{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:YFPST6DASH4USOU55WWUDGMPOX","short_pith_number":"pith:YFPST6DA","canonical_record":{"source":{"id":"2503.19176","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-24T21:57:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f1233e258603b48b5462d136af3474ce88f056800094cee19f97becdb42b2c72","abstract_canon_sha256":"36446b99d102b220089631a1f6f2779bcab2e7e47999de7604f6810583b55f60"},"schema_version":"1.0"},"canonical_sha256":"c15f29f86091f9493a9dedad41998f75c9bc599f4b4551dd678575844ffbeedd","source":{"kind":"arxiv","id":"2503.19176","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.19176","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"arxiv_version","alias_value":"2503.19176v2","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.19176","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_12","alias_value":"YFPST6DASH4U","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_16","alias_value":"YFPST6DASH4USOU5","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_8","alias_value":"YFPST6DA","created_at":"2026-07-05T10:39:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:YFPST6DASH4USOU55WWUDGMPOX","target":"record","payload":{"canonical_record":{"source":{"id":"2503.19176","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-24T21:57:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f1233e258603b48b5462d136af3474ce88f056800094cee19f97becdb42b2c72","abstract_canon_sha256":"36446b99d102b220089631a1f6f2779bcab2e7e47999de7604f6810583b55f60"},"schema_version":"1.0"},"canonical_sha256":"c15f29f86091f9493a9dedad41998f75c9bc599f4b4551dd678575844ffbeedd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:39:48.002936Z","signature_b64":"4fwZEdRQqZcXzblG5sBS1JQOkVsFAgew5ffxZJ6nlb67boyTZOs28TIof9iP+yi+qsWO6rKqXcxqSefGXLHCCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c15f29f86091f9493a9dedad41998f75c9bc599f4b4551dd678575844ffbeedd","last_reissued_at":"2026-07-05T10:39:48.002393Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:39:48.002393Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.19176","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z/rWK3unJOnotcAvuVr9ULLFabVCnLT35DMjT8EYAayG/dtpVlzHTA4wBMeNUTURo8Bhb8EUGRt6NQlAWKx8Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T23:19:10.126154Z"},"content_sha256":"53fec3150830e06012f959fd0d6384ea956d04a1e1bbe29d2a79604d40ec701e","schema_version":"1.0","event_id":"sha256:53fec3150830e06012f959fd0d6384ea956d04a1e1bbe29d2a79604d40ec701e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:YFPST6DASH4USOU55WWUDGMPOX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: How Robust is Audio Watermarking in Generative AI models?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Aaron Bien Ramos, Ashwin Innuganti, Hanqing Guo, Qiben Yan, Yizhu Wen","submitted_at":"2025-03-24T21:57:59Z","abstract_excerpt":"Audio watermarking is increasingly used to verify the provenance of AI-generated content, enabling applications such as detecting AI-generated speech, protecting music IP, and defending against voice cloning. To be effective, audio watermarks must resist removal attacks that distort signals to evade detection. While many schemes claim robustness, these claims are typically tested in isolation and against a limited set of attacks. A systematic evaluation against diverse removal attacks is lacking, hindering practical deployment. In this paper, we investigate whether recent watermarking schemes "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.19176","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.19176/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CXp0ILBf7u9n7KRMWFovZ5KL4dkncvxrXGljtDdSqhD1I/dOM0T0DSZIzYmNdbtuAKwSTEZFyxS66721kCkADA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T23:19:10.127447Z"},"content_sha256":"a92d969ba20ef3d7dd3b42bd3fe40c10ebd2cbf09923bbc1a955378956844656","schema_version":"1.0","event_id":"sha256:a92d969ba20ef3d7dd3b42bd3fe40c10ebd2cbf09923bbc1a955378956844656"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YFPST6DASH4USOU55WWUDGMPOX/bundle.json","state_url":"https://pith.science/pith/YFPST6DASH4USOU55WWUDGMPOX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YFPST6DASH4USOU55WWUDGMPOX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T23:19:10Z","links":{"resolver":"https://pith.science/pith/YFPST6DASH4USOU55WWUDGMPOX","bundle":"https://pith.science/pith/YFPST6DASH4USOU55WWUDGMPOX/bundle.json","state":"https://pith.science/pith/YFPST6DASH4USOU55WWUDGMPOX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YFPST6DASH4USOU55WWUDGMPOX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YFPST6DASH4USOU55WWUDGMPOX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36446b99d102b220089631a1f6f2779bcab2e7e47999de7604f6810583b55f60","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-24T21:57:59Z","title_canon_sha256":"f1233e258603b48b5462d136af3474ce88f056800094cee19f97becdb42b2c72"},"schema_version":"1.0","source":{"id":"2503.19176","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.19176","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"arxiv_version","alias_value":"2503.19176v2","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.19176","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_12","alias_value":"YFPST6DASH4U","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_16","alias_value":"YFPST6DASH4USOU5","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_8","alias_value":"YFPST6DA","created_at":"2026-07-05T10:39:48Z"}],"graph_snapshots":[{"event_id":"sha256:a92d969ba20ef3d7dd3b42bd3fe40c10ebd2cbf09923bbc1a955378956844656","target":"graph","created_at":"2026-07-05T10:39:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.19176/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Audio watermarking is increasingly used to verify the provenance of AI-generated content, enabling applications such as detecting AI-generated speech, protecting music IP, and defending against voice cloning. To be effective, audio watermarks must resist removal attacks that distort signals to evade detection. While many schemes claim robustness, these claims are typically tested in isolation and against a limited set of attacks. A systematic evaluation against diverse removal attacks is lacking, hindering practical deployment. In this paper, we investigate whether recent watermarking schemes ","authors_text":"Aaron Bien Ramos, Ashwin Innuganti, Hanqing Guo, Qiben Yan, Yizhu Wen","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-24T21:57:59Z","title":"SoK: How Robust is Audio Watermarking in Generative AI models?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.19176","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:53fec3150830e06012f959fd0d6384ea956d04a1e1bbe29d2a79604d40ec701e","target":"record","created_at":"2026-07-05T10:39:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36446b99d102b220089631a1f6f2779bcab2e7e47999de7604f6810583b55f60","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-24T21:57:59Z","title_canon_sha256":"f1233e258603b48b5462d136af3474ce88f056800094cee19f97becdb42b2c72"},"schema_version":"1.0","source":{"id":"2503.19176","kind":"arxiv","version":2}},"canonical_sha256":"c15f29f86091f9493a9dedad41998f75c9bc599f4b4551dd678575844ffbeedd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c15f29f86091f9493a9dedad41998f75c9bc599f4b4551dd678575844ffbeedd","first_computed_at":"2026-07-05T10:39:48.002393Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:39:48.002393Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4fwZEdRQqZcXzblG5sBS1JQOkVsFAgew5ffxZJ6nlb67boyTZOs28TIof9iP+yi+qsWO6rKqXcxqSefGXLHCCA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:39:48.002936Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.19176","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:53fec3150830e06012f959fd0d6384ea956d04a1e1bbe29d2a79604d40ec701e","sha256:a92d969ba20ef3d7dd3b42bd3fe40c10ebd2cbf09923bbc1a955378956844656"],"state_sha256":"098998674be1719e95032d8640c66a595e26ab0644a5c705c1a12049fa899809"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aUS5qLjAstYQkuUcowZJlGkq2mSGffcsHy5oEaDfYDFRCguAenYQmZQJouLGbL6iLsSOTXtTSZE6YYLYwOskAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T23:19:10.133976Z","bundle_sha256":"fa5d51b90dd0b50996b32279194fc858d37514294d22d7576ea5f636f2f433eb"}}