{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:F4UBLMQ3SAF5I4FZVYG2BZY3PF","short_pith_number":"pith:F4UBLMQ3","canonical_record":{"source":{"id":"2606.24000","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-06-22T23:11:38Z","cross_cats_sorted":["cond-mat.dis-nn","cs.CR","cs.CV"],"title_canon_sha256":"7ce2503404d75e1bfdb7c805a89e757eac02afd2bc74431f7e56dcefd2b3ca2b","abstract_canon_sha256":"09934fb49fc9b3293a4f411d7b2c5c6b87b8a274128284cdf61390026fbdeceb"},"schema_version":"1.0"},"canonical_sha256":"2f2815b21b900bd470b9ae0da0e71b79635cb8f8824d0cfd0c544993d46dda0c","source":{"kind":"arxiv","id":"2606.24000","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.24000","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"arxiv_version","alias_value":"2606.24000v1","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.24000","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"pith_short_12","alias_value":"F4UBLMQ3SAF5","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"pith_short_16","alias_value":"F4UBLMQ3SAF5I4FZ","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"pith_short_8","alias_value":"F4UBLMQ3","created_at":"2026-06-24T00:14:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:F4UBLMQ3SAF5I4FZVYG2BZY3PF","target":"record","payload":{"canonical_record":{"source":{"id":"2606.24000","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-06-22T23:11:38Z","cross_cats_sorted":["cond-mat.dis-nn","cs.CR","cs.CV"],"title_canon_sha256":"7ce2503404d75e1bfdb7c805a89e757eac02afd2bc74431f7e56dcefd2b3ca2b","abstract_canon_sha256":"09934fb49fc9b3293a4f411d7b2c5c6b87b8a274128284cdf61390026fbdeceb"},"schema_version":"1.0"},"canonical_sha256":"2f2815b21b900bd470b9ae0da0e71b79635cb8f8824d0cfd0c544993d46dda0c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-24T00:14:32.687903Z","signature_b64":"SgX35W2A4JVmE7dsj0vT1DnjRtBwOEUDv9/u0npf8x9pSg+ea/dpvLUyKMncmW9MEP/ODOOTYqcAiJwFmKz9Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2f2815b21b900bd470b9ae0da0e71b79635cb8f8824d0cfd0c544993d46dda0c","last_reissued_at":"2026-06-24T00:14:32.687519Z","signature_status":"signed_v1","first_computed_at":"2026-06-24T00:14:32.687519Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.24000","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T00:14:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wX/UjfXKQ+SxtCOELiPVTGt8eHOVJQuRnPPGQyM3hP1Jc4gqHi9chCF0X8EXabfPLFL5ERoAMkHLtQ66W9dpCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-30T23:22:28.510041Z"},"content_sha256":"1c47820aacdf6d5b782067e3f4a0b9dc18bb9416b404033848d4fb69197a7721","schema_version":"1.0","event_id":"sha256:1c47820aacdf6d5b782067e3f4a0b9dc18bb9416b404033848d4fb69197a7721"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:F4UBLMQ3SAF5I4FZVYG2BZY3PF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cyclic Denoising Reveals Ultrastable Memories in Diffusion Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cond-mat.dis-nn","cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Rishabh Sharma, Stefano Martiniani","submitted_at":"2026-06-22T23:11:38Z","abstract_excerpt":"We introduce cyclic denoising -- repeated forward and reverse diffusion at controlled noise amplitudes -- as an extraction attack for image diffusion models. Inspired by random organization in disordered solids, cyclic denoising exposes regions of the learned distribution that are largely inaccessible to standard sampling. The dynamics drive samples toward attractors with a broad stability spectrum. The deepest attractors are ultrastable: they regenerate after near-total corruption and persist through thousands of noising-denoising cycles. Many of these attractors correspond to memorized train"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.24000","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.24000/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T00:14:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MNb+n3YrZvVtaaHsI8bL0hrSXK9Ahk7LIG4zwFwFLNIEaWkDLiLIOFdkUzUYr4V2tO6vgzaieHsBHZ9L6a/0Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-30T23:22:28.510440Z"},"content_sha256":"19f329744973a979125d532397dc9453929ed06dec814cb30ed4c7a8fc8c7b38","schema_version":"1.0","event_id":"sha256:19f329744973a979125d532397dc9453929ed06dec814cb30ed4c7a8fc8c7b38"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F4UBLMQ3SAF5I4FZVYG2BZY3PF/bundle.json","state_url":"https://pith.science/pith/F4UBLMQ3SAF5I4FZVYG2BZY3PF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F4UBLMQ3SAF5I4FZVYG2BZY3PF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-30T23:22:28Z","links":{"resolver":"https://pith.science/pith/F4UBLMQ3SAF5I4FZVYG2BZY3PF","bundle":"https://pith.science/pith/F4UBLMQ3SAF5I4FZVYG2BZY3PF/bundle.json","state":"https://pith.science/pith/F4UBLMQ3SAF5I4FZVYG2BZY3PF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F4UBLMQ3SAF5I4FZVYG2BZY3PF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:F4UBLMQ3SAF5I4FZVYG2BZY3PF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"09934fb49fc9b3293a4f411d7b2c5c6b87b8a274128284cdf61390026fbdeceb","cross_cats_sorted":["cond-mat.dis-nn","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-06-22T23:11:38Z","title_canon_sha256":"7ce2503404d75e1bfdb7c805a89e757eac02afd2bc74431f7e56dcefd2b3ca2b"},"schema_version":"1.0","source":{"id":"2606.24000","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.24000","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"arxiv_version","alias_value":"2606.24000v1","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.24000","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"pith_short_12","alias_value":"F4UBLMQ3SAF5","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"pith_short_16","alias_value":"F4UBLMQ3SAF5I4FZ","created_at":"2026-06-24T00:14:32Z"},{"alias_kind":"pith_short_8","alias_value":"F4UBLMQ3","created_at":"2026-06-24T00:14:32Z"}],"graph_snapshots":[{"event_id":"sha256:19f329744973a979125d532397dc9453929ed06dec814cb30ed4c7a8fc8c7b38","target":"graph","created_at":"2026-06-24T00:14:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.24000/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We introduce cyclic denoising -- repeated forward and reverse diffusion at controlled noise amplitudes -- as an extraction attack for image diffusion models. Inspired by random organization in disordered solids, cyclic denoising exposes regions of the learned distribution that are largely inaccessible to standard sampling. The dynamics drive samples toward attractors with a broad stability spectrum. The deepest attractors are ultrastable: they regenerate after near-total corruption and persist through thousands of noising-denoising cycles. Many of these attractors correspond to memorized train","authors_text":"Rishabh Sharma, Stefano Martiniani","cross_cats":["cond-mat.dis-nn","cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-06-22T23:11:38Z","title":"Cyclic Denoising Reveals Ultrastable Memories in Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.24000","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1c47820aacdf6d5b782067e3f4a0b9dc18bb9416b404033848d4fb69197a7721","target":"record","created_at":"2026-06-24T00:14:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"09934fb49fc9b3293a4f411d7b2c5c6b87b8a274128284cdf61390026fbdeceb","cross_cats_sorted":["cond-mat.dis-nn","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-06-22T23:11:38Z","title_canon_sha256":"7ce2503404d75e1bfdb7c805a89e757eac02afd2bc74431f7e56dcefd2b3ca2b"},"schema_version":"1.0","source":{"id":"2606.24000","kind":"arxiv","version":1}},"canonical_sha256":"2f2815b21b900bd470b9ae0da0e71b79635cb8f8824d0cfd0c544993d46dda0c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2f2815b21b900bd470b9ae0da0e71b79635cb8f8824d0cfd0c544993d46dda0c","first_computed_at":"2026-06-24T00:14:32.687519Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-24T00:14:32.687519Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SgX35W2A4JVmE7dsj0vT1DnjRtBwOEUDv9/u0npf8x9pSg+ea/dpvLUyKMncmW9MEP/ODOOTYqcAiJwFmKz9Dg==","signature_status":"signed_v1","signed_at":"2026-06-24T00:14:32.687903Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.24000","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1c47820aacdf6d5b782067e3f4a0b9dc18bb9416b404033848d4fb69197a7721","sha256:19f329744973a979125d532397dc9453929ed06dec814cb30ed4c7a8fc8c7b38"],"state_sha256":"e6bc7ddef5b8d8e42240dc1cae78f47584e2504038ebe232646c375acbeca6c0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P+wiC82K0JZrfOxFS9jMPiHnkD+g5KlqV5R7qaaDIHFy/7mxN5CJqYoccgEUMzJEk9IJ4aDZbJDdfkyq6z/MBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-30T23:22:28.512618Z","bundle_sha256":"2a66c7eca9bb8c9b86597f5ae229796767e38ffd467f0772c657321d50f84417"}}