{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:WYQ25ESYBTXKOC6NXBBU4FXTXL","short_pith_number":"pith:WYQ25ESY","canonical_record":{"source":{"id":"2608.12713","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T01:55:16Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"72bd34b4677d0f678747e02874efded2cad36ae5ba66d8ecda4c1fdd8e22c835","abstract_canon_sha256":"fcf39ba0b0be98bd36ff2cca0ef516bcac31bd353b32d21f03b1b5d4c83ceda8"},"schema_version":"1.0"},"canonical_sha256":"b621ae92580ceea70bcdb8434e16f3baf1f301515311bb1dfe6e22e82407f2ae","source":{"kind":"arxiv","id":"2608.12713","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12713","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12713v1","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12713","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"pith_short_12","alias_value":"WYQ25ESYBTXK","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"pith_short_16","alias_value":"WYQ25ESYBTXKOC6N","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"pith_short_8","alias_value":"WYQ25ESY","created_at":"2026-08-14T00:47:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:WYQ25ESYBTXKOC6NXBBU4FXTXL","target":"record","payload":{"canonical_record":{"source":{"id":"2608.12713","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T01:55:16Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"72bd34b4677d0f678747e02874efded2cad36ae5ba66d8ecda4c1fdd8e22c835","abstract_canon_sha256":"fcf39ba0b0be98bd36ff2cca0ef516bcac31bd353b32d21f03b1b5d4c83ceda8"},"schema_version":"1.0"},"canonical_sha256":"b621ae92580ceea70bcdb8434e16f3baf1f301515311bb1dfe6e22e82407f2ae","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-14T00:47:04.157260Z","signature_b64":"yA1be+0JpHklubZVWhPRVVACxzbVOOPw62fG1F/+Cmhr2tBIJ/bkeUdhdZHj4JNXOkum4jgvocYoJySZugVXDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b621ae92580ceea70bcdb8434e16f3baf1f301515311bb1dfe6e22e82407f2ae","last_reissued_at":"2026-08-14T00:47:04.155177Z","signature_status":"signed_v1","first_computed_at":"2026-08-14T00:47:04.155177Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.12713","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T00:47:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dd8iqaQlUfC672f2ayq7ET1DBJEq67l5e6CA+IGLpqhUznPUugBNWJNLVXLt8n6v7B5xSQQdy/+02zzzMpgFAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T05:13:44.674955Z"},"content_sha256":"e74b64ee02bb047dfd90cb43f1a2e6addbe32a0b687264a234b13550d9221664","schema_version":"1.0","event_id":"sha256:e74b64ee02bb047dfd90cb43f1a2e6addbe32a0b687264a234b13550d9221664"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:WYQ25ESYBTXKOC6NXBBU4FXTXL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"He Zhang, Leo Yu Zhang, Shirui Pan, Xiaoyan Feng, Yanjun Zhang","submitted_at":"2026-08-13T01:55:16Z","abstract_excerpt":"Watermarking LLM-generated text is an important task for tracing its provenance. Existing LLM watermarks preserve provenance under editing, but this same robustness allows an adversary to alter critical content while retaining attribution, a vulnerability known as piggyback spoofing. We introduce an innovative watermark that jointly provides provenance and tamper evidence. It co-embeds a robust signal and a fragile signal into each generated token. The signals share the same mechanism but use independent keys and different seeding windows over normalized text, making one resilient to edits and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12713","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.12713/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T00:47:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O+a4myst/lUvGkD4HIzaUUdKzDPZa1/x9/35tmulsh6TpAJyZBvSKHDlTf2CznSgruli/6GgednF9aOw1iGaDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T05:13:44.675510Z"},"content_sha256":"1ff7dae84751bbdd3b13e9a39c50767837ee3a12d6cda8c219673ecd1d69cf4c","schema_version":"1.0","event_id":"sha256:1ff7dae84751bbdd3b13e9a39c50767837ee3a12d6cda8c219673ecd1d69cf4c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WYQ25ESYBTXKOC6NXBBU4FXTXL/bundle.json","state_url":"https://pith.science/pith/WYQ25ESYBTXKOC6NXBBU4FXTXL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WYQ25ESYBTXKOC6NXBBU4FXTXL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T05:13:44Z","links":{"resolver":"https://pith.science/pith/WYQ25ESYBTXKOC6NXBBU4FXTXL","bundle":"https://pith.science/pith/WYQ25ESYBTXKOC6NXBBU4FXTXL/bundle.json","state":"https://pith.science/pith/WYQ25ESYBTXKOC6NXBBU4FXTXL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WYQ25ESYBTXKOC6NXBBU4FXTXL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:WYQ25ESYBTXKOC6NXBBU4FXTXL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fcf39ba0b0be98bd36ff2cca0ef516bcac31bd353b32d21f03b1b5d4c83ceda8","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T01:55:16Z","title_canon_sha256":"72bd34b4677d0f678747e02874efded2cad36ae5ba66d8ecda4c1fdd8e22c835"},"schema_version":"1.0","source":{"id":"2608.12713","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12713","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12713v1","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12713","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"pith_short_12","alias_value":"WYQ25ESYBTXK","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"pith_short_16","alias_value":"WYQ25ESYBTXKOC6N","created_at":"2026-08-14T00:47:04Z"},{"alias_kind":"pith_short_8","alias_value":"WYQ25ESY","created_at":"2026-08-14T00:47:04Z"}],"graph_snapshots":[{"event_id":"sha256:1ff7dae84751bbdd3b13e9a39c50767837ee3a12d6cda8c219673ecd1d69cf4c","target":"graph","created_at":"2026-08-14T00:47:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.12713/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Watermarking LLM-generated text is an important task for tracing its provenance. Existing LLM watermarks preserve provenance under editing, but this same robustness allows an adversary to alter critical content while retaining attribution, a vulnerability known as piggyback spoofing. We introduce an innovative watermark that jointly provides provenance and tamper evidence. It co-embeds a robust signal and a fragile signal into each generated token. The signals share the same mechanism but use independent keys and different seeding windows over normalized text, making one resilient to edits and","authors_text":"He Zhang, Leo Yu Zhang, Shirui Pan, Xiaoyan Feng, Yanjun Zhang","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T01:55:16Z","title":"Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12713","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e74b64ee02bb047dfd90cb43f1a2e6addbe32a0b687264a234b13550d9221664","target":"record","created_at":"2026-08-14T00:47:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fcf39ba0b0be98bd36ff2cca0ef516bcac31bd353b32d21f03b1b5d4c83ceda8","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-13T01:55:16Z","title_canon_sha256":"72bd34b4677d0f678747e02874efded2cad36ae5ba66d8ecda4c1fdd8e22c835"},"schema_version":"1.0","source":{"id":"2608.12713","kind":"arxiv","version":1}},"canonical_sha256":"b621ae92580ceea70bcdb8434e16f3baf1f301515311bb1dfe6e22e82407f2ae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b621ae92580ceea70bcdb8434e16f3baf1f301515311bb1dfe6e22e82407f2ae","first_computed_at":"2026-08-14T00:47:04.155177Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-14T00:47:04.155177Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yA1be+0JpHklubZVWhPRVVACxzbVOOPw62fG1F/+Cmhr2tBIJ/bkeUdhdZHj4JNXOkum4jgvocYoJySZugVXDw==","signature_status":"signed_v1","signed_at":"2026-08-14T00:47:04.157260Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.12713","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e74b64ee02bb047dfd90cb43f1a2e6addbe32a0b687264a234b13550d9221664","sha256:1ff7dae84751bbdd3b13e9a39c50767837ee3a12d6cda8c219673ecd1d69cf4c"],"state_sha256":"b568d9d494b5d644ce8c0cb6801ef1bdc0ef70489d00ac962d87a16e1666010d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TtDESevg5cw8lC7RvDPbmpO/9phIN1cd0pyW6LaX/ivtcCH+S19JHdVo8xwZFiZU2tSemMW1Z8i8dpwUyuHZBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T05:13:44.679383Z","bundle_sha256":"041718537426aa696b540ffbfca2ab2fac009f24c809ea6a41fb5860a5f2f0c3"}}