{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Z6TPIARKHZDHFXUEI3UC3JKMHX","short_pith_number":"pith:Z6TPIARK","canonical_record":{"source":{"id":"2412.20768","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-30T07:37:06Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f2bb50e7614f5035d9beba53927f8cf62386dd98de07ac6db101fd5fb84ba26b","abstract_canon_sha256":"793f55ed3f03f1d5e084777559f482069e14b44851636dfae1d472ffc66db6a3"},"schema_version":"1.0"},"canonical_sha256":"cfa6f4022a3e4672de8446e82da54c3de6a091c98d1ca2eb1cbe5cdb1a91f308","source":{"kind":"arxiv","id":"2412.20768","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.20768","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"arxiv_version","alias_value":"2412.20768v1","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.20768","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"pith_short_12","alias_value":"Z6TPIARKHZDH","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"pith_short_16","alias_value":"Z6TPIARKHZDHFXUE","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"pith_short_8","alias_value":"Z6TPIARK","created_at":"2026-07-05T09:55:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Z6TPIARKHZDHFXUEI3UC3JKMHX","target":"record","payload":{"canonical_record":{"source":{"id":"2412.20768","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-30T07:37:06Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f2bb50e7614f5035d9beba53927f8cf62386dd98de07ac6db101fd5fb84ba26b","abstract_canon_sha256":"793f55ed3f03f1d5e084777559f482069e14b44851636dfae1d472ffc66db6a3"},"schema_version":"1.0"},"canonical_sha256":"cfa6f4022a3e4672de8446e82da54c3de6a091c98d1ca2eb1cbe5cdb1a91f308","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:55:21.973703Z","signature_b64":"5y7AUruyeGOFAOw8fwutIGhNcIMhWQ+fwc5EvEqT81S3AcPQiC5w5ViofHGXdCQePbrx8rEoL/+2pEigX+spAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cfa6f4022a3e4672de8446e82da54c3de6a091c98d1ca2eb1cbe5cdb1a91f308","last_reissued_at":"2026-07-05T09:55:21.973295Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:55:21.973295Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.20768","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:55:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/5KXEo8zjQ9KhiXW/f4wjmkmPcejCTuG0UO3DaqKqjFKkrx5ZDtr6cdfCU+ieFw7Iwdf0Wmn0Oo1NK+7bBtjBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T19:55:45.101049Z"},"content_sha256":"e8be114779e5a85ae677a8bf5078f15f07542bce0a81953d6f78b59a68269848","schema_version":"1.0","event_id":"sha256:e8be114779e5a85ae677a8bf5078f15f07542bce0a81953d6f78b59a68269848"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Z6TPIARKHZDHFXUEI3UC3JKMHX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sample Correlation for Fingerprinting Deep Face Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Jian Liang, Jiyang Guan, Ran He, Yanbo Wang","submitted_at":"2024-12-30T07:37:06Z","abstract_excerpt":"Face recognition has witnessed remarkable advancements in recent years, thanks to the development of deep learning techniques.However, an off-the-shelf face recognition model as a commercial service could be stolen by model stealing attacks, posing great threats to the rights of the model owner.Model fingerprinting, as a model stealing detection method, aims to verify whether a suspect model is stolen from the victim model, gaining more and more attention nowadays.Previous methods always utilize transferable adversarial examples as the model fingerprint, but this method is known to be sensitiv"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.20768","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.20768/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:55:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1QX1LOnWowEQu5NGQRl9f7D2BzVngCJOcrjdxFu8NbQzu3SeMFJZR/OiZOIVb9LJ3rSA6rkd9r2SfFQe0k6sCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T19:55:45.101705Z"},"content_sha256":"fa9fbccacc89dea592adf9b90c2e6745fceae45d25845f350b601e627fbc7830","schema_version":"1.0","event_id":"sha256:fa9fbccacc89dea592adf9b90c2e6745fceae45d25845f350b601e627fbc7830"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z6TPIARKHZDHFXUEI3UC3JKMHX/bundle.json","state_url":"https://pith.science/pith/Z6TPIARKHZDHFXUEI3UC3JKMHX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z6TPIARKHZDHFXUEI3UC3JKMHX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T19:55:45Z","links":{"resolver":"https://pith.science/pith/Z6TPIARKHZDHFXUEI3UC3JKMHX","bundle":"https://pith.science/pith/Z6TPIARKHZDHFXUEI3UC3JKMHX/bundle.json","state":"https://pith.science/pith/Z6TPIARKHZDHFXUEI3UC3JKMHX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z6TPIARKHZDHFXUEI3UC3JKMHX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Z6TPIARKHZDHFXUEI3UC3JKMHX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"793f55ed3f03f1d5e084777559f482069e14b44851636dfae1d472ffc66db6a3","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-30T07:37:06Z","title_canon_sha256":"f2bb50e7614f5035d9beba53927f8cf62386dd98de07ac6db101fd5fb84ba26b"},"schema_version":"1.0","source":{"id":"2412.20768","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.20768","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"arxiv_version","alias_value":"2412.20768v1","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.20768","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"pith_short_12","alias_value":"Z6TPIARKHZDH","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"pith_short_16","alias_value":"Z6TPIARKHZDHFXUE","created_at":"2026-07-05T09:55:21Z"},{"alias_kind":"pith_short_8","alias_value":"Z6TPIARK","created_at":"2026-07-05T09:55:21Z"}],"graph_snapshots":[{"event_id":"sha256:fa9fbccacc89dea592adf9b90c2e6745fceae45d25845f350b601e627fbc7830","target":"graph","created_at":"2026-07-05T09:55:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.20768/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Face recognition has witnessed remarkable advancements in recent years, thanks to the development of deep learning techniques.However, an off-the-shelf face recognition model as a commercial service could be stolen by model stealing attacks, posing great threats to the rights of the model owner.Model fingerprinting, as a model stealing detection method, aims to verify whether a suspect model is stolen from the victim model, gaining more and more attention nowadays.Previous methods always utilize transferable adversarial examples as the model fingerprint, but this method is known to be sensitiv","authors_text":"Jian Liang, Jiyang Guan, Ran He, Yanbo Wang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.20768","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e8be114779e5a85ae677a8bf5078f15f07542bce0a81953d6f78b59a68269848","target":"record","created_at":"2026-07-05T09:55:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"793f55ed3f03f1d5e084777559f482069e14b44851636dfae1d472ffc66db6a3","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-30T07:37:06Z","title_canon_sha256":"f2bb50e7614f5035d9beba53927f8cf62386dd98de07ac6db101fd5fb84ba26b"},"schema_version":"1.0","source":{"id":"2412.20768","kind":"arxiv","version":1}},"canonical_sha256":"cfa6f4022a3e4672de8446e82da54c3de6a091c98d1ca2eb1cbe5cdb1a91f308","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cfa6f4022a3e4672de8446e82da54c3de6a091c98d1ca2eb1cbe5cdb1a91f308","first_computed_at":"2026-07-05T09:55:21.973295Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:55:21.973295Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5y7AUruyeGOFAOw8fwutIGhNcIMhWQ+fwc5EvEqT81S3AcPQiC5w5ViofHGXdCQePbrx8rEoL/+2pEigX+spAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:55:21.973703Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.20768","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e8be114779e5a85ae677a8bf5078f15f07542bce0a81953d6f78b59a68269848","sha256:fa9fbccacc89dea592adf9b90c2e6745fceae45d25845f350b601e627fbc7830"],"state_sha256":"f748136e8c53af43f5e5835bda5321e081bbc87f1f9de964933646a15f2b2a8f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9yJXu2W+OPyhWNEwt4M1fg9ElX0NFtWYkMXndf9Utf+kHN8r+VBJMVDkgIAzBhOX9t5mUvoy2pdXbPeE6wMFDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T19:55:45.109766Z","bundle_sha256":"96cfabc44fce0ab29b773f3c89e22eeb22b035aeb60f9f2698c4b89cbff693eb"}}