{"as_of":"2026-08-09T01:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:dcddb0002ee49ae7ab94df09fa112e0eec789f6fbcf8bb8cf2057e26d93540da","coverage":[{"denominator":23,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":23,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:38:40.274729Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:45:52.933522Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T19:45:53.232647Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"cited_work":{"arxiv_id":"2505.18332","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.18332","snapshot_observed_at":"2026-08-06T19:45:53.232647Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","venue":"cs.CR","work_id":"42f6b1c3-b1ba-43f7-980a-b7a0c54a201b","year":2025},"citing_paper":{"arxiv_id":"2507.05228","last_updated":"2025-07-07T17:37:16Z","snapshot_observed_at":"2026-08-08T14:39:18.103621Z","submitted_at":"2025-07-07T17:37:16Z","title":"Cascade: Token-Sharded Private LLM Inference","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-06T19:45:52.933522Z"},"links":{"cited_paper":"/paper/2505.18332","citing_paper":"/paper/2507.05228"},"observation_digest":"sha256:233f8592d17799ede40332983f15230ee0ca992979e691a28a033e83bd690469","observation_id":"8025759c-1d9d-4b83-9e27-0aa6c46d9597","resolution":{"observed_at":"2026-08-06T19:45:53.239409Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.18332/citation-record","integrity":"/paper/2505.18332/integrity","json":"/paper/2505.18332/citation-record.json","paper":"/paper/2505.18332"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:37.803451Z","title":"Dominic Edelmann, Tamás F Móri, and Gábor J Székely","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:37.803451Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:b7fed447071e125ccc11f381a2ed75253c9f84b9281964252203143608688873","observation_id":"405bb342-b6ab-4809-b747-ea0c4bdf1960","resolution":{"observed_at":"2026-08-07T14:38:37.803451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:38.184531Z","title":"Kai Kugler, Simon Münker, Johannes Höhmann, and Achim Rettinger","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.184531Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:2c5763245646dc59430193c68b6a80faf9a70736db59178027648af291b70574","observation_id":"f90b11d6-7100-411b-96f5-46551fe6ad64","resolution":{"observed_at":"2026-08-07T14:38:38.184531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03010","last_updated":"2023-05-04T17:31:41Z","snapshot_observed_at":"2026-08-06T21:09:36.639494Z","submitted_at":"2023-05-04T17:31:41Z","title":"Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03010","snapshot_observed_at":"2026-08-07T14:38:38.358259Z","title":"Zhengyi Li, Kang Yang, Jin Tan, Wen jie Lu, Haoqi Wu, Xiao Wang, Yu Yu, Derun Zhao, Yancheng Zheng, Minyi Guo, and Jingwen Leng","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.358259Z"},"links":{"cited_paper":"/paper/2305.03010","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:8012017eabbd0f497d47debcc9ef4123b7760ed7106e8866ab21de02e89c3204","observation_id":"e1b153f3-dcfb-4886-a998-338e1fd4d020","resolution":{"observed_at":"2026-08-07T14:38:38.358259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15707","last_updated":"2024-11-24T04:24:31Z","snapshot_observed_at":"2026-07-06T19:56:04.259325Z","submitted_at":"2024-11-24T04:24:31Z","title":"Nimbus: Secure and Efficient Two-Party Inference for Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15707","snapshot_observed_at":"2026-08-07T14:38:38.487443Z","title":"Jinglong Luo, Guanzhong Chen, Yehong Zhang, Shiyu Liu, Hui Wang, Yue Yu, Xun Zhou, Yuan Qi, and Zenglin Xu","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.487443Z"},"links":{"cited_paper":"/paper/2411.15707","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:03574085f1f89a55bdd53012c7ae1ed5cefa725cd63014e7e12e1822acebe059","observation_id":"f3e2e271-3360-47be-86b0-cda2b71c51cc","resolution":{"observed_at":"2026-08-07T14:38:38.487443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10652","last_updated":"2025-06-10T09:20:09Z","snapshot_observed_at":"2026-08-05T11:36:46.909061Z","submitted_at":"2024-12-14T02:50:30Z","title":"CENTAUR: Bridging the Impossible Trinity of Privacy, Efficiency, and Performance in Privacy-Preserving Transformer Inference","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10652","snapshot_observed_at":"2026-08-07T14:38:38.596035Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.596035Z"},"links":{"cited_paper":"/paper/2412.10652","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:fe37a7acf10b2ad33f691c795e161db05c0b02afef2a6bf2657bdc926ba73dad","observation_id":"5452b8ae-69ed-42d8-88b7-90ece172ad6c","resolution":{"observed_at":"2026-08-07T14:38:38.596035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:41.798137Z","title":"Guilherme Penedo, Hynek Kydlíˇcek, Loubna Ben allal, Anton Lozhkov, Margaret Mitchell, Colin Raffel, Leandro V on Werra, and Thomas Wolf","venue":null,"work_id":"dac571fb-5a4b-4efa-9419-6255584178a5","year":2023},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.730685Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:478475aeb9fa8aec283eebb6e0bb86d23598db0404fe2b0587a09b0c04d00c16","observation_id":"25b075a5-ca98-4f95-a209-9c46046671a6","resolution":{"observed_at":"2026-08-07T14:38:41.947472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.17557","last_updated":"2024-10-31T11:37:49Z","snapshot_observed_at":"2026-08-02T15:25:02.551919Z","submitted_at":"2024-06-25T13:50:56Z","title":"The FineWeb Datasets: Decanting the Web for the Finest Text Data at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.17557","snapshot_observed_at":"2026-08-07T14:38:38.867121Z","title":"15 Ivo Petrov, Dimitar I Dimitrov, Maximilian Baader, Mark Müller, and Martin Vechev","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.867121Z"},"links":{"cited_paper":"/paper/2406.17557","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:9428217b195a5de4c7f9c1c3751e75994eb46a1f48004b1973657dcf062b5ea5","observation_id":"a97d5fb2-cecf-4536-ae27-1ce8453ca5c6","resolution":{"observed_at":"2026-08-07T14:38:38.867121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.05148","last_updated":"2024-10-30T16:52:42Z","snapshot_observed_at":"2026-08-07T16:37:17.507387Z","submitted_at":"2024-08-09T16:07:37Z","title":"Impacts of floating-point non-associativity on reproducibility for HPC and deep learning applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.05148","snapshot_observed_at":"2026-08-07T14:38:38.943566Z","title":"Congzheng Song and Ananth Raghunathan","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.943566Z"},"links":{"cited_paper":"/paper/2408.05148","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:7c51dbed68343ad453a970b720488baa4ceebb836daf3f986d35f060de2e0290","observation_id":"929a1d1c-b476-4d16-a7e9-1d1afb04d445","resolution":{"observed_at":"2026-08-07T14:38:38.943566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00118","last_updated":"2024-10-02T15:22:49Z","snapshot_observed_at":"2026-08-02T16:20:09.773989Z","submitted_at":"2024-07-31T19:13:07Z","title":"Gemma 2: Improving Open Language Models at a Practical Size","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00118","snapshot_observed_at":"2026-08-07T14:38:39.213094Z","title":"Arun James Thirunavukarasu, Darren Shu Jeng Ting, Kabilan Elangovan, Laura Gutierrez, Ting Fang Tan, and Daniel Shu Wei Ting","venue":null,"work_id":null,"year":1930},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.213094Z"},"links":{"cited_paper":"/paper/2408.00118","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:6f06024e46d2a24a200cda4169f0b0ebd21fa3a8eaa9724ead72dd817cfd09bc","observation_id":"050b391d-a856-4244-afc2-0ba3363dbee4","resolution":{"observed_at":"2026-08-07T14:38:39.213094Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:39.308441Z","title":"URLhttps://www.nature.com/articles/ s41591-023-02459-w","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.308441Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:9b561f8a80c66ae131b6347d2fdb1c2c5554a12332208dbc4fe365135c22e6cb","observation_id":"9a5408b3-a5ba-4a16-880f-4a59dd712917","resolution":{"observed_at":"2026-08-07T14:38:39.308441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.11916","last_updated":"2024-05-22T04:04:17Z","snapshot_observed_at":"2026-07-06T18:16:37.476614Z","submitted_at":"2024-05-20T09:52:31Z","title":"Information Leakage from Embedding in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.11916","snapshot_observed_at":"2026-08-07T14:38:39.430162Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.430162Z"},"links":{"cited_paper":"/paper/2405.11916","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:0acf7df5c5175c106b73d7fd2984d7100154000297bae4335ba73a74cb50c5a6","observation_id":"b318fd1f-c2be-4027-986a-080307085676","resolution":{"observed_at":"2026-08-07T14:38:39.430162Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19314","last_updated":"2025-04-18T19:36:00Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-27T16:47:42Z","title":"LiveBench: A Challenging, Contamination-Limited LLM Benchmark","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19314","snapshot_observed_at":"2026-08-07T14:38:39.534397Z","title":"Hengyuan Xu, Liyao Xiang, Hangyu Ye, Dixi Yao, Pengzhi Chu, and Baochun Li","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.534397Z"},"links":{"cited_paper":"/paper/2406.19314","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:43c4becda1ea859f6b9e3fc3db0a74fded464c7db6a152b362e90d31c6fdbe98","observation_id":"6cf0fa41-4653-4cd8-972e-bb45c3fbf5fa","resolution":{"observed_at":"2026-08-07T14:38:39.534397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:41.538091Z","title":null,"venue":null,"work_id":"82264c2f-51a7-4f31-8ae0-b7d9153272f4","year":1982},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.653671Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:18eb1a048f1e367b54b7bc7223ee6a23bdaa0d8ab22e39789bc1ad7f5963490d","observation_id":"6e0adb27-92b2-4168-becf-b61cb126c5b8","resolution":{"observed_at":"2026-08-07T14:38:41.694067Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00025","last_updated":"2024-05-08T02:20:09Z","snapshot_observed_at":"2026-08-02T08:43:09.148463Z","submitted_at":"2023-11-14T14:37:23Z","title":"Secure Transformer Inference Protocol","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.00025","snapshot_observed_at":"2026-08-07T14:38:39.900830Z","title":"Fei Zheng, Chaochao Chen, Xiaolin Zheng, and Mingjie Zhu","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.900830Z"},"links":{"cited_paper":"/paper/2312.00025","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:cb013779b7b5139eddf61da420b3bebaea4fcadf01f9533acaa474d51b424910","observation_id":"330888a8-3dba-4f7f-892f-579af943c615","resolution":{"observed_at":"2026-08-07T14:38:39.900830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.04675","last_updated":"2024-06-14T11:40:52Z","snapshot_observed_at":"2026-08-08T14:38:42.704834Z","submitted_at":"2023-04-10T15:51:30Z","title":"Multilingual Machine Translation with Large Language Models: Empirical Results and Analysis","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.04675","snapshot_observed_at":"2026-08-07T14:38:40.028865Z","title":"A Attack Optimizations Proposal ModelAlthough the cost of the attack outlined in Section 3 is linear in V , the size of vocabularies can be quite large in practice","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:40.028865Z"},"links":{"cited_paper":"/paper/2304.04675","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:dce94740f766efb25f22992c235836db6091bde9d881c8fe5a79760f55f4d02c","observation_id":"1dabbc83-2d3e-4d86-b13e-b26bf1efe134","resolution":{"observed_at":"2026-08-07T14:38:40.028865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:41.260013Z","title":"Theorem 2.F or any δ >0, there exist random variables W, X, Y, Zsuch that Discorr(W, X)> Discorr(Y, Z), the pair(W, X)is notδ-reconstructible, and the pair(Y, Z)isδ-reconstructible","venue":null,"work_id":"57b9a715-4d67-4c32-8ae8-12bbaa5dd8da","year":2007},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:40.140195Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:b5b4382d1d8f2318d61c40c5ade16b7a54c3885c833c8d3158de410be7cdaa65","observation_id":"eff3107f-0396-4048-af88-450eddb49230","resolution":{"observed_at":"2026-08-07T14:38:41.376947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:41.106033Z","title":null,"venue":null,"work_id":"c2ea2c21-f65f-47f1-9926-e1cb0c5a5092","year":1945},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:40.274729Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:cd0c203c5900937e03c063956a47a83577bda6157887773b272c0a365dba68a0","observation_id":"c63babae-7383-4e11-ab10-fb8c2e85a9cc","resolution":{"observed_at":"2026-08-07T14:38:41.174748Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:39.788862Z","title":"Mu Yuan, Lan Zhang, and Xiang-Yang Li","venue":null,"work_id":null,"year":1982},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":1982,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.788862Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:458de5bc6650ec740af45b1742d9ada673f287816522523cdb0b2143554838a1","observation_id":"217ae278-409a-4d07-8c3e-89c7f9dc1258","resolution":{"observed_at":"2026-08-07T14:38:39.788862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:37.953011Z","title":"ISBN 0897912217","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":1987,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:37.953011Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:6f53bb94d2a7a4144893e6ad0a79c51c27d8e7d47b16a7bbbf12489ae984b46f","observation_id":"024fa13c-e315-4233-bde3-47fe306704ee","resolution":{"observed_at":"2026-08-07T14:38:37.953011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:39.081987Z","title":"ISBN 9781450370899","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:39.081987Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:115e0019ca44e12296a1c28d6db691e87fbf2a0d0810dda1862b8d3f823c9beb","observation_id":"4091a69d-26ae-4ade-8ac2-cfdbf4d6f9d3","resolution":{"observed_at":"2026-08-07T14:38:39.081987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:37.643481Z","title":"Theodore W Anderson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:37.643481Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:915a083b32470f79bd4341fc8148205a135b20d05501c33f94596377a23b6ee8","observation_id":"bc9668f2-dcb5-465a-9d20-52d2ab5d015f","resolution":{"observed_at":"2026-08-07T14:38:37.643481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T14:38:38.067869Z","title":"Meng Hao, Hongwei Li, Hanxiao Chen, Pengzhi Xing, Guowen Xu, and Tianwei Zhang","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:38.067869Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:737021de2bd916ce5df165e1691f18ead059eba8674c34fb93ffa44bae010d34","observation_id":"5b5acde4-26de-487e-a48c-f2c938fb5c45","resolution":{"observed_at":"2026-08-07T14:38:38.067869Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:38:42.054812Z","title":"Ye Dong, Wen jie Lu, Yancheng Zheng, Haoqi Wu, Derun Zhao, Jin Tan, Zhicong Huang, Cheng Hong, Tao Wei, and Wenguang Chen","venue":null,"work_id":"153d8e3f-2455-4a3f-9dbe-5ba956f206b1","year":2025},"citing_paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T14:38:37.714278Z"},"links":{"citing_paper":"/paper/2505.18332"},"observation_digest":"sha256:7923729a38500972089018d4fb84ea7e4c013a9b40a5826ebd9e0685790415ed","observation_id":"d81059e1-18c2-4a00-89b7-394f4a7964f4","resolution":{"observed_at":"2026-08-07T14:38:42.175429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.18332","last_updated":"2025-05-23T19:39:18Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T14:39:16.260937Z","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs"},"reference_resolution":{"displayed":23,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":19,"verified_exact":0,"verified_fuzzy":3},"total_outbound_references":23},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 23 of 23 outbound references and 1 inbound Pith citation observation for arXiv:2505.18332."}