{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Y4GZ43CWADNY6XDCS5RZ63TJGV","short_pith_number":"pith:Y4GZ43CW","canonical_record":{"source":{"id":"2402.14904","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-22T18:55:22Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"f36a7adae4445a76a803d07df073ef91667b1db761f380306fbaee148007341b","abstract_canon_sha256":"086e5cf1d2c89f06d39a26870177f0ba391b6add09646d0f6478bed0697ae7f9"},"schema_version":"1.0"},"canonical_sha256":"c70d9e6c5600db8f5c6297639f6e69356d50d223ce79910e4510b562b5b6ca7e","source":{"kind":"arxiv","id":"2402.14904","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14904","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14904v2","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14904","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"pith_short_12","alias_value":"Y4GZ43CWADNY","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"pith_short_16","alias_value":"Y4GZ43CWADNY6XDC","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"pith_short_8","alias_value":"Y4GZ43CW","created_at":"2026-07-05T09:26:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Y4GZ43CWADNY6XDCS5RZ63TJGV","target":"record","payload":{"canonical_record":{"source":{"id":"2402.14904","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-22T18:55:22Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"f36a7adae4445a76a803d07df073ef91667b1db761f380306fbaee148007341b","abstract_canon_sha256":"086e5cf1d2c89f06d39a26870177f0ba391b6add09646d0f6478bed0697ae7f9"},"schema_version":"1.0"},"canonical_sha256":"c70d9e6c5600db8f5c6297639f6e69356d50d223ce79910e4510b562b5b6ca7e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:26:24.521477Z","signature_b64":"kSYcZsUD5DyhmKa/y3naUziGwoVih/Dr9sRt3r1IKlpL+02SZGzdyquIXEgGOXJyCcV/FkhZ0Yyc6uBQiUomBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c70d9e6c5600db8f5c6297639f6e69356d50d223ce79910e4510b562b5b6ca7e","last_reissued_at":"2026-07-05T09:26:24.521028Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:26:24.521028Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.14904","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VRtAqGsNkYh/Nj+0svtM+tdry9i1Kq/ZU+GvDmzYaCKHMjKQxaFD9nJTgz2Rv5azacbWybxvSmZOp9qzbpqzCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T23:20:40.421395Z"},"content_sha256":"0bc3f6ec77c15ac59e54aa1a63ada658955db39cf76fd3608c311675ab22dc56","schema_version":"1.0","event_id":"sha256:0bc3f6ec77c15ac59e54aa1a63ada658955db39cf76fd3608c311675ab22dc56"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Y4GZ43CWADNY6XDCS5RZ63TJGV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Watermarking Makes Language Models Radioactive","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Alain Durmus, Matthijs Douze, Pierre Fernandez, Teddy Furon, Tom Sander","submitted_at":"2024-02-22T18:55:22Z","abstract_excerpt":"We investigate the radioactivity of text generated by large language models (LLM), i.e. whether it is possible to detect that such synthetic input was used to train a subsequent LLM. Current methods like membership inference or active IP protection either work only in settings where the suspected text is known or do not provide reliable statistical guarantees. We discover that, on the contrary, it is possible to reliably determine if a language model was trained on synthetic data if that data is output by a watermarked LLM. Our new methods, specialized for radioactivity, detects with a provabl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14904","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.14904/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2MI+pAPhejbOz66jp6gbAfHllfg30RSmEAtQKaP0YXjWURED5I7gXfy3AjEYdL8lBv4qvvGAw3wEcGu5uTS1CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T23:20:40.422208Z"},"content_sha256":"a5d7c4d3457323e93371315e2721ba6d929d519a2c7fae98499fb1238ae8f813","schema_version":"1.0","event_id":"sha256:a5d7c4d3457323e93371315e2721ba6d929d519a2c7fae98499fb1238ae8f813"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y4GZ43CWADNY6XDCS5RZ63TJGV/bundle.json","state_url":"https://pith.science/pith/Y4GZ43CWADNY6XDCS5RZ63TJGV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y4GZ43CWADNY6XDCS5RZ63TJGV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T23:20:40Z","links":{"resolver":"https://pith.science/pith/Y4GZ43CWADNY6XDCS5RZ63TJGV","bundle":"https://pith.science/pith/Y4GZ43CWADNY6XDCS5RZ63TJGV/bundle.json","state":"https://pith.science/pith/Y4GZ43CWADNY6XDCS5RZ63TJGV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y4GZ43CWADNY6XDCS5RZ63TJGV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Y4GZ43CWADNY6XDCS5RZ63TJGV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"086e5cf1d2c89f06d39a26870177f0ba391b6add09646d0f6478bed0697ae7f9","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-22T18:55:22Z","title_canon_sha256":"f36a7adae4445a76a803d07df073ef91667b1db761f380306fbaee148007341b"},"schema_version":"1.0","source":{"id":"2402.14904","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14904","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14904v2","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14904","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"pith_short_12","alias_value":"Y4GZ43CWADNY","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"pith_short_16","alias_value":"Y4GZ43CWADNY6XDC","created_at":"2026-07-05T09:26:24Z"},{"alias_kind":"pith_short_8","alias_value":"Y4GZ43CW","created_at":"2026-07-05T09:26:24Z"}],"graph_snapshots":[{"event_id":"sha256:a5d7c4d3457323e93371315e2721ba6d929d519a2c7fae98499fb1238ae8f813","target":"graph","created_at":"2026-07-05T09:26:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.14904/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We investigate the radioactivity of text generated by large language models (LLM), i.e. whether it is possible to detect that such synthetic input was used to train a subsequent LLM. Current methods like membership inference or active IP protection either work only in settings where the suspected text is known or do not provide reliable statistical guarantees. We discover that, on the contrary, it is possible to reliably determine if a language model was trained on synthetic data if that data is output by a watermarked LLM. Our new methods, specialized for radioactivity, detects with a provabl","authors_text":"Alain Durmus, Matthijs Douze, Pierre Fernandez, Teddy Furon, Tom Sander","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-22T18:55:22Z","title":"Watermarking Makes Language Models Radioactive"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14904","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0bc3f6ec77c15ac59e54aa1a63ada658955db39cf76fd3608c311675ab22dc56","target":"record","created_at":"2026-07-05T09:26:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"086e5cf1d2c89f06d39a26870177f0ba391b6add09646d0f6478bed0697ae7f9","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-22T18:55:22Z","title_canon_sha256":"f36a7adae4445a76a803d07df073ef91667b1db761f380306fbaee148007341b"},"schema_version":"1.0","source":{"id":"2402.14904","kind":"arxiv","version":2}},"canonical_sha256":"c70d9e6c5600db8f5c6297639f6e69356d50d223ce79910e4510b562b5b6ca7e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c70d9e6c5600db8f5c6297639f6e69356d50d223ce79910e4510b562b5b6ca7e","first_computed_at":"2026-07-05T09:26:24.521028Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:26:24.521028Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kSYcZsUD5DyhmKa/y3naUziGwoVih/Dr9sRt3r1IKlpL+02SZGzdyquIXEgGOXJyCcV/FkhZ0Yyc6uBQiUomBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:26:24.521477Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.14904","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0bc3f6ec77c15ac59e54aa1a63ada658955db39cf76fd3608c311675ab22dc56","sha256:a5d7c4d3457323e93371315e2721ba6d929d519a2c7fae98499fb1238ae8f813"],"state_sha256":"7f14e3df8dbd94c923ac322b23f4e337922987a9b2c651a6aec7c84b6531174a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WyNe5HSqKKmv7fKUWfanhVErcR1qPbW8NdIGQUghHYqrzL01Hc6r56BvnWLr7+P5yw8xKL2la4h3JlcvmM/TBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T23:20:40.427718Z","bundle_sha256":"4924662e7c2ea8e7d83f29bdcafa3f20148c4744268618c94af10e4e535ba906"}}