{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:VAM2VKFTAE72RQAWQ2YIA57I6T","short_pith_number":"pith:VAM2VKFT","canonical_record":{"source":{"id":"2209.03563","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-09-08T05:02:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6e85d52e4f1f315fc3990dcf05b18bfedb9ddce79f4326696eff84ab420f0dc9","abstract_canon_sha256":"40ab4f149bde578c65cd4fae216a025ffede063390d62f061161d8331328f050"},"schema_version":"1.0"},"canonical_sha256":"a819aaa8b3013fa8c01686b08077e8f4e9d101b033092117735320555482540a","source":{"kind":"arxiv","id":"2209.03563","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.03563","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"arxiv_version","alias_value":"2209.03563v2","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.03563","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"pith_short_12","alias_value":"VAM2VKFTAE72","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"pith_short_16","alias_value":"VAM2VKFTAE72RQAW","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"pith_short_8","alias_value":"VAM2VKFT","created_at":"2026-07-05T07:38:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:VAM2VKFTAE72RQAWQ2YIA57I6T","target":"record","payload":{"canonical_record":{"source":{"id":"2209.03563","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-09-08T05:02:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6e85d52e4f1f315fc3990dcf05b18bfedb9ddce79f4326696eff84ab420f0dc9","abstract_canon_sha256":"40ab4f149bde578c65cd4fae216a025ffede063390d62f061161d8331328f050"},"schema_version":"1.0"},"canonical_sha256":"a819aaa8b3013fa8c01686b08077e8f4e9d101b033092117735320555482540a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:38:24.825019Z","signature_b64":"hlAF+Moqjjrr1brP0Q1+nMaXoLwoOaL6Y7IQbWvE9+Pk0QuwTM+nB5LOOzhP39VLoCPlKFfXVE+b36SnJixWDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a819aaa8b3013fa8c01686b08077e8f4e9d101b033092117735320555482540a","last_reissued_at":"2026-07-05T07:38:24.824514Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:38:24.824514Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2209.03563","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:38:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"weS358oSibRma9m8144b4SuZ2muPr02hTl/Fk12O7n0yIsO1BM3CzOuN/lEnqGTbZz1uQ60zpblgH3WVdyZWDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:47:39.624769Z"},"content_sha256":"4207d226b650fb3db078c5b32345b486a11a2ce11ff30bc42ebcdb0a3c74d64f","schema_version":"1.0","event_id":"sha256:4207d226b650fb3db078c5b32345b486a11a2ce11ff30bc42ebcdb0a3c74d64f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:VAM2VKFTAE72RQAWQ2YIA57I6T","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chang Yue, Fan Xiang, Guozhu Meng, Hualong Ma, Kai Chen, Pan Li, Peizhuo Lv, Ruigang Liang, Shenchen Zhu, Shengzhi Zhang, Yingjun Zhang, Yuling Cai","submitted_at":"2022-09-08T05:02:11Z","abstract_excerpt":"Recent years have witnessed tremendous success in Self-Supervised Learning (SSL), which has been widely utilized to facilitate various downstream tasks in Computer Vision (CV) and Natural Language Processing (NLP) domains. However, attackers may steal such SSL models and commercialize them for profit, making it crucial to verify the ownership of the SSL models. Most existing ownership protection solutions (e.g., backdoor-based watermarks) are designed for supervised learning models and cannot be used directly since they require that the models' downstream tasks and target labels be known and a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.03563","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2209.03563/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:38:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OEj35cXnq0vLRr2T+/Eq5aFSN2t+NTDKJxStpaEkH0pJwPWJmc/Fy4loeoeUNqNku3cHNzUJByDLQ9w/td95CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:47:39.625281Z"},"content_sha256":"401f9f0a9be3a9412987f1040d556055da7e50dd3ca6b643e6ae10fa21613701","schema_version":"1.0","event_id":"sha256:401f9f0a9be3a9412987f1040d556055da7e50dd3ca6b643e6ae10fa21613701"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VAM2VKFTAE72RQAWQ2YIA57I6T/bundle.json","state_url":"https://pith.science/pith/VAM2VKFTAE72RQAWQ2YIA57I6T/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VAM2VKFTAE72RQAWQ2YIA57I6T/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T21:47:39Z","links":{"resolver":"https://pith.science/pith/VAM2VKFTAE72RQAWQ2YIA57I6T","bundle":"https://pith.science/pith/VAM2VKFTAE72RQAWQ2YIA57I6T/bundle.json","state":"https://pith.science/pith/VAM2VKFTAE72RQAWQ2YIA57I6T/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VAM2VKFTAE72RQAWQ2YIA57I6T/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:VAM2VKFTAE72RQAWQ2YIA57I6T","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"40ab4f149bde578c65cd4fae216a025ffede063390d62f061161d8331328f050","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-09-08T05:02:11Z","title_canon_sha256":"6e85d52e4f1f315fc3990dcf05b18bfedb9ddce79f4326696eff84ab420f0dc9"},"schema_version":"1.0","source":{"id":"2209.03563","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.03563","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"arxiv_version","alias_value":"2209.03563v2","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.03563","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"pith_short_12","alias_value":"VAM2VKFTAE72","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"pith_short_16","alias_value":"VAM2VKFTAE72RQAW","created_at":"2026-07-05T07:38:24Z"},{"alias_kind":"pith_short_8","alias_value":"VAM2VKFT","created_at":"2026-07-05T07:38:24Z"}],"graph_snapshots":[{"event_id":"sha256:401f9f0a9be3a9412987f1040d556055da7e50dd3ca6b643e6ae10fa21613701","target":"graph","created_at":"2026-07-05T07:38:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.03563/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent years have witnessed tremendous success in Self-Supervised Learning (SSL), which has been widely utilized to facilitate various downstream tasks in Computer Vision (CV) and Natural Language Processing (NLP) domains. However, attackers may steal such SSL models and commercialize them for profit, making it crucial to verify the ownership of the SSL models. Most existing ownership protection solutions (e.g., backdoor-based watermarks) are designed for supervised learning models and cannot be used directly since they require that the models' downstream tasks and target labels be known and a","authors_text":"Chang Yue, Fan Xiang, Guozhu Meng, Hualong Ma, Kai Chen, Pan Li, Peizhuo Lv, Ruigang Liang, Shenchen Zhu, Shengzhi Zhang, Yingjun Zhang, Yuling Cai","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-09-08T05:02:11Z","title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.03563","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4207d226b650fb3db078c5b32345b486a11a2ce11ff30bc42ebcdb0a3c74d64f","target":"record","created_at":"2026-07-05T07:38:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"40ab4f149bde578c65cd4fae216a025ffede063390d62f061161d8331328f050","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-09-08T05:02:11Z","title_canon_sha256":"6e85d52e4f1f315fc3990dcf05b18bfedb9ddce79f4326696eff84ab420f0dc9"},"schema_version":"1.0","source":{"id":"2209.03563","kind":"arxiv","version":2}},"canonical_sha256":"a819aaa8b3013fa8c01686b08077e8f4e9d101b033092117735320555482540a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a819aaa8b3013fa8c01686b08077e8f4e9d101b033092117735320555482540a","first_computed_at":"2026-07-05T07:38:24.824514Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:38:24.824514Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hlAF+Moqjjrr1brP0Q1+nMaXoLwoOaL6Y7IQbWvE9+Pk0QuwTM+nB5LOOzhP39VLoCPlKFfXVE+b36SnJixWDw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:38:24.825019Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.03563","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4207d226b650fb3db078c5b32345b486a11a2ce11ff30bc42ebcdb0a3c74d64f","sha256:401f9f0a9be3a9412987f1040d556055da7e50dd3ca6b643e6ae10fa21613701"],"state_sha256":"02f147ec4aca1ecd29d9d6f8701ecfaff799d3205551baf80303b2a370d6bcc2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3SxwXQ3GXS+zqcSAMVOPh6XAeqN6hI5qFM6aBILxeSKwCorfM5EaT/9cmNh44ToogocH4vmZm0KKTdcmUFqSCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T21:47:39.630041Z","bundle_sha256":"b5f7a8ce855df80607c5520c1035437d837c8292a01f0832c8f111e9753d865d"}}