{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:Y45BYY2UBA2KJQITCIBYUT4P6R","short_pith_number":"pith:Y45BYY2U","canonical_record":{"source":{"id":"2607.10794","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-12T15:05:04Z","cross_cats_sorted":[],"title_canon_sha256":"5c0a924a7d86a692c75d4492562019d1f7ae87289dd0288976fec45abfce1125","abstract_canon_sha256":"45c858f5140d9e687b054d25daa36af7f107fc12d385b069cb67026e9236c273"},"schema_version":"1.0"},"canonical_sha256":"c73a1c63540834a4c11312038a4f8ff4715a924babb3469098cf6db243fcfb94","source":{"kind":"arxiv","id":"2607.10794","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.10794","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"arxiv_version","alias_value":"2607.10794v1","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.10794","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"pith_short_12","alias_value":"Y45BYY2UBA2K","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"pith_short_16","alias_value":"Y45BYY2UBA2KJQIT","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"pith_short_8","alias_value":"Y45BYY2U","created_at":"2026-07-14T01:21:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:Y45BYY2UBA2KJQITCIBYUT4P6R","target":"record","payload":{"canonical_record":{"source":{"id":"2607.10794","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-12T15:05:04Z","cross_cats_sorted":[],"title_canon_sha256":"5c0a924a7d86a692c75d4492562019d1f7ae87289dd0288976fec45abfce1125","abstract_canon_sha256":"45c858f5140d9e687b054d25daa36af7f107fc12d385b069cb67026e9236c273"},"schema_version":"1.0"},"canonical_sha256":"c73a1c63540834a4c11312038a4f8ff4715a924babb3469098cf6db243fcfb94","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-14T01:21:40.453784Z","signature_b64":"tfq1z9aJ3jjprKTO3Wa5+KUb4/S9KDaP2WP6+5J4t4s/i3kqtti0HxXAB4N/sZcEGI2Zmc6Rl72ypgxWrPe+DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c73a1c63540834a4c11312038a4f8ff4715a924babb3469098cf6db243fcfb94","last_reissued_at":"2026-07-14T01:21:40.452971Z","signature_status":"signed_v1","first_computed_at":"2026-07-14T01:21:40.452971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.10794","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-14T01:21:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vorvjP4rWkIOlOIB4MGgvU4MhE5UuaipbxRkENz3qHREUVmyBELGnYK6+XQ+5kskcgYdtkiHw31lbF21QjUmDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:46:43.802697Z"},"content_sha256":"394853d632eb0f3c20a7beb42305dbeaf6e04ed0c5b7329a591831b92ef5e577","schema_version":"1.0","event_id":"sha256:394853d632eb0f3c20a7beb42305dbeaf6e04ed0c5b7329a591831b92ef5e577"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:Y45BYY2UBA2KJQITCIBYUT4P6R","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can Watermarking Techniques Help Prevent LLM Model Stealing?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amos Stern, Elette Boyle, Keivan Rezaei, MohammadTaghi Hajiaghayi, Suho Shin","submitted_at":"2026-07-12T15:05:04Z","abstract_excerpt":"Model stealing attacks have recently been introduced, enabling the extraction of precise information from black-box commercial language models. In this work, we propose defense methods against a recent attack of \\cite{carlini2024stealing} and extensions for extracting the hidden layer dimension of production language models. Our methods are inspired by watermarking techniques that perturb the logits layer of these models to prevent such attacks. We provide empirical experiments demonstrating the effectiveness of the proposed defense versus model quality degradation across various configuration"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.10794","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.10794/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-14T01:21:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k2q+gW5yyM+qGRx5J1hHjF+MMnW+Ch4TyqhL+Ql5Q93u9WPcVRQi6pfCtroQq/ZJ396079l159RsEbD71VCdBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:46:43.803076Z"},"content_sha256":"d64b879135caa7f7b3a5ff2ff02c82ac14c533e51f9bcf4dee79ca2195770282","schema_version":"1.0","event_id":"sha256:d64b879135caa7f7b3a5ff2ff02c82ac14c533e51f9bcf4dee79ca2195770282"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y45BYY2UBA2KJQITCIBYUT4P6R/bundle.json","state_url":"https://pith.science/pith/Y45BYY2UBA2KJQITCIBYUT4P6R/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y45BYY2UBA2KJQITCIBYUT4P6R/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T04:46:43Z","links":{"resolver":"https://pith.science/pith/Y45BYY2UBA2KJQITCIBYUT4P6R","bundle":"https://pith.science/pith/Y45BYY2UBA2KJQITCIBYUT4P6R/bundle.json","state":"https://pith.science/pith/Y45BYY2UBA2KJQITCIBYUT4P6R/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y45BYY2UBA2KJQITCIBYUT4P6R/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:Y45BYY2UBA2KJQITCIBYUT4P6R","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"45c858f5140d9e687b054d25daa36af7f107fc12d385b069cb67026e9236c273","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-12T15:05:04Z","title_canon_sha256":"5c0a924a7d86a692c75d4492562019d1f7ae87289dd0288976fec45abfce1125"},"schema_version":"1.0","source":{"id":"2607.10794","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.10794","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"arxiv_version","alias_value":"2607.10794v1","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.10794","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"pith_short_12","alias_value":"Y45BYY2UBA2K","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"pith_short_16","alias_value":"Y45BYY2UBA2KJQIT","created_at":"2026-07-14T01:21:40Z"},{"alias_kind":"pith_short_8","alias_value":"Y45BYY2U","created_at":"2026-07-14T01:21:40Z"}],"graph_snapshots":[{"event_id":"sha256:d64b879135caa7f7b3a5ff2ff02c82ac14c533e51f9bcf4dee79ca2195770282","target":"graph","created_at":"2026-07-14T01:21:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.10794/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model stealing attacks have recently been introduced, enabling the extraction of precise information from black-box commercial language models. In this work, we propose defense methods against a recent attack of \\cite{carlini2024stealing} and extensions for extracting the hidden layer dimension of production language models. Our methods are inspired by watermarking techniques that perturb the logits layer of these models to prevent such attacks. We provide empirical experiments demonstrating the effectiveness of the proposed defense versus model quality degradation across various configuration","authors_text":"Amos Stern, Elette Boyle, Keivan Rezaei, MohammadTaghi Hajiaghayi, Suho Shin","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-12T15:05:04Z","title":"Can Watermarking Techniques Help Prevent LLM Model Stealing?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.10794","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:394853d632eb0f3c20a7beb42305dbeaf6e04ed0c5b7329a591831b92ef5e577","target":"record","created_at":"2026-07-14T01:21:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"45c858f5140d9e687b054d25daa36af7f107fc12d385b069cb67026e9236c273","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-12T15:05:04Z","title_canon_sha256":"5c0a924a7d86a692c75d4492562019d1f7ae87289dd0288976fec45abfce1125"},"schema_version":"1.0","source":{"id":"2607.10794","kind":"arxiv","version":1}},"canonical_sha256":"c73a1c63540834a4c11312038a4f8ff4715a924babb3469098cf6db243fcfb94","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c73a1c63540834a4c11312038a4f8ff4715a924babb3469098cf6db243fcfb94","first_computed_at":"2026-07-14T01:21:40.452971Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-14T01:21:40.452971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tfq1z9aJ3jjprKTO3Wa5+KUb4/S9KDaP2WP6+5J4t4s/i3kqtti0HxXAB4N/sZcEGI2Zmc6Rl72ypgxWrPe+DA==","signature_status":"signed_v1","signed_at":"2026-07-14T01:21:40.453784Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.10794","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:394853d632eb0f3c20a7beb42305dbeaf6e04ed0c5b7329a591831b92ef5e577","sha256:d64b879135caa7f7b3a5ff2ff02c82ac14c533e51f9bcf4dee79ca2195770282"],"state_sha256":"d5aac8777f8d6068d3f53f3694247b8fd6849729f6b7229b06d5814d6632ae68"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0ejDyCknx+fx4i50KvQyA32bLbdgbLL7Adw4aBpEd0wPUOMtz+m/C0paYWwf71a3WKP9YRRkDY5aoH+g41T0Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T04:46:43.805694Z","bundle_sha256":"2002d2c6845bf278431ed3283d38cc14e7a9db8ecee30ebdd987748e4fb72cee"}}