{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:2HK32FFXZCOXXJ345VS45VYJWC","short_pith_number":"pith:2HK32FFX","canonical_record":{"source":{"id":"2608.01020","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T05:56:23Z","cross_cats_sorted":[],"title_canon_sha256":"5b4794389e6534d23632253545cd259b9bbfc0164e73cd5fe883d8f33b111f3e","abstract_canon_sha256":"65b3789369660c2134194cb655a6c6e736fbf797b87ab40a4e497e61d6e4525f"},"schema_version":"1.0"},"canonical_sha256":"d1d5bd14b7c89d7ba77ced65ced709b0836ccf3005cf9b61a7e5def53bb55101","source":{"kind":"arxiv","id":"2608.01020","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01020","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01020v1","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01020","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"pith_short_12","alias_value":"2HK32FFXZCOX","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"pith_short_16","alias_value":"2HK32FFXZCOXXJ34","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"pith_short_8","alias_value":"2HK32FFX","created_at":"2026-08-04T01:56:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:2HK32FFXZCOXXJ345VS45VYJWC","target":"record","payload":{"canonical_record":{"source":{"id":"2608.01020","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T05:56:23Z","cross_cats_sorted":[],"title_canon_sha256":"5b4794389e6534d23632253545cd259b9bbfc0164e73cd5fe883d8f33b111f3e","abstract_canon_sha256":"65b3789369660c2134194cb655a6c6e736fbf797b87ab40a4e497e61d6e4525f"},"schema_version":"1.0"},"canonical_sha256":"d1d5bd14b7c89d7ba77ced65ced709b0836ccf3005cf9b61a7e5def53bb55101","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T01:56:13.692050Z","signature_b64":"ztNX+GII2s4k9gDFoxfNz9/qDZrRnsHGZmqzGQrs3IXty3qUIdm8ulhZ+wb6PEF5iq9uBZLgaqxDLJE8QxPLDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d1d5bd14b7c89d7ba77ced65ced709b0836ccf3005cf9b61a7e5def53bb55101","last_reissued_at":"2026-08-04T01:56:13.690430Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T01:56:13.690430Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.01020","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T01:56:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ym0yeSKyM4CT+n5/8WhLC0HpNCMtcFUyDns/Y9uNWb5spFIY8gKsvJTaVn6JPz6r8pk/qrgp96iUfYO+7GxKDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T23:05:50.903468Z"},"content_sha256":"b38288c5f0dad25a9007329f0b8ad18d8219ae6384cd978d28e09f4c83c4ce0d","schema_version":"1.0","event_id":"sha256:b38288c5f0dad25a9007329f0b8ad18d8219ae6384cd978d28e09f4c83c4ce0d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:2HK32FFXZCOXXJ345VS45VYJWC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Inverting the Hidden: Unveiling Multimodal Privacy Leakage in Collaborative LVLM Inference","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jiahui Hu, Qiyuan Wang, Shuaifan Jin, Xiaoyi Pang, Yajie Zhou, Yiting Han, Yuanfan Zhang, Zhibo Wang","submitted_at":"2026-08-02T05:56:23Z","abstract_excerpt":"Collaborative inference deploys Large Vision-Language Models (LVLMs) by partitioning computation between edge devices and the cloud. While withholding raw inputs supposedly ensures privacy, transmitting intermediate hidden states exposes a critical attack surface. However, it remains unclear whether deep-layer LVLM hidden states retain recoverable private information, given that visual content has been projected into the language embedding space. To address this concern, we theoretically analyze LVLM hidden-state recoverability and show that, under regularity assumptions and a positive semanti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01020","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.01020/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T01:56:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KnIwa2GYmIIMBwtDFkcMfEpjm48L0P2JmyJiTx3YoF2FVqLzW/PIOsNqp+fzWYKmmG6vc2J0nUUFS1Qz3xIGBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T23:05:50.913451Z"},"content_sha256":"c97e51d36a6915b6d0bd01c08b0d330cc5f7badad3af9cd2ec29093213264bad","schema_version":"1.0","event_id":"sha256:c97e51d36a6915b6d0bd01c08b0d330cc5f7badad3af9cd2ec29093213264bad"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2HK32FFXZCOXXJ345VS45VYJWC/bundle.json","state_url":"https://pith.science/pith/2HK32FFXZCOXXJ345VS45VYJWC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2HK32FFXZCOXXJ345VS45VYJWC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T23:05:51Z","links":{"resolver":"https://pith.science/pith/2HK32FFXZCOXXJ345VS45VYJWC","bundle":"https://pith.science/pith/2HK32FFXZCOXXJ345VS45VYJWC/bundle.json","state":"https://pith.science/pith/2HK32FFXZCOXXJ345VS45VYJWC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2HK32FFXZCOXXJ345VS45VYJWC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:2HK32FFXZCOXXJ345VS45VYJWC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"65b3789369660c2134194cb655a6c6e736fbf797b87ab40a4e497e61d6e4525f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T05:56:23Z","title_canon_sha256":"5b4794389e6534d23632253545cd259b9bbfc0164e73cd5fe883d8f33b111f3e"},"schema_version":"1.0","source":{"id":"2608.01020","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01020","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01020v1","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01020","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"pith_short_12","alias_value":"2HK32FFXZCOX","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"pith_short_16","alias_value":"2HK32FFXZCOXXJ34","created_at":"2026-08-04T01:56:13Z"},{"alias_kind":"pith_short_8","alias_value":"2HK32FFX","created_at":"2026-08-04T01:56:13Z"}],"graph_snapshots":[{"event_id":"sha256:c97e51d36a6915b6d0bd01c08b0d330cc5f7badad3af9cd2ec29093213264bad","target":"graph","created_at":"2026-08-04T01:56:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.01020/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Collaborative inference deploys Large Vision-Language Models (LVLMs) by partitioning computation between edge devices and the cloud. While withholding raw inputs supposedly ensures privacy, transmitting intermediate hidden states exposes a critical attack surface. However, it remains unclear whether deep-layer LVLM hidden states retain recoverable private information, given that visual content has been projected into the language embedding space. To address this concern, we theoretically analyze LVLM hidden-state recoverability and show that, under regularity assumptions and a positive semanti","authors_text":"Jiahui Hu, Qiyuan Wang, Shuaifan Jin, Xiaoyi Pang, Yajie Zhou, Yiting Han, Yuanfan Zhang, Zhibo Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T05:56:23Z","title":"Inverting the Hidden: Unveiling Multimodal Privacy Leakage in Collaborative LVLM Inference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01020","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b38288c5f0dad25a9007329f0b8ad18d8219ae6384cd978d28e09f4c83c4ce0d","target":"record","created_at":"2026-08-04T01:56:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"65b3789369660c2134194cb655a6c6e736fbf797b87ab40a4e497e61d6e4525f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T05:56:23Z","title_canon_sha256":"5b4794389e6534d23632253545cd259b9bbfc0164e73cd5fe883d8f33b111f3e"},"schema_version":"1.0","source":{"id":"2608.01020","kind":"arxiv","version":1}},"canonical_sha256":"d1d5bd14b7c89d7ba77ced65ced709b0836ccf3005cf9b61a7e5def53bb55101","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d1d5bd14b7c89d7ba77ced65ced709b0836ccf3005cf9b61a7e5def53bb55101","first_computed_at":"2026-08-04T01:56:13.690430Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T01:56:13.690430Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ztNX+GII2s4k9gDFoxfNz9/qDZrRnsHGZmqzGQrs3IXty3qUIdm8ulhZ+wb6PEF5iq9uBZLgaqxDLJE8QxPLDw==","signature_status":"signed_v1","signed_at":"2026-08-04T01:56:13.692050Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.01020","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b38288c5f0dad25a9007329f0b8ad18d8219ae6384cd978d28e09f4c83c4ce0d","sha256:c97e51d36a6915b6d0bd01c08b0d330cc5f7badad3af9cd2ec29093213264bad"],"state_sha256":"2f662448ab53cb2a0bf5418c706e8819be5ad66a071126a38edb131a2b93ab57"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ByD/TarF1RRxBHDkATBLwz37t4sYJ+2GE1iGAvrH7USsd+ljGAlnpiM1DHylgo07wMq07KULnm4T7Ix9bND9Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T23:05:51.276628Z","bundle_sha256":"5dbf9993a2aa9873f1dfabc5712831c9787f4e0ccf7c4f23b806ab69ebf746bd"}}