:06.381452Z"},"content_sha256":"f42a24f847a32256dbf769654ea99f359e1f93d1c31ee0b8c782cdc9b05db546","schema_version":"1.0","event_id":"sha256:f42a24f847a32256dbf769654ea99f359e1f93d1c31ee0b8c782cdc9b05db546"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UPZAHSCACRVIPQWK2WKDP4MDMC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Have You Merged My Model? On The Robustness of Large Language Model IP Protection Methods Against Model Merging","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Anyu Wang, Delong Ran, Jinyuan Liu, Qi Li, Tianshuo Cong, Xiaoyun Wang, Xinlei He, Yichen Gong, Zesen Liu","submitted_at":"2024-04-08T04:30:33Z","abstract_excerpt":"Model merging is a promising lightweight model empowerment technique that does not rely on expensive computing devices (e.g., GPUs) or require the collection of specific training data. Instead, it involves editing different upstream model parameters to absorb their downstream task capabilities. However, uncertified model merging can infringe upon the Intellectual Property (IP) rights of the original upstream models. In this paper, we conduct the first study on the robustness of IP protection methods under model merging scenarios. Specifically, we investigate two state-of-the-art IP protection "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.05188","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.05188/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:30:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q0LCqzTC9ptu+Q5Iaxci8Ajwy3LepKLl/WsQEpaPEcISxYY9yLPBHfOSgUYXydNPqTyt1o2Ay05vXx96GYp1DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T06:51:06.381947Z"},"content_sha256":"1f49f6e3ae9f52835f15c31dec0d25f30b3777d89a133757b866f95eec04aaf6","schema_version":"1.0","event_id":"sha256:1f49f6e3ae9f52835f15c31dec0d25f30b3777d89a133757b866f95eec04aaf6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UPZAHSCACRVIPQWK2WKDP4MDMC/bundle.json","state_url":"https://pith.science/pith/UPZAHSCACRVIPQWK2WKDP4MDMC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UPZAHSCACRVIPQWK2WKDP4MDMC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T06:51:06Z","links":{"resolver":"https://pith.science/pith/UPZAHSCACRVIPQWK2WKDP4MDMC","bundle":"https://pith.science/pith/UPZAHSCACRVIPQWK2WKDP4MDMC/bundle.json","state":"https://pith.science/pith/UPZAHSCACRVIPQWK2WKDP4MDMC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UPZAHSCACRVIPQWK2WKDP4MDMC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UPZAHSCACRVIPQWK2WKDP4MDMC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8980adf2a9aa4f2e064748674c2fbe4af33263a3ced03b0d90fac531680b8e08","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-08T04:30:33Z","title_canon_sha256":"bdc4485a324f6856d0013d47ad96ec7c012cbb48316206f482a8ad7dc5432d51"},"schema_version":"1.0","source":{"id":"2404.05188","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.05188","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"arxiv_version","alias_value":"2404.05188v2","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.05188","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"pith_short_12","alias_value":"UPZAHSCACRVI","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"pith_short_16","alias_value":"UPZAHSCACRVIPQWK","created_at":"2026-07-05T09:30:12Z"},{"alias_kind":"pith_short_8","alias_value":"UPZAHSCA","created_at":"2026-07-05T09:30:12Z"}],"graph_snapshots":[{"event_id":"sha256:1f49f6e3ae9f52835f15c31dec0d25f30b3777d89a133757b866f95eec04aaf6","target":"graph","created_at":"2026-07-05T09:30:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.05188/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model merging is a promising lightweight model empowerment technique that does not rely on expensive computing devices (e.g., GPUs) or require the collection of specific training data. Instead, it involves editing different upstream model parameters to absorb their downstream task capabilities. However, uncertified model merging can infringe upon the Intellectual Property (IP) rights of the original upstream models. In this paper, we conduct the first study on the robustness of IP protection methods under model merging scenarios. Specifically, we investigate two state-of-the-art IP protection ","authors_text":"Anyu Wang, Delong Ran, Jinyuan Liu, Qi Li, Tianshuo Cong, Xiaoyun Wang, Xinlei He, Yichen Gong, Zesen Liu","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-08T04:30:33Z","title":"Have You Merged My Model? On The Robustness of Large Language Model IP Protection Methods Against Model Merging"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.05188","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f42a24f847a32256dbf769654ea99f359e1f93d1c31ee0b8c782cdc9b05db546","target":"record","created_at":"2026-07-05T09:30:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8980adf2a9aa4f2e064748674c2fbe4af33263a3ced03b0d90fac531680b8e08","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-08T04:30:33Z","title_canon_sha256":"bdc4485a324f6856d0013d47ad96ec7c012cbb48316206f482a8ad7dc5432d51"},"schema_version":"1.0","source":{"id":"2404.05188","kind":"arxiv","version":2}},"canonical_sha256":"a3f203c840146a87c2cad59437f18360a0ad5e9dad1dfad77a7f7f1bf9c481fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a3f203c840146a87c2cad59437f18360a0ad5e9dad1dfad77a7f7f1bf9c481fe","first_computed_at":"2026-07-05T09:30:12.238962Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:30:12.238962Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1qPapWAFaXp9oVQVCdE/e27Ezp7V1mTkhpXQfTum3M0ACWQ9KQSUEu6ec5E4XJp8XHXfs5vhVR5Wmyqg4vMnDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:30:12.239397Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.05188","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f42a24f847a32256dbf769654ea99f359e1f93d1c31ee0b8c782cdc9b05db546","sha256:1f49f6e3ae9f52835f15c31dec0d25f30b3777d89a133757b866f95eec04aaf6"],"state_sha256":"c6b6a1f3466270de97c7b6c2111697f84ef20d38a2526e5688ea2a7bdffc396d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ffLdUmc6sWr3NNIX3dPzt1STxrmZqZamYudkjDWJi+CnoepVwSmhpI+3RETV9zHwiDn9lFYvRKMBvN+/fDcWBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T06:51:06.385465Z","bundle_sha256":"f784de6f08f874220a3e220e5656fbd9638f91298444a0262d11fc7b40d4d556"}}