{"as_of":"2026-08-09T17:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:10462202316681e6f62570746a35dcf0c182b92af65973b708b866ebd22d3a34","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":39,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T15:35:36.166834Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T11:49:50.341884Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-08T15:35:36.166834Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.166834Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:5cacb91ff3a3759e02a2d7b387ead1a8833c4076b44f36a793bdcfb012e9c08f","observation_id":"a557f1b6-10ac-4134-8436-f4f44cab69c2","resolution":{"observed_at":"2026-08-08T15:35:36.166834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T23:18:33.504715Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08927","last_updated":"2025-08-20T07:14:01Z","snapshot_observed_at":"2026-08-08T00:27:22.697018Z","submitted_at":"2025-02-13T03:23:17Z","title":"Dynamic watermarks in images generated by diffusion models","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T23:18:33.504715Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2502.08927"},"observation_digest":"sha256:4dd5713ceeb6533e6c94c73d31880567c4b4da961b7dc2b0f3e1b2b7b21f2cd1","observation_id":"21649178-30af-428e-81de-87114c313495","resolution":{"observed_at":"2026-08-07T23:18:33.504715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-08T06:03:33.419790Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.10465","last_updated":"2025-02-12T09:00:48Z","snapshot_observed_at":"2026-08-08T05:55:22.825151Z","submitted_at":"2025-02-12T09:00:48Z","title":"Image Watermarking of Generative Diffusion Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-08T06:03:33.419790Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2502.10465"},"observation_digest":"sha256:780aa0220dbdb5ca9110a38f6ac5557408ee484663fda48ff7509fea9a903bb6","observation_id":"6a5713f3-63a4-4c07-b3bd-a8bfe6591d1a","resolution":{"observed_at":"2026-08-08T06:03:33.419790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2503.12172","last_updated":"2026-05-18T19:26:33Z","snapshot_observed_at":"2026-07-06T20:53:13.629451Z","submitted_at":"2025-03-15T15:29:05Z","title":"SEAL: Semantic Aware Image Watermarking","version":4},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-23T00:13:31.761894Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2503.12172"},"observation_digest":"sha256:e5702ba23dcb51f54e185499c0c41fe4b42b58dff52dcbed6dec6a4a509e0ae0","observation_id":"33a40aec-7a1d-4aa9-9c6e-0826108bd3f8","resolution":{"observed_at":"2026-05-23T00:15:14.769813Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T15:33:47.493399Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust.arXiv preprint arXiv:2305.20030, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.14673","last_updated":"2025-05-20T17:58:02Z","snapshot_observed_at":"2026-08-07T15:27:45.753887Z","submitted_at":"2025-05-20T17:58:02Z","title":"Training-Free Watermarking for Autoregressive Image Generation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T15:33:47.493399Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2505.14673"},"observation_digest":"sha256:445ca95fcaf551b5621bfbec4c6c737e2c5ae5798b0658c73ccd8895987ab606","observation_id":"a37dccbd-b440-4fbb-b894-6dbcc1d9e281","resolution":{"observed_at":"2026-08-07T15:33:47.493399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T15:09:53.575756Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16057","last_updated":"2026-06-16T18:37:15Z","snapshot_observed_at":"2026-08-08T02:51:16.444730Z","submitted_at":"2025-05-21T22:16:59Z","title":"Signals of Provenance: Practices & Challenges of Navigating Indicators in AI-Generated Media for Sighted and Blind Individuals","version":2},"reference_index":121,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:53.575756Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2505.16057"},"observation_digest":"sha256:f91760b7dce89a1c9fb0091f210fa112339986d5cbfe3b5d718a5785c7eddf1b","observation_id":"19f75128-552e-4d90-86be-104282f3c135","resolution":{"observed_at":"2026-08-07T15:09:53.575756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T13:45:54.128784Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21135","last_updated":"2025-05-27T12:50:04Z","snapshot_observed_at":"2026-08-07T13:32:19.864298Z","submitted_at":"2025-05-27T12:50:04Z","title":"Learning Single Index Models with Diffusion Priors","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-08-07T13:45:54.128784Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2505.21135"},"observation_digest":"sha256:0546c552fc4e9189e76b63a0e35d909fdab6792d296f8a8a757b1cc0bdca0e48","observation_id":"492cc96b-b6fa-43e3-ac1a-d6df13d5c849","resolution":{"observed_at":"2026-08-07T13:45:54.128784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T12:54:12.181672Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23312","last_updated":"2025-05-29T10:15:22Z","snapshot_observed_at":"2026-08-08T12:07:06.203935Z","submitted_at":"2025-05-29T10:15:22Z","title":"TRACE: Trajectory-Constrained Concept Erasure in Diffusion Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:54:12.181672Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2505.23312"},"observation_digest":"sha256:2cb28b397f15b926eb839bbb22f20032649eab24f177d46fe93f1aa169d03da2","observation_id":"de72d8a0-3b22-4393-9fc3-6ef1d12b8d77","resolution":{"observed_at":"2026-08-07T12:54:12.181672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T12:37:07.278256Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24267","last_updated":"2025-05-30T06:45:31Z","snapshot_observed_at":"2026-08-07T12:24:56.758348Z","submitted_at":"2025-05-30T06:45:31Z","title":"MUSE: Model-Agnostic Tabular Watermarking via Multi-Sample Selection","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T12:37:07.278256Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2505.24267"},"observation_digest":"sha256:317783fd219f6cfd23a0594483a19295631e3f27b6a1c081caf351d20b75e1aa","observation_id":"e62ecb67-a06a-4a29-b6cc-5e735f60956c","resolution":{"observed_at":"2026-08-07T12:37:07.278256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T11:57:36.589348Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01011","last_updated":"2025-06-01T13:44:20Z","snapshot_observed_at":"2026-08-09T13:58:44.317972Z","submitted_at":"2025-06-01T13:44:20Z","title":"Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:57:36.589348Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2506.01011"},"observation_digest":"sha256:d2831b98f4cf3b97556150e99cfb9ecfedb86cbb4fbf04d7317927b9f8ce9720","observation_id":"b2e4eacd-66d7-498c-956c-deb049621aeb","resolution":{"observed_at":"2026-08-07T11:57:36.589348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-07T04:19:04.399635Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.11371","last_updated":"2025-06-13T00:15:54Z","snapshot_observed_at":"2026-08-07T07:28:46.503597Z","submitted_at":"2025-06-13T00:15:54Z","title":"A Watermark for Auto-Regressive Image Generation Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T04:19:04.399635Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2506.11371"},"observation_digest":"sha256:6290d32771f7511cfb5063e5ec149b4e2926b58ad10329716771df41a4e9a321","observation_id":"9d92df29-2a95-4244-82f6-d97f3d9c1377","resolution":{"observed_at":"2026-08-07T04:19:04.399635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-06T22:07:25.719497Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22623","last_updated":"2025-06-27T20:39:35Z","snapshot_observed_at":"2026-08-08T23:00:14.746094Z","submitted_at":"2025-06-27T20:39:35Z","title":"Temperature Matters: Enhancing Watermark Robustness Against Paraphrasing Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T22:07:25.719497Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2506.22623"},"observation_digest":"sha256:2140ec8157093f9244e2b39544b63957519bb13a4171efa970715c1684c16612","observation_id":"4405e1c4-eb86-487c-8ee9-5b5fdea45b16","resolution":{"observed_at":"2026-08-06T22:07:25.719497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-06T16:42:14.338390Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13407","last_updated":"2025-07-17T05:38:30Z","snapshot_observed_at":"2026-08-06T16:35:55.045715Z","submitted_at":"2025-07-17T05:38:30Z","title":"IConMark: Robust Interpretable Concept-Based Watermark For AI Images","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:42:14.338390Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2507.13407"},"observation_digest":"sha256:4ed1d5a1e025cacc725127ec46deaf365a7b8c669d7b29c19d164b345bf9177e","observation_id":"18b35700-8065-4941-8154-58d974f802aa","resolution":{"observed_at":"2026-08-06T16:42:14.338390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-06T13:21:26.262206Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.20762","last_updated":"2025-07-28T12:16:52Z","snapshot_observed_at":"2026-08-06T13:21:25.180625Z","submitted_at":"2025-07-28T12:16:52Z","title":"Watermarking Large Language Model-based Time Series Forecasting","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T13:21:26.262206Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2507.20762"},"observation_digest":"sha256:bc6670492670eb1320a0dd5ac6b6685a0d81a558e80d000763bcd330916304bb","observation_id":"4f02e4be-f3fc-46f1-b7a6-ceaf8126bc8d","resolution":{"observed_at":"2026-08-06T13:21:26.262206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-04T21:08:51.803520Z","title":"tree-ring watermarks: fingerprinting deep generative models.arxiv preprint arxiv:2305.20030, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.08188","last_updated":"2025-09-09T23:25:33Z","snapshot_observed_at":"2026-08-08T10:42:09.165690Z","submitted_at":"2025-09-09T23:25:33Z","title":"ArtifactGen: Benchmarking WGAN-GP vs Diffusion for Label-Aware EEG Artifact Synthesis","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-04T21:08:51.803520Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2509.08188"},"observation_digest":"sha256:ca759908f1d7f8d38eb71f2582bd523c24a3e2631b1b12f1d9a146c985077f6f","observation_id":"85397f6b-0f53-4196-bc2c-3cbef2dc929a","resolution":{"observed_at":"2026-08-04T21:08:51.803520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2509.10577","last_updated":"2026-05-02T09:06:30Z","snapshot_observed_at":"2026-07-06T22:29:28.746730Z","submitted_at":"2025-09-11T18:08:32Z","title":"The Coding Limits of Robust Watermarking for Generative Models","version":3},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-05-18T17:14:40.230952Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2509.10577"},"observation_digest":"sha256:d30d6aaf98e987715dd7d3d955cba9d6500cca85069982a7e7e2e20c5ce9355b","observation_id":"f081a370-9464-4608-8193-b1d26aceb3a8","resolution":{"observed_at":"2026-05-18T17:16:39.609650Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2512.06774","last_updated":"2026-04-09T06:38:35Z","snapshot_observed_at":"2026-07-06T22:37:59.340166Z","submitted_at":"2025-12-07T10:26:35Z","title":"RDSplat: Robust Watermarking for 3D Gaussian Splatting Against 2D and 3D Diffusion Editing","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-17T00:33:29.282349Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2512.06774"},"observation_digest":"sha256:42e6657c998bc8bddf3907a210df2228ac099de8dafa8947a16f2945c87f9ef1","observation_id":"d90ad750-75e7-4a9d-b171-72563de62704","resolution":{"observed_at":"2026-05-17T00:33:44.616803Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2603.02378","last_updated":"2026-04-18T17:53:51Z","snapshot_observed_at":"2026-07-06T22:47:37.679205Z","submitted_at":"2026-03-02T20:42:12Z","title":"Authenticated Contradictions from Desynchronized Provenance and Watermarking","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-15T17:30:30.669551Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2603.02378"},"observation_digest":"sha256:d4f0ef4e7fca3a39ffc049c4895483b44716ad5f502407a9185c604674d30eac","observation_id":"281006f3-e6b1-4c09-8d91-cf00f68b2fb4","resolution":{"observed_at":"2026-05-15T17:31:22.385645Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2603.06723","last_updated":"2026-04-17T23:30:08Z","snapshot_observed_at":"2026-07-06T22:48:08.821342Z","submitted_at":"2026-03-06T01:10:47Z","title":"AWPD: Frequency Shield Network for Agnostic Watermark Presence Detection","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-15T16:11:43.651136Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2603.06723"},"observation_digest":"sha256:75f3fb7b7411e552f957a2e89cdd57d96da57534b67a5757be1e8c596876e902","observation_id":"e15455d5-e462-4e7f-abdb-b82b157753ae","resolution":{"observed_at":"2026-05-15T16:16:15.157294Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-02T18:33:33.181768Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2603.09454","last_updated":"2026-03-10T10:10:47Z","snapshot_observed_at":"2026-08-06T10:59:13.789452Z","submitted_at":"2026-03-10T10:10:47Z","title":"ShapeMark: Robust and Diversity-Preserving Watermarking for Diffusion Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-02T18:33:33.181768Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2603.09454"},"observation_digest":"sha256:2f263a8a4f0f5751dd095a3789fe0ee407c756fc626ca1e7942990f26e3d43de","observation_id":"78106243-3180-4922-91ae-a24d7e5c5ded","resolution":{"observed_at":"2026-08-02T18:33:33.181768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2604.13776","last_updated":"2026-06-09T01:55:56Z","snapshot_observed_at":"2026-07-12T20:36:38.581799Z","submitted_at":"2026-04-15T12:06:56Z","title":"Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-10T12:27:10.978181Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2604.13776"},"observation_digest":"sha256:80e1dfef0681d8f22f9e88392a9249cadc3db7bab2026b2e528dad3fa388aa32","observation_id":"2cf0a396-4541-42dc-bf59-7070db92933a","resolution":{"observed_at":"2026-05-10T12:30:23.707189Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-12T20:36:38.805344Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust.arXiv preprint arXiv:2305.20030, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.13776","last_updated":"2026-06-09T01:55:56Z","snapshot_observed_at":"2026-07-12T20:36:38.581799Z","submitted_at":"2026-04-15T12:06:56Z","title":"Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-12T20:36:38.805344Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2604.13776"},"observation_digest":"sha256:16b5845bc1a941524acf991048f4d5e2cb0b788f95dfb4201142ba4e43bc2b9e","observation_id":"5cbc17d9-a3db-45d7-9143-b000ea4c7fbc","resolution":{"observed_at":"2026-07-12T20:36:38.805344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2604.16363","last_updated":"2026-03-20T15:43:19Z","snapshot_observed_at":"2026-08-08T08:21:51.132622Z","submitted_at":"2026-03-20T15:43:19Z","title":"CSF: Black-box Fingerprinting via Compositional Semantics for Text-to-Image Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-15T08:19:38.946663Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2604.16363"},"observation_digest":"sha256:5235341f66f220c4f4d5acdf63d8809851a05e1d175a12c5db556e971bdc0aae","observation_id":"0b1dabbd-934e-4a15-888a-169e03ec312f","resolution":{"observed_at":"2026-05-15T08:19:52.070087Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.00935","last_updated":"2026-05-01T03:26:34Z","snapshot_observed_at":"2026-08-02T16:27:11.915663Z","submitted_at":"2026-05-01T03:26:34Z","title":"Watch Your Step: Information Injection in Diffusion Models via Shadow Timestep Embedding","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-09T19:37:54.126733Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.00935"},"observation_digest":"sha256:38df5ca2454db38627fe756a44b1d2c4e41184bdd9392ae725c7820a998a1cad","observation_id":"a73c66a7-9969-43f3-8ce3-dee8381c4ddd","resolution":{"observed_at":"2026-05-11T15:36:07.001612Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.04445","last_updated":"2026-07-20T08:00:25Z","snapshot_observed_at":"2026-08-02T14:52:06.460228Z","submitted_at":"2026-05-06T03:21:30Z","title":"LEGO: LoRA-Enabled Generator-Oriented Framework for Synthetic Image Detection","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-08T18:35:37.185926Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.04445"},"observation_digest":"sha256:4a51676ce7832ac7ffd616dc0e44fa5f62ecfaa9ef5f98804e8b022b040775db","observation_id":"88e41ff6-c63e-461b-a3ce-982f129706af","resolution":{"observed_at":"2026-05-09T06:20:41.449002Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-02T14:52:09.220502Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.04445","last_updated":"2026-07-20T08:00:25Z","snapshot_observed_at":"2026-08-02T14:52:06.460228Z","submitted_at":"2026-05-06T03:21:30Z","title":"LEGO: LoRA-Enabled Generator-Oriented Framework for Synthetic Image Detection","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T14:52:09.220502Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.04445"},"observation_digest":"sha256:42428c785994449f5f88941249e2b3a27657d75b97cc6ab5f52c6e4067f97f08","observation_id":"13bf0189-58b8-4e43-be7f-b803e9ba685f","resolution":{"observed_at":"2026-08-02T14:52:09.220502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.09646","last_updated":"2026-05-10T16:44:50Z","snapshot_observed_at":"2026-08-06T02:36:45.396055Z","submitted_at":"2026-05-10T16:44:50Z","title":"\"Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-12T03:31:09.575665Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.09646"},"observation_digest":"sha256:e059893ebae98c1f1637ca6fe770b779ad03ce77eb30c6200f00cd3e2d818762","observation_id":"3b14498f-3a95-4ba8-a6d1-9120baaaa7c0","resolution":{"observed_at":"2026-05-12T03:31:19.347649Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.12809","last_updated":"2026-05-12T23:01:29Z","snapshot_observed_at":"2026-07-06T23:24:27.821980Z","submitted_at":"2026-05-12T23:01:29Z","title":"Correcting Influence: Unboxing LLM Outputs with Orthogonal Latent Spaces","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-05-14T20:17:01.224864Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.12809"},"observation_digest":"sha256:6a3b817671b4d4631dcff20806cb6d17ec69c7a29cc563628d668872c8c7bedd","observation_id":"cf9fd52f-a5d6-4e6c-8e2c-fcd41914083a","resolution":{"observed_at":"2026-05-14T20:19:27.634032Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.16239","last_updated":"2026-05-15T17:48:22Z","snapshot_observed_at":"2026-07-06T23:27:24.957966Z","submitted_at":"2026-05-15T17:48:22Z","title":"Dynamics-Level Watermarking of Flow Matching Models with Random Codes","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-05-20T20:22:52.535721Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.16239"},"observation_digest":"sha256:5e43a4e78c5ba0f61ed8998b15d6c5ab133b9c6038af83f51bed36ba9f63ad5f","observation_id":"ebb6fa52-ff80-4156-98a3-1678c6fcbd2c","resolution":{"observed_at":"2026-05-20T20:23:43.153276Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.16471","last_updated":"2026-05-15T13:53:02Z","snapshot_observed_at":"2026-07-06T23:27:38.955917Z","submitted_at":"2026-05-15T13:53:02Z","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","version":1},"reference_index":138,"source":"pdf_text","source_observed_at":"2026-05-20T18:08:24.901025Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.16471"},"observation_digest":"sha256:ee93407d79fee34a4628d60f6432363142149b828a1a756a91ff5f582c5c38b3","observation_id":"2ece4803-a868-433d-8bf7-f9a6cd6f0eea","resolution":{"observed_at":"2026-05-20T18:08:50.509151Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.16720","last_updated":"2026-05-16T00:07:49Z","snapshot_observed_at":"2026-08-02T15:13:54.844191Z","submitted_at":"2026-05-16T00:07:49Z","title":"Compositional Adversarial Training for Robust Visual Watermarking","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-05-19T21:53:59.355980Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.16720"},"observation_digest":"sha256:65bd00fe34bbcf75dccf360a6bbe6b180cfec617f9378b6daf41bc1d5f112f85","observation_id":"e1fb717e-8b74-4b97-ba39-b7f20fd06057","resolution":{"observed_at":"2026-05-19T21:57:48.538584Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2605.29569","last_updated":"2026-06-07T04:09:10Z","snapshot_observed_at":"2026-08-07T19:41:57.092904Z","submitted_at":"2026-05-28T08:17:28Z","title":"LoRA-Key: User-Centric LoRA Watermarking for Text-to-Image Diffusion Models","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-29T06:39:15.694127Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2605.29569"},"observation_digest":"sha256:02b9be008056a3c4b5bdd64d90c528553a1d974694ec3c8996eec93f92ccb6bf","observation_id":"44a734e3-6194-4bcb-87cf-8b728f9c8de6","resolution":{"observed_at":"2026-06-29T14:33:30.983622Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2606.21365","last_updated":"2026-06-19T12:14:17Z","snapshot_observed_at":"2026-08-03T12:18:50.788553Z","submitted_at":"2026-06-19T12:14:17Z","title":"LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-26T12:58:27.702138Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2606.21365"},"observation_digest":"sha256:184cf3e98deec9f65ef0d52dbff3720572265fbdfdf2425bbf0e284e868d0c7c","observation_id":"943fd518-a629-499a-9ac0-4c3a01b385f2","resolution":{"observed_at":"2026-07-04T07:39:39.531788Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":"2305.20030","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-04T11:49:50.341884Z","title":"Tree-ring watermarks: Fingerprints for diffu- sion images that are invisible and robust","venue":null,"work_id":"8abefa1a-96ae-491b-bcdd-24856f19ab12","year":2023},"citing_paper":{"arxiv_id":"2606.23574","last_updated":"2026-06-22T16:39:28Z","snapshot_observed_at":"2026-08-06T17:47:31.455941Z","submitted_at":"2026-06-22T16:39:28Z","title":"A Watermark for Vision-Language-Action and World Action Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-26T07:41:44.703750Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2606.23574"},"observation_digest":"sha256:ed23ac37d286b353bf704dac83700beaae3366c3d7ec92f48cd32188460c94ce","observation_id":"94b07704-09db-4a22-83ae-1219f2cb59b3","resolution":{"observed_at":"2026-07-04T11:49:50.343346Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-12T08:02:37.135363Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.02643","last_updated":"2026-07-02T17:48:54Z","snapshot_observed_at":"2026-08-09T02:11:21.984488Z","submitted_at":"2026-07-02T17:48:54Z","title":"BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-12T08:02:37.135363Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2607.02643"},"observation_digest":"sha256:f1324a5d47b32903b80452885257b36d2528dc10b3d4acb38f7a2b92bc639ff9","observation_id":"0fa09745-d45f-4c7e-a488-a9cd08a2cac9","resolution":{"observed_at":"2026-07-12T08:02:37.135363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-02T04:32:43.799337Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.13685","last_updated":"2026-07-15T10:27:52Z","snapshot_observed_at":"2026-08-07T03:51:04.025798Z","submitted_at":"2026-07-15T10:27:52Z","title":"DNA: Dual-stage Native Attribution for Generated Image Source Tracing","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T04:32:43.799337Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2607.13685"},"observation_digest":"sha256:60ae52a96dbd733f462b3393b82e61e4133b2389517cf092ee1bd2bed014a833","observation_id":"8e469a0e-4ae1-431c-a2cf-1df1c435764c","resolution":{"observed_at":"2026-08-02T04:32:43.799337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-02T13:50:40.222003Z","title":"arXiv preprint arXiv:2305.20030 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18263","last_updated":"2026-07-25T04:36:51Z","snapshot_observed_at":"2026-08-08T04:25:30.827157Z","submitted_at":"2026-05-16T20:52:04Z","title":"Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-02T13:50:40.222003Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2607.18263"},"observation_digest":"sha256:98c5da839ba91132bb476a0c131cff3f5d03a945a2caecf15b6262ab06ee90e9","observation_id":"bd01a6a4-0d7c-4395-9a8a-a1b7509a92c0","resolution":{"observed_at":"2026-08-02T13:50:40.222003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-07-30T22:58:40.885469Z","title":"Tree-ring watermarks: Fin- gerprints for diffusion images that are invisible and robust.arXiv preprint arXiv:2305.20030,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26723","last_updated":"2026-07-29T10:13:55Z","snapshot_observed_at":"2026-08-08T15:51:09.714911Z","submitted_at":"2026-07-29T10:13:55Z","title":"FARI: Robust One-Step Inversion for Watermarking in Diffusion Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-30T22:58:40.885469Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2607.26723"},"observation_digest":"sha256:a6cce5e451de6214e0494dab8dafca053d0a2b778358e3011b675e68ade6d443","observation_id":"98b0966f-50c6-4c46-821f-37e750517d8d","resolution":{"observed_at":"2026-07-30T22:58:40.885469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-01T05:53:55.991796Z","title":"arXiv preprint arXiv:2305.20030 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27551","last_updated":"2026-07-30T00:52:48Z","snapshot_observed_at":"2026-08-06T05:48:12.557049Z","submitted_at":"2026-07-30T00:52:48Z","title":"AnchorMark: Robust Diffusion Watermarking via Latent-Space Rotation Synchrony","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-01T05:53:55.991796Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2607.27551"},"observation_digest":"sha256:5e91f8951532babc16294822b593381acc7c21dd76fd77062a79dc69db9f036e","observation_id":"dbb4f9d3-4ba4-4e6e-bd65-878d77ea220d","resolution":{"observed_at":"2026-08-01T05:53:55.991796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2305.20030/citation-record","integrity":"/paper/2305.20030/integrity","json":"/paper/2305.20030/citation-record.json","paper":"/paper/2305.20030"},"outbound":[],"paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 39 inbound Pith citation observations for arXiv:2305.20030."}