{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:USJTXSP2H6PTLZKQMUNTN7QXBO","short_pith_number":"pith:USJTXSP2","canonical_record":{"source":{"id":"2606.22310","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2026-06-21T02:35:22Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"0171f87f9af2451b60776c0d8fb2a50d0b1eff3409b5c841e01f8c5dfee5c12d","abstract_canon_sha256":"c56455f8534e4e8a5f9c464a7e6358ed700774f5d123262fb3ab1462262883c2"},"schema_version":"1.0"},"canonical_sha256":"a4933bc9fa3f9f35e550651b36fe170bbeee6d847c8653dd4fbcda97aeca35ed","source":{"kind":"arxiv","id":"2606.22310","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.22310","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"arxiv_version","alias_value":"2606.22310v1","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.22310","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"pith_short_12","alias_value":"USJTXSP2H6PT","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"pith_short_16","alias_value":"USJTXSP2H6PTLZKQ","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"pith_short_8","alias_value":"USJTXSP2","created_at":"2026-06-23T02:13:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:USJTXSP2H6PTLZKQMUNTN7QXBO","target":"record","payload":{"canonical_record":{"source":{"id":"2606.22310","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2026-06-21T02:35:22Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"0171f87f9af2451b60776c0d8fb2a50d0b1eff3409b5c841e01f8c5dfee5c12d","abstract_canon_sha256":"c56455f8534e4e8a5f9c464a7e6358ed700774f5d123262fb3ab1462262883c2"},"schema_version":"1.0"},"canonical_sha256":"a4933bc9fa3f9f35e550651b36fe170bbeee6d847c8653dd4fbcda97aeca35ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-23T02:13:34.599618Z","signature_b64":"M0sREsBi/vTVe5e3CxIcIUXAY2eDivnOAkIBY10h17Spbsp2Cjg9TKsKUhAeS7Y/yj54B8dKkiD1PU/H7gqxBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a4933bc9fa3f9f35e550651b36fe170bbeee6d847c8653dd4fbcda97aeca35ed","last_reissued_at":"2026-06-23T02:13:34.599173Z","signature_status":"signed_v1","first_computed_at":"2026-06-23T02:13:34.599173Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.22310","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T02:13:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nXai4qX4vgfscodQtQik5z8aEwee8DnHuFkSG3R+1+2yOoctf9hxgES1Zd14lRp+u646W+YDeWF2Q1zj4QlfCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-24T04:56:09.791938Z"},"content_sha256":"3b3c151f4905a3da90d54b908f549c335d9c01fd77ed03dd8623f2c25ed9d7f9","schema_version":"1.0","event_id":"sha256:3b3c151f4905a3da90d54b908f549c335d9c01fd77ed03dd8623f2c25ed9d7f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:USJTXSP2H6PTLZKQMUNTN7QXBO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learning to Evade: Adaptive Attacks on Audio Watermarking","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SD","authors_text":"Guangjing Wang, Hanqing Guo, Mingzhe Chen, Qiben Yan, Rui Duan, Weikang Ding, Yuanda Wang","submitted_at":"2026-06-21T02:35:22Z","abstract_excerpt":"Advances in generative audio have intensified copyright concerns, making audio watermarking increasingly important for asserting ownership. However, existing audio watermarking methods are vulnerable to adversarial attacks. We find that watermark decoder message probabilities follow normal distributions, a property exploited by defenses to detect manipulations. This paper introduces an adaptive audio watermark attack method (AWM) designed to bypass existing defense strategies. AWM uses a two-stage optimization: the first stage ensures attack success, while the second improves audio quality. To"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.22310","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.22310/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T02:13:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"96NGfAkIBDtt5o2fWs9AJV6DzJx+khwEzIXOKutHfkv15EMdSjrQZuPitAYcY9Antb3KqV+E7mQe/N8ufRNfBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-24T04:56:09.792335Z"},"content_sha256":"19628f796083d0c074a69802357f1fa323a2aa698ec803ce3d54053fd5bf2211","schema_version":"1.0","event_id":"sha256:19628f796083d0c074a69802357f1fa323a2aa698ec803ce3d54053fd5bf2211"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/USJTXSP2H6PTLZKQMUNTN7QXBO/bundle.json","state_url":"https://pith.science/pith/USJTXSP2H6PTLZKQMUNTN7QXBO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/USJTXSP2H6PTLZKQMUNTN7QXBO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-24T04:56:09Z","links":{"resolver":"https://pith.science/pith/USJTXSP2H6PTLZKQMUNTN7QXBO","bundle":"https://pith.science/pith/USJTXSP2H6PTLZKQMUNTN7QXBO/bundle.json","state":"https://pith.science/pith/USJTXSP2H6PTLZKQMUNTN7QXBO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/USJTXSP2H6PTLZKQMUNTN7QXBO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:USJTXSP2H6PTLZKQMUNTN7QXBO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c56455f8534e4e8a5f9c464a7e6358ed700774f5d123262fb3ab1462262883c2","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2026-06-21T02:35:22Z","title_canon_sha256":"0171f87f9af2451b60776c0d8fb2a50d0b1eff3409b5c841e01f8c5dfee5c12d"},"schema_version":"1.0","source":{"id":"2606.22310","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.22310","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"arxiv_version","alias_value":"2606.22310v1","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.22310","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"pith_short_12","alias_value":"USJTXSP2H6PT","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"pith_short_16","alias_value":"USJTXSP2H6PTLZKQ","created_at":"2026-06-23T02:13:34Z"},{"alias_kind":"pith_short_8","alias_value":"USJTXSP2","created_at":"2026-06-23T02:13:34Z"}],"graph_snapshots":[{"event_id":"sha256:19628f796083d0c074a69802357f1fa323a2aa698ec803ce3d54053fd5bf2211","target":"graph","created_at":"2026-06-23T02:13:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.22310/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Advances in generative audio have intensified copyright concerns, making audio watermarking increasingly important for asserting ownership. However, existing audio watermarking methods are vulnerable to adversarial attacks. We find that watermark decoder message probabilities follow normal distributions, a property exploited by defenses to detect manipulations. This paper introduces an adaptive audio watermark attack method (AWM) designed to bypass existing defense strategies. AWM uses a two-stage optimization: the first stage ensures attack success, while the second improves audio quality. To","authors_text":"Guangjing Wang, Hanqing Guo, Mingzhe Chen, Qiben Yan, Rui Duan, Weikang Ding, Yuanda Wang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2026-06-21T02:35:22Z","title":"Learning to Evade: Adaptive Attacks on Audio Watermarking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.22310","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b3c151f4905a3da90d54b908f549c335d9c01fd77ed03dd8623f2c25ed9d7f9","target":"record","created_at":"2026-06-23T02:13:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c56455f8534e4e8a5f9c464a7e6358ed700774f5d123262fb3ab1462262883c2","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2026-06-21T02:35:22Z","title_canon_sha256":"0171f87f9af2451b60776c0d8fb2a50d0b1eff3409b5c841e01f8c5dfee5c12d"},"schema_version":"1.0","source":{"id":"2606.22310","kind":"arxiv","version":1}},"canonical_sha256":"a4933bc9fa3f9f35e550651b36fe170bbeee6d847c8653dd4fbcda97aeca35ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a4933bc9fa3f9f35e550651b36fe170bbeee6d847c8653dd4fbcda97aeca35ed","first_computed_at":"2026-06-23T02:13:34.599173Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-23T02:13:34.599173Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"M0sREsBi/vTVe5e3CxIcIUXAY2eDivnOAkIBY10h17Spbsp2Cjg9TKsKUhAeS7Y/yj54B8dKkiD1PU/H7gqxBQ==","signature_status":"signed_v1","signed_at":"2026-06-23T02:13:34.599618Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.22310","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b3c151f4905a3da90d54b908f549c335d9c01fd77ed03dd8623f2c25ed9d7f9","sha256:19628f796083d0c074a69802357f1fa323a2aa698ec803ce3d54053fd5bf2211"],"state_sha256":"ed497a7e86fe2f45c27dceb1002f98ca6eaaaf5ed89b57d85a36980120f35f26"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V6OG46mio59fpZnl+gidQlTee5fMQEBsxQwLuKk+9cTTf/pJ0dIC1aiA0fSotnfLpXEc4Kv4WIcvT1mj6zb1Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-24T04:56:09.794354Z","bundle_sha256":"bff7a9246db28e1ed288f6aef345dc6ac66ad3ba516f62d6a4a964049b658d61"}}