{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:VR764D76JT4XM3ZHW5MAE4N2B3","short_pith_number":"pith:VR764D76","canonical_record":{"source":{"id":"2505.05190","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-08T12:39:00Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"6a4162e2b89a9cbb00eb28482b8f96b8281fb7d78d81d329627ad8019c79c6fe","abstract_canon_sha256":"868720e126ca70504d3dfa74f5026460e60a4fa4cc0ac7a05018f4a79feb1834"},"schema_version":"1.0"},"canonical_sha256":"ac7fee0ffe4cf9766f27b7580271ba0ed9bc3fd5b738f9237a59f9c19874d01b","source":{"kind":"arxiv","id":"2505.05190","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.05190","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"arxiv_version","alias_value":"2505.05190v2","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.05190","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"pith_short_12","alias_value":"VR764D76JT4X","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"pith_short_16","alias_value":"VR764D76JT4XM3ZH","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"pith_short_8","alias_value":"VR764D76","created_at":"2026-07-05T11:01:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:VR764D76JT4XM3ZHW5MAE4N2B3","target":"record","payload":{"canonical_record":{"source":{"id":"2505.05190","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-08T12:39:00Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"6a4162e2b89a9cbb00eb28482b8f96b8281fb7d78d81d329627ad8019c79c6fe","abstract_canon_sha256":"868720e126ca70504d3dfa74f5026460e60a4fa4cc0ac7a05018f4a79feb1834"},"schema_version":"1.0"},"canonical_sha256":"ac7fee0ffe4cf9766f27b7580271ba0ed9bc3fd5b738f9237a59f9c19874d01b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:01:36.826548Z","signature_b64":"xHXu4qNnkt+QZtBdPX4LWlODv1O5cNxpMaS5BZgXR/wAHzEg63R+nMnSppfr6eE5oYgZkpl/yJoqTRdVjV6uBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ac7fee0ffe4cf9766f27b7580271ba0ed9bc3fd5b738f9237a59f9c19874d01b","last_reissued_at":"2026-07-05T11:01:36.826063Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:01:36.826063Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.05190","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eVa0xqc1B06kb7xmK9NgwP+4bvc9STYt8pQdYcsXLAfBHNebFhEXi3hUUGNiGpxTSqIhZYmkGw57NVRT+n21Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:35:22.113021Z"},"content_sha256":"09ca25d4f92ba719ff7119c7c757f87e7fcb952433a2a53d2963ded9db2c581f","schema_version":"1.0","event_id":"sha256:09ca25d4f92ba719ff7119c7c757f87e7fcb952433a2a53d2963ded9db2c581f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:VR764D76JT4XM3ZHW5MAE4N2B3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Hongcheng Guo, Leonid Sigal, Yangming Li, Yixin Cheng","submitted_at":"2025-05-08T12:39:00Z","abstract_excerpt":"Text watermarking aims to subtly embed statistical signals into text by controlling the Large Language Model (LLM)'s sampling process, enabling watermark detectors to verify that the output was generated by the specified model. The robustness of these watermarking algorithms has become a key factor in evaluating their effectiveness. Current text watermarking algorithms embed watermarks in high-entropy tokens to ensure text quality. In this paper, we reveal that this seemingly benign design can be exploited by attackers, posing a significant risk to the robustness of the watermark. We introduce"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.05190","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.05190/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2G/13FqPhG80gXanaqn7WfZ8xxjYrg772j/n0ENRyNrqIwcFgeWzg1g1Zq0fwLQ3+mlixCAt8dNPf+2KBWc5Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:35:22.113564Z"},"content_sha256":"745937599e2547e2d94a8f7b1b95e44561a148a6d6da9c1da7244c89c9905206","schema_version":"1.0","event_id":"sha256:745937599e2547e2d94a8f7b1b95e44561a148a6d6da9c1da7244c89c9905206"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VR764D76JT4XM3ZHW5MAE4N2B3/bundle.json","state_url":"https://pith.science/pith/VR764D76JT4XM3ZHW5MAE4N2B3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VR764D76JT4XM3ZHW5MAE4N2B3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:35:22Z","links":{"resolver":"https://pith.science/pith/VR764D76JT4XM3ZHW5MAE4N2B3","bundle":"https://pith.science/pith/VR764D76JT4XM3ZHW5MAE4N2B3/bundle.json","state":"https://pith.science/pith/VR764D76JT4XM3ZHW5MAE4N2B3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VR764D76JT4XM3ZHW5MAE4N2B3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:VR764D76JT4XM3ZHW5MAE4N2B3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"868720e126ca70504d3dfa74f5026460e60a4fa4cc0ac7a05018f4a79feb1834","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-08T12:39:00Z","title_canon_sha256":"6a4162e2b89a9cbb00eb28482b8f96b8281fb7d78d81d329627ad8019c79c6fe"},"schema_version":"1.0","source":{"id":"2505.05190","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.05190","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"arxiv_version","alias_value":"2505.05190v2","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.05190","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"pith_short_12","alias_value":"VR764D76JT4X","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"pith_short_16","alias_value":"VR764D76JT4XM3ZH","created_at":"2026-07-05T11:01:36Z"},{"alias_kind":"pith_short_8","alias_value":"VR764D76","created_at":"2026-07-05T11:01:36Z"}],"graph_snapshots":[{"event_id":"sha256:745937599e2547e2d94a8f7b1b95e44561a148a6d6da9c1da7244c89c9905206","target":"graph","created_at":"2026-07-05T11:01:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.05190/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Text watermarking aims to subtly embed statistical signals into text by controlling the Large Language Model (LLM)'s sampling process, enabling watermark detectors to verify that the output was generated by the specified model. The robustness of these watermarking algorithms has become a key factor in evaluating their effectiveness. Current text watermarking algorithms embed watermarks in high-entropy tokens to ensure text quality. In this paper, we reveal that this seemingly benign design can be exploited by attackers, posing a significant risk to the robustness of the watermark. We introduce","authors_text":"Hongcheng Guo, Leonid Sigal, Yangming Li, Yixin Cheng","cross_cats":["cs.AI","cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-08T12:39:00Z","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.05190","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:09ca25d4f92ba719ff7119c7c757f87e7fcb952433a2a53d2963ded9db2c581f","target":"record","created_at":"2026-07-05T11:01:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"868720e126ca70504d3dfa74f5026460e60a4fa4cc0ac7a05018f4a79feb1834","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-08T12:39:00Z","title_canon_sha256":"6a4162e2b89a9cbb00eb28482b8f96b8281fb7d78d81d329627ad8019c79c6fe"},"schema_version":"1.0","source":{"id":"2505.05190","kind":"arxiv","version":2}},"canonical_sha256":"ac7fee0ffe4cf9766f27b7580271ba0ed9bc3fd5b738f9237a59f9c19874d01b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ac7fee0ffe4cf9766f27b7580271ba0ed9bc3fd5b738f9237a59f9c19874d01b","first_computed_at":"2026-07-05T11:01:36.826063Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:01:36.826063Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xHXu4qNnkt+QZtBdPX4LWlODv1O5cNxpMaS5BZgXR/wAHzEg63R+nMnSppfr6eE5oYgZkpl/yJoqTRdVjV6uBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:01:36.826548Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.05190","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:09ca25d4f92ba719ff7119c7c757f87e7fcb952433a2a53d2963ded9db2c581f","sha256:745937599e2547e2d94a8f7b1b95e44561a148a6d6da9c1da7244c89c9905206"],"state_sha256":"51c46e8f0a447ca44599bd53ee4e2fb3c2366fa4e1a05d6fde33124e18814d76"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oh/PbXNw2il0thKLgjl1kwryf9bQK8skW6jE75pVkCgx49W7ynNJzN1vPFwsjLl5w5ZlY/wHsMzReR2sFFzsBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:35:22.118689Z","bundle_sha256":"5b8ee0408526b3227ea0628c6ccc8f2dc438495b1d59fac43bf6c5a4aa686c05"}}