{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HRU3JWXHZURXLOQ3TPAS2O5BYX","short_pith_number":"pith:HRU3JWXH","canonical_record":{"source":{"id":"2412.12563","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-17T05:46:50Z","cross_cats_sorted":[],"title_canon_sha256":"cb6aafe05a725742734b3e51aaafd7222d3eb298a8c5426ca0aea29e75824c74","abstract_canon_sha256":"17465cac2f242345f9f077ce71d48981f0aa7b26c6aa8ce491cdc2916c274220"},"schema_version":"1.0"},"canonical_sha256":"3c69b4dae7cd2375ba1b9bc12d3ba1c5f111194cba27d23edd25942a48496752","source":{"kind":"arxiv","id":"2412.12563","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12563","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12563v1","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12563","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"pith_short_12","alias_value":"HRU3JWXHZURX","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"pith_short_16","alias_value":"HRU3JWXHZURXLOQ3","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"pith_short_8","alias_value":"HRU3JWXH","created_at":"2026-07-05T09:50:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HRU3JWXHZURXLOQ3TPAS2O5BYX","target":"record","payload":{"canonical_record":{"source":{"id":"2412.12563","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-17T05:46:50Z","cross_cats_sorted":[],"title_canon_sha256":"cb6aafe05a725742734b3e51aaafd7222d3eb298a8c5426ca0aea29e75824c74","abstract_canon_sha256":"17465cac2f242345f9f077ce71d48981f0aa7b26c6aa8ce491cdc2916c274220"},"schema_version":"1.0"},"canonical_sha256":"3c69b4dae7cd2375ba1b9bc12d3ba1c5f111194cba27d23edd25942a48496752","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:50:17.058374Z","signature_b64":"eP2iDqmKJhH5iF26mUHWKpOZYd/rYZiwWF5+bvR+8jxBWFtrKNWJS+GCJazNWi4BXO937oD84yckctC9ECj+CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c69b4dae7cd2375ba1b9bc12d3ba1c5f111194cba27d23edd25942a48496752","last_reissued_at":"2026-07-05T09:50:17.057859Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:50:17.057859Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.12563","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tuARspmocPqMW/eTMYzVy9mopkWhaJlCNax1nai7xWEXdrOIF/9RmPRA/xkSyZI/BPvAnpw/RSChEPO6FmbrBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T08:51:44.315513Z"},"content_sha256":"ddd30ec16d0c062c266c82d54a7d18906c3695181be6104b036e786f58ee5be1","schema_version":"1.0","event_id":"sha256:ddd30ec16d0c062c266c82d54a7d18906c3695181be6104b036e786f58ee5be1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HRU3JWXHZURXLOQ3TPAS2O5BYX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Ahmad Rezaei, David Ming Xuan Yue, Mohammad Akbari, Vaden Masrani, Yong Zhang","submitted_at":"2024-12-17T05:46:50Z","abstract_excerpt":"In the era of costly pre-training of large language models, ensuring the intellectual property rights of model owners, and insuring that said models are responsibly deployed, is becoming increasingly important. To this end, we propose model watermarking via passthrough layers, which are added to existing pre-trained networks and trained using a self-supervised loss such that the model produces high-entropy output when prompted with a unique private key, and acts normally otherwise. Unlike existing model watermarking methods, our method is fully task-agnostic, and can be applied to both classif"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12563","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.12563/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GMK8J1E6Up/x4FeQUqiV+/SQ1+8NdNY18fdhqV6TwXwicMvS570+uNSPnSbcIhmn2EW23GKmeAXucL4bazgGBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T08:51:44.316942Z"},"content_sha256":"412964f8eeb9778cada64f2efbbe8d93a3a216b065bad09afea480d540d67641","schema_version":"1.0","event_id":"sha256:412964f8eeb9778cada64f2efbbe8d93a3a216b065bad09afea480d540d67641"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HRU3JWXHZURXLOQ3TPAS2O5BYX/bundle.json","state_url":"https://pith.science/pith/HRU3JWXHZURXLOQ3TPAS2O5BYX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HRU3JWXHZURXLOQ3TPAS2O5BYX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T08:51:44Z","links":{"resolver":"https://pith.science/pith/HRU3JWXHZURXLOQ3TPAS2O5BYX","bundle":"https://pith.science/pith/HRU3JWXHZURXLOQ3TPAS2O5BYX/bundle.json","state":"https://pith.science/pith/HRU3JWXHZURXLOQ3TPAS2O5BYX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HRU3JWXHZURXLOQ3TPAS2O5BYX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HRU3JWXHZURXLOQ3TPAS2O5BYX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"17465cac2f242345f9f077ce71d48981f0aa7b26c6aa8ce491cdc2916c274220","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-17T05:46:50Z","title_canon_sha256":"cb6aafe05a725742734b3e51aaafd7222d3eb298a8c5426ca0aea29e75824c74"},"schema_version":"1.0","source":{"id":"2412.12563","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12563","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12563v1","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12563","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"pith_short_12","alias_value":"HRU3JWXHZURX","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"pith_short_16","alias_value":"HRU3JWXHZURXLOQ3","created_at":"2026-07-05T09:50:17Z"},{"alias_kind":"pith_short_8","alias_value":"HRU3JWXH","created_at":"2026-07-05T09:50:17Z"}],"graph_snapshots":[{"event_id":"sha256:412964f8eeb9778cada64f2efbbe8d93a3a216b065bad09afea480d540d67641","target":"graph","created_at":"2026-07-05T09:50:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.12563/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In the era of costly pre-training of large language models, ensuring the intellectual property rights of model owners, and insuring that said models are responsibly deployed, is becoming increasingly important. To this end, we propose model watermarking via passthrough layers, which are added to existing pre-trained networks and trained using a self-supervised loss such that the model produces high-entropy output when prompted with a unique private key, and acts normally otherwise. Unlike existing model watermarking methods, our method is fully task-agnostic, and can be applied to both classif","authors_text":"Ahmad Rezaei, David Ming Xuan Yue, Mohammad Akbari, Vaden Masrani, Yong Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-17T05:46:50Z","title":"Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12563","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ddd30ec16d0c062c266c82d54a7d18906c3695181be6104b036e786f58ee5be1","target":"record","created_at":"2026-07-05T09:50:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"17465cac2f242345f9f077ce71d48981f0aa7b26c6aa8ce491cdc2916c274220","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-17T05:46:50Z","title_canon_sha256":"cb6aafe05a725742734b3e51aaafd7222d3eb298a8c5426ca0aea29e75824c74"},"schema_version":"1.0","source":{"id":"2412.12563","kind":"arxiv","version":1}},"canonical_sha256":"3c69b4dae7cd2375ba1b9bc12d3ba1c5f111194cba27d23edd25942a48496752","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c69b4dae7cd2375ba1b9bc12d3ba1c5f111194cba27d23edd25942a48496752","first_computed_at":"2026-07-05T09:50:17.057859Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:50:17.057859Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eP2iDqmKJhH5iF26mUHWKpOZYd/rYZiwWF5+bvR+8jxBWFtrKNWJS+GCJazNWi4BXO937oD84yckctC9ECj+CA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:50:17.058374Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.12563","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ddd30ec16d0c062c266c82d54a7d18906c3695181be6104b036e786f58ee5be1","sha256:412964f8eeb9778cada64f2efbbe8d93a3a216b065bad09afea480d540d67641"],"state_sha256":"510266eee23fb74d917fdbd365085b50c25224d49c65f1b6bbddf573559f1196"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j6OKUoOQJTL2LsiZB6wvyQfYZcFthOCdsHtnDz452PlnP8ER8yhoMZpEQebcoJYh6jkUbpL0GxBYAp0kYQSsBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T08:51:44.321419Z","bundle_sha256":"93d59b33647bc2156865de33272a1ce876e161ddbf2f1a7ab222401aed0c5ddd"}}