{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ZWHWPRAPTNMPNRVPWLYQQMER2R","short_pith_number":"pith:ZWHWPRAP","canonical_record":{"source":{"id":"2407.04411","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-05T10:51:33Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"118e673e64d147bf13e1e830beae1326bc1b19a266207f75476c443b1622e66f","abstract_canon_sha256":"b75f06dc6adb4532462cdf07bf8bd76b6715605fe8e3cf455ea33c075a434e4a"},"schema_version":"1.0"},"canonical_sha256":"cd8f67c40f9b58f6c6afb2f1083091d47c58c5244a7a07b72914385404e1a06d","source":{"kind":"arxiv","id":"2407.04411","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.04411","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"arxiv_version","alias_value":"2407.04411v2","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.04411","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"pith_short_12","alias_value":"ZWHWPRAPTNMP","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"pith_short_16","alias_value":"ZWHWPRAPTNMPNRVP","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"pith_short_8","alias_value":"ZWHWPRAP","created_at":"2026-07-05T09:27:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ZWHWPRAPTNMPNRVPWLYQQMER2R","target":"record","payload":{"canonical_record":{"source":{"id":"2407.04411","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-05T10:51:33Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"118e673e64d147bf13e1e830beae1326bc1b19a266207f75476c443b1622e66f","abstract_canon_sha256":"b75f06dc6adb4532462cdf07bf8bd76b6715605fe8e3cf455ea33c075a434e4a"},"schema_version":"1.0"},"canonical_sha256":"cd8f67c40f9b58f6c6afb2f1083091d47c58c5244a7a07b72914385404e1a06d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:27:24.007211Z","signature_b64":"drPcdTI5s8FOcEWMYNsMBIVvY8D1b+qYR4n1sdVN2iAAarDULcqBSThhjLT6NalGk5l2yzKkUw17fqnQjlQ3Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cd8f67c40f9b58f6c6afb2f1083091d47c58c5244a7a07b72914385404e1a06d","last_reissued_at":"2026-07-05T09:27:24.006715Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:27:24.006715Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.04411","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:27:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cbv1X97+Ad1kPb9jqqI2VkpGcuAEJUaKTQ0Gi+T/Ahn+ydCvniPNiBQJmJR+BtNZHp4m72qjdJK/7FL1IYTlBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T06:00:54.318645Z"},"content_sha256":"70259137faa33c2c87b92192aeb885b95dcef3612087e6732294e0827dc62a47","schema_version":"1.0","event_id":"sha256:70259137faa33c2c87b92192aeb885b95dcef3612087e6732294e0827dc62a47"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ZWHWPRAPTNMPNRVPWLYQQMER2R","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Waterfall: Framework for Robust and Scalable Text Watermarking and Provenance for LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Bryan Kian Hsiang Low, Chuan-Sheng Foo, Gregory Kang Ruey Lau, Hieu Dao, Jiangwei Chen, Xinyuan Niu","submitted_at":"2024-07-05T10:51:33Z","abstract_excerpt":"Protecting intellectual property (IP) of text such as articles and code is increasingly important, especially as sophisticated attacks become possible, such as paraphrasing by large language models (LLMs) or even unauthorized training of LLMs on copyrighted text to infringe such IP. However, existing text watermarking methods are not robust enough against such attacks nor scalable to millions of users for practical implementation. In this paper, we propose Waterfall, the first training-free framework for robust and scalable text watermarking applicable across multiple text types (e.g., article"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.04411","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.04411/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:27:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dyZrcD4axk5NQJFQpZa6a9KGqvMiCvP/406zCCbaYU0GDA59pbyApU+piJCDMhxiaTYkzp+mHDU3B1Iwfud4Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T06:00:54.319016Z"},"content_sha256":"17ffdbc28df5a1a60bb2a6118bc1e953d8e4c170fe94458ac545305ead3187d8","schema_version":"1.0","event_id":"sha256:17ffdbc28df5a1a60bb2a6118bc1e953d8e4c170fe94458ac545305ead3187d8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZWHWPRAPTNMPNRVPWLYQQMER2R/bundle.json","state_url":"https://pith.science/pith/ZWHWPRAPTNMPNRVPWLYQQMER2R/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZWHWPRAPTNMPNRVPWLYQQMER2R/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T06:00:54Z","links":{"resolver":"https://pith.science/pith/ZWHWPRAPTNMPNRVPWLYQQMER2R","bundle":"https://pith.science/pith/ZWHWPRAPTNMPNRVPWLYQQMER2R/bundle.json","state":"https://pith.science/pith/ZWHWPRAPTNMPNRVPWLYQQMER2R/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZWHWPRAPTNMPNRVPWLYQQMER2R/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ZWHWPRAPTNMPNRVPWLYQQMER2R","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b75f06dc6adb4532462cdf07bf8bd76b6715605fe8e3cf455ea33c075a434e4a","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-05T10:51:33Z","title_canon_sha256":"118e673e64d147bf13e1e830beae1326bc1b19a266207f75476c443b1622e66f"},"schema_version":"1.0","source":{"id":"2407.04411","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.04411","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"arxiv_version","alias_value":"2407.04411v2","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.04411","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"pith_short_12","alias_value":"ZWHWPRAPTNMP","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"pith_short_16","alias_value":"ZWHWPRAPTNMPNRVP","created_at":"2026-07-05T09:27:24Z"},{"alias_kind":"pith_short_8","alias_value":"ZWHWPRAP","created_at":"2026-07-05T09:27:24Z"}],"graph_snapshots":[{"event_id":"sha256:17ffdbc28df5a1a60bb2a6118bc1e953d8e4c170fe94458ac545305ead3187d8","target":"graph","created_at":"2026-07-05T09:27:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.04411/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Protecting intellectual property (IP) of text such as articles and code is increasingly important, especially as sophisticated attacks become possible, such as paraphrasing by large language models (LLMs) or even unauthorized training of LLMs on copyrighted text to infringe such IP. However, existing text watermarking methods are not robust enough against such attacks nor scalable to millions of users for practical implementation. In this paper, we propose Waterfall, the first training-free framework for robust and scalable text watermarking applicable across multiple text types (e.g., article","authors_text":"Bryan Kian Hsiang Low, Chuan-Sheng Foo, Gregory Kang Ruey Lau, Hieu Dao, Jiangwei Chen, Xinyuan Niu","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-05T10:51:33Z","title":"Waterfall: Framework for Robust and Scalable Text Watermarking and Provenance for LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.04411","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:70259137faa33c2c87b92192aeb885b95dcef3612087e6732294e0827dc62a47","target":"record","created_at":"2026-07-05T09:27:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b75f06dc6adb4532462cdf07bf8bd76b6715605fe8e3cf455ea33c075a434e4a","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-05T10:51:33Z","title_canon_sha256":"118e673e64d147bf13e1e830beae1326bc1b19a266207f75476c443b1622e66f"},"schema_version":"1.0","source":{"id":"2407.04411","kind":"arxiv","version":2}},"canonical_sha256":"cd8f67c40f9b58f6c6afb2f1083091d47c58c5244a7a07b72914385404e1a06d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cd8f67c40f9b58f6c6afb2f1083091d47c58c5244a7a07b72914385404e1a06d","first_computed_at":"2026-07-05T09:27:24.006715Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:27:24.006715Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"drPcdTI5s8FOcEWMYNsMBIVvY8D1b+qYR4n1sdVN2iAAarDULcqBSThhjLT6NalGk5l2yzKkUw17fqnQjlQ3Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:27:24.007211Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.04411","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:70259137faa33c2c87b92192aeb885b95dcef3612087e6732294e0827dc62a47","sha256:17ffdbc28df5a1a60bb2a6118bc1e953d8e4c170fe94458ac545305ead3187d8"],"state_sha256":"0d7019bc6b7cf2d44e425f9944d6ac150204dc22001d12da1cea6c773603da1e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SpGnkHQBD8jWGVZUKRk6mXkj3HCYVbNV9t0GNFuvEKJqStLGwftHWuiyjBOlNVuEx3jI+taaDnSVnGFCJBF8AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T06:00:54.321634Z","bundle_sha256":"ba43a350ecfb975626bc7c73c3671270f2a231b16f9257e4a71fdee3c5024e87"}}