{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:ZLNK5LQRLSGHG3MNGOHZNVQ245","short_pith_number":"pith:ZLNK5LQR","canonical_record":{"source":{"id":"2607.05996","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-07T08:30:59Z","cross_cats_sorted":[],"title_canon_sha256":"57697f171da2666edeb43f3f185ffaf79bebd9ded9ea53c924ba3093ce0c9a28","abstract_canon_sha256":"127b21f00ca36dbb65096ba23e5c0f4d0262a33a3da69dc9e9509eb130daf4b2"},"schema_version":"1.0"},"canonical_sha256":"cadaaeae115c8c736d8d338f96d61ae75d244a2a7076c243767ad2bf7a91c566","source":{"kind":"arxiv","id":"2607.05996","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.05996","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"arxiv_version","alias_value":"2607.05996v1","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.05996","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"pith_short_12","alias_value":"ZLNK5LQRLSGH","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"pith_short_16","alias_value":"ZLNK5LQRLSGHG3MN","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"pith_short_8","alias_value":"ZLNK5LQR","created_at":"2026-07-08T01:18:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:ZLNK5LQRLSGHG3MNGOHZNVQ245","target":"record","payload":{"canonical_record":{"source":{"id":"2607.05996","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-07T08:30:59Z","cross_cats_sorted":[],"title_canon_sha256":"57697f171da2666edeb43f3f185ffaf79bebd9ded9ea53c924ba3093ce0c9a28","abstract_canon_sha256":"127b21f00ca36dbb65096ba23e5c0f4d0262a33a3da69dc9e9509eb130daf4b2"},"schema_version":"1.0"},"canonical_sha256":"cadaaeae115c8c736d8d338f96d61ae75d244a2a7076c243767ad2bf7a91c566","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-08T01:18:52.785673Z","signature_b64":"Eou1Nqr5RYncHdsCWL3FHXIw6XAMQU2K4tnyZ600Qw3TLjV6pgWjTkwBicEOSH8a+3rMVfvDUy0thCcbddOVAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cadaaeae115c8c736d8d338f96d61ae75d244a2a7076c243767ad2bf7a91c566","last_reissued_at":"2026-07-08T01:18:52.785193Z","signature_status":"signed_v1","first_computed_at":"2026-07-08T01:18:52.785193Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.05996","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-08T01:18:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UJl1lIRbeYs/Sciw2GQfbT1gTrpKtJjYVQXk5W08gK6Bh97Zwndb76uXMngdorz8g8PjS3MBxjFl6ngeyprtCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T12:44:12.097373Z"},"content_sha256":"b59d90ef63d991b18363acfe738a0b0a8f8fcd5692e0917d4e14b35afbfac9ab","schema_version":"1.0","event_id":"sha256:b59d90ef63d991b18363acfe738a0b0a8f8fcd5692e0917d4e14b35afbfac9ab"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:ZLNK5LQRLSGHG3MNGOHZNVQ245","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Byunghoon Oh, Jaewoo Lee, Sunghwan Park","submitted_at":"2026-07-07T08:30:59Z","abstract_excerpt":"Unlearnable examples keep publicly shared photos from being learned by unauthorized face-recognition models. An imperceptible perturbation, added before sharing, makes any model trained on the protected photos fail on clean faces. The perturbation is crafted on the shared image, however the attacker trains on the face it extracts, cropped and resized to the recognizer input, and under this extraction the protection collapses. We propose LPID, which builds the extraction into the unlearnable-example objective. LPID confines the perturbation to the extracted face region and optimizes it through "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.05996","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.05996/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-08T01:18:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"92Xk1iC+MIwYpt4EWnivgrFYaVhoI4oqzN4h6DuEy8NP8UEKD8d5+di7AJ46j5aGJW4rCEWkwuLRPTjE7jTXAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T12:44:12.097987Z"},"content_sha256":"1633144ad3576cb081e37a031b31a7cde9a8d41032029744ef0df752a326636c","schema_version":"1.0","event_id":"sha256:1633144ad3576cb081e37a031b31a7cde9a8d41032029744ef0df752a326636c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZLNK5LQRLSGHG3MNGOHZNVQ245/bundle.json","state_url":"https://pith.science/pith/ZLNK5LQRLSGHG3MNGOHZNVQ245/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZLNK5LQRLSGHG3MNGOHZNVQ245/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T12:44:12Z","links":{"resolver":"https://pith.science/pith/ZLNK5LQRLSGHG3MNGOHZNVQ245","bundle":"https://pith.science/pith/ZLNK5LQRLSGHG3MNGOHZNVQ245/bundle.json","state":"https://pith.science/pith/ZLNK5LQRLSGHG3MNGOHZNVQ245/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZLNK5LQRLSGHG3MNGOHZNVQ245/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:ZLNK5LQRLSGHG3MNGOHZNVQ245","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"127b21f00ca36dbb65096ba23e5c0f4d0262a33a3da69dc9e9509eb130daf4b2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-07T08:30:59Z","title_canon_sha256":"57697f171da2666edeb43f3f185ffaf79bebd9ded9ea53c924ba3093ce0c9a28"},"schema_version":"1.0","source":{"id":"2607.05996","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.05996","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"arxiv_version","alias_value":"2607.05996v1","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.05996","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"pith_short_12","alias_value":"ZLNK5LQRLSGH","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"pith_short_16","alias_value":"ZLNK5LQRLSGHG3MN","created_at":"2026-07-08T01:18:52Z"},{"alias_kind":"pith_short_8","alias_value":"ZLNK5LQR","created_at":"2026-07-08T01:18:52Z"}],"graph_snapshots":[{"event_id":"sha256:1633144ad3576cb081e37a031b31a7cde9a8d41032029744ef0df752a326636c","target":"graph","created_at":"2026-07-08T01:18:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.05996/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Unlearnable examples keep publicly shared photos from being learned by unauthorized face-recognition models. An imperceptible perturbation, added before sharing, makes any model trained on the protected photos fail on clean faces. The perturbation is crafted on the shared image, however the attacker trains on the face it extracts, cropped and resized to the recognizer input, and under this extraction the protection collapses. We propose LPID, which builds the extraction into the unlearnable-example objective. LPID confines the perturbation to the extracted face region and optimizes it through ","authors_text":"Byunghoon Oh, Jaewoo Lee, Sunghwan Park","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-07T08:30:59Z","title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.05996","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b59d90ef63d991b18363acfe738a0b0a8f8fcd5692e0917d4e14b35afbfac9ab","target":"record","created_at":"2026-07-08T01:18:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"127b21f00ca36dbb65096ba23e5c0f4d0262a33a3da69dc9e9509eb130daf4b2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-07T08:30:59Z","title_canon_sha256":"57697f171da2666edeb43f3f185ffaf79bebd9ded9ea53c924ba3093ce0c9a28"},"schema_version":"1.0","source":{"id":"2607.05996","kind":"arxiv","version":1}},"canonical_sha256":"cadaaeae115c8c736d8d338f96d61ae75d244a2a7076c243767ad2bf7a91c566","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cadaaeae115c8c736d8d338f96d61ae75d244a2a7076c243767ad2bf7a91c566","first_computed_at":"2026-07-08T01:18:52.785193Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-08T01:18:52.785193Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Eou1Nqr5RYncHdsCWL3FHXIw6XAMQU2K4tnyZ600Qw3TLjV6pgWjTkwBicEOSH8a+3rMVfvDUy0thCcbddOVAA==","signature_status":"signed_v1","signed_at":"2026-07-08T01:18:52.785673Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.05996","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b59d90ef63d991b18363acfe738a0b0a8f8fcd5692e0917d4e14b35afbfac9ab","sha256:1633144ad3576cb081e37a031b31a7cde9a8d41032029744ef0df752a326636c"],"state_sha256":"c94ba60aa5dc59144786d12fe0e66a849181cbb6a334509cd5872d12e9b4bc23"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/+QSriseYD6i6EZHckMNhygAQfWWIQEIIq0yV57dRLqllC8jcZWhd2hY2iypPNdhPb4FnEL+jZw+BFLs9D8oCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T12:44:12.102275Z","bundle_sha256":"fed626e90fd017ece4752746e036a10daa6ce2bcb735a5ca1160d64cbc2aa046"}}