{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:YDEHVDNP4LJQPWKA4EGNHHBRWS","short_pith_number":"pith:YDEHVDNP","canonical_record":{"source":{"id":"2205.04145","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-09T09:40:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0a647b70e47fd1fdcea9a0325859a8aaefbec73f423b982910e055d2abaef079","abstract_canon_sha256":"1784e5859fbdb5c0c590fa7fa56376dcc2249e1e6fe2d2e0632d16edfd3d2a00"},"schema_version":"1.0"},"canonical_sha256":"c0c87a8dafe2d307d940e10cd39c31b4be6ff8e4490352c3173c27a20c048b49","source":{"kind":"arxiv","id":"2205.04145","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.04145","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"arxiv_version","alias_value":"2205.04145v2","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.04145","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"pith_short_12","alias_value":"YDEHVDNP4LJQ","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"pith_short_16","alias_value":"YDEHVDNP4LJQPWKA","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"pith_short_8","alias_value":"YDEHVDNP","created_at":"2026-07-05T04:38:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:YDEHVDNP4LJQPWKA4EGNHHBRWS","target":"record","payload":{"canonical_record":{"source":{"id":"2205.04145","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-09T09:40:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0a647b70e47fd1fdcea9a0325859a8aaefbec73f423b982910e055d2abaef079","abstract_canon_sha256":"1784e5859fbdb5c0c590fa7fa56376dcc2249e1e6fe2d2e0632d16edfd3d2a00"},"schema_version":"1.0"},"canonical_sha256":"c0c87a8dafe2d307d940e10cd39c31b4be6ff8e4490352c3173c27a20c048b49","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:38:24.693914Z","signature_b64":"fNeKeii0sCwRiELQw+8XnQ5cv0IpwLaRCc8PqbuqjT/8Eh7RSsb9GDg65vesJSbGGWZdm/mPdyRrpVhUCzhBBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c0c87a8dafe2d307d940e10cd39c31b4be6ff8e4490352c3173c27a20c048b49","last_reissued_at":"2026-07-05T04:38:24.693554Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:38:24.693554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.04145","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:38:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ueZTeEYfkYUuFLbynxgPpTUNxi7n+yt0cabkEalhMwi4c4YXrr7A+CknyGBri0TYNrOFHYmdqHfBGB5oriJhDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:44:27.532891Z"},"content_sha256":"f09e2d9bc28034697d6cd7cde2ff951b60e1744b0d54f944d4948e307eae5d2b","schema_version":"1.0","event_id":"sha256:f09e2d9bc28034697d6cd7cde2ff951b60e1744b0d54f944d4948e307eae5d2b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:YDEHVDNP4LJQPWKA4EGNHHBRWS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Hanzhou Wu, Lina Lin","submitted_at":"2022-05-09T09:40:20Z","abstract_excerpt":"With the widespread use of deep neural networks (DNNs) in many areas, more and more studies focus on protecting DNN models from intellectual property (IP) infringement. Many existing methods apply digital watermarking to protect the DNN models. The majority of them either embed a watermark directly into the internal network structure/parameters or insert a zero-bit watermark by fine-tuning a model to be protected with a set of so-called trigger samples. Though these methods work very well, they were designed for individual DNN models, which cannot be directly applied to deep ensemble models (D"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.04145","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.04145/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:38:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FsfvGkPLwh7Lt9LUxUUHL5HI82GA9eTEqcm5DsxLSkeEZfXPE0uVojkkcO/qeacrJ1TnxWgak8dBoxRmHpk2CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:44:27.533820Z"},"content_sha256":"3f7e4290832a7c90932dfdb53e2745f8a8d0c4ea7bfe24555df14384b3f359c0","schema_version":"1.0","event_id":"sha256:3f7e4290832a7c90932dfdb53e2745f8a8d0c4ea7bfe24555df14384b3f359c0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YDEHVDNP4LJQPWKA4EGNHHBRWS/bundle.json","state_url":"https://pith.science/pith/YDEHVDNP4LJQPWKA4EGNHHBRWS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YDEHVDNP4LJQPWKA4EGNHHBRWS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T21:44:27Z","links":{"resolver":"https://pith.science/pith/YDEHVDNP4LJQPWKA4EGNHHBRWS","bundle":"https://pith.science/pith/YDEHVDNP4LJQPWKA4EGNHHBRWS/bundle.json","state":"https://pith.science/pith/YDEHVDNP4LJQPWKA4EGNHHBRWS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YDEHVDNP4LJQPWKA4EGNHHBRWS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:YDEHVDNP4LJQPWKA4EGNHHBRWS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1784e5859fbdb5c0c590fa7fa56376dcc2249e1e6fe2d2e0632d16edfd3d2a00","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-09T09:40:20Z","title_canon_sha256":"0a647b70e47fd1fdcea9a0325859a8aaefbec73f423b982910e055d2abaef079"},"schema_version":"1.0","source":{"id":"2205.04145","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.04145","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"arxiv_version","alias_value":"2205.04145v2","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.04145","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"pith_short_12","alias_value":"YDEHVDNP4LJQ","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"pith_short_16","alias_value":"YDEHVDNP4LJQPWKA","created_at":"2026-07-05T04:38:24Z"},{"alias_kind":"pith_short_8","alias_value":"YDEHVDNP","created_at":"2026-07-05T04:38:24Z"}],"graph_snapshots":[{"event_id":"sha256:3f7e4290832a7c90932dfdb53e2745f8a8d0c4ea7bfe24555df14384b3f359c0","target":"graph","created_at":"2026-07-05T04:38:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.04145/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the widespread use of deep neural networks (DNNs) in many areas, more and more studies focus on protecting DNN models from intellectual property (IP) infringement. Many existing methods apply digital watermarking to protect the DNN models. The majority of them either embed a watermark directly into the internal network structure/parameters or insert a zero-bit watermark by fine-tuning a model to be protected with a set of so-called trigger samples. Though these methods work very well, they were designed for individual DNN models, which cannot be directly applied to deep ensemble models (D","authors_text":"Hanzhou Wu, Lina Lin","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-09T09:40:20Z","title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.04145","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f09e2d9bc28034697d6cd7cde2ff951b60e1744b0d54f944d4948e307eae5d2b","target":"record","created_at":"2026-07-05T04:38:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1784e5859fbdb5c0c590fa7fa56376dcc2249e1e6fe2d2e0632d16edfd3d2a00","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-09T09:40:20Z","title_canon_sha256":"0a647b70e47fd1fdcea9a0325859a8aaefbec73f423b982910e055d2abaef079"},"schema_version":"1.0","source":{"id":"2205.04145","kind":"arxiv","version":2}},"canonical_sha256":"c0c87a8dafe2d307d940e10cd39c31b4be6ff8e4490352c3173c27a20c048b49","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c0c87a8dafe2d307d940e10cd39c31b4be6ff8e4490352c3173c27a20c048b49","first_computed_at":"2026-07-05T04:38:24.693554Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:38:24.693554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fNeKeii0sCwRiELQw+8XnQ5cv0IpwLaRCc8PqbuqjT/8Eh7RSsb9GDg65vesJSbGGWZdm/mPdyRrpVhUCzhBBA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:38:24.693914Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.04145","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f09e2d9bc28034697d6cd7cde2ff951b60e1744b0d54f944d4948e307eae5d2b","sha256:3f7e4290832a7c90932dfdb53e2745f8a8d0c4ea7bfe24555df14384b3f359c0"],"state_sha256":"4376e6fcce4e07b306c0c6fcde29716fc141f02c63824f656c05a537b44d75bd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kQXrxG9t2IpxRVywO+OwDPcUUGxtuw9zxO5jGqmRDQnqEmL6DCNVBusNtR+kC3R81HYhuZrkHBwWQgp40Ha2DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T21:44:27.541321Z","bundle_sha256":"c9a959e25aadf3df187d4b1687d9c75e40acf1e97a400cf8f93b63f463285f8b"}}