{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:34KESAW4XOZT5EBWSA7JPT7CKJ","short_pith_number":"pith:34KESAW4","canonical_record":{"source":{"id":"2408.10468","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T00:40:49Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"fd1ed13c46c95013b4bbaac7f9c481e31f6705b8ef3fd798f4779b581c4c3ec6","abstract_canon_sha256":"4010d744e1cdd1bb9367606b2a125d6a4540bbece611fe27d1bbfdee7e58caee"},"schema_version":"1.0"},"canonical_sha256":"df144902dcbbb33e9036903e97cfe252606c5d0b4fbb5e33d350bca83e3ac168","source":{"kind":"arxiv","id":"2408.10468","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10468","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10468v4","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10468","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"pith_short_12","alias_value":"34KESAW4XOZT","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"pith_short_16","alias_value":"34KESAW4XOZT5EBW","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"pith_short_8","alias_value":"34KESAW4","created_at":"2026-07-05T09:03:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:34KESAW4XOZT5EBWSA7JPT7CKJ","target":"record","payload":{"canonical_record":{"source":{"id":"2408.10468","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T00:40:49Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"fd1ed13c46c95013b4bbaac7f9c481e31f6705b8ef3fd798f4779b581c4c3ec6","abstract_canon_sha256":"4010d744e1cdd1bb9367606b2a125d6a4540bbece611fe27d1bbfdee7e58caee"},"schema_version":"1.0"},"canonical_sha256":"df144902dcbbb33e9036903e97cfe252606c5d0b4fbb5e33d350bca83e3ac168","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:03:40.912187Z","signature_b64":"ZHPdxxSeYHz7gcQdjmb3t633KiKJlT0TEUWmyyGdehY0vFn5cu9YXwO82vZEU+tULG+WesgPQD8MDEBvKf4rBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"df144902dcbbb33e9036903e97cfe252606c5d0b4fbb5e33d350bca83e3ac168","last_reissued_at":"2026-07-05T09:03:40.911674Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:03:40.911674Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.10468","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:03:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T9E47Pi6ed/KzF7xW4KvICp5k1j9Zj5bXLUbThIOdaOI/05t2/XvIm+yUO6VQsdJOxl1Xh6enE21eNs9mGjJAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:57:47.223496Z"},"content_sha256":"b104a920dd89510b12e84feba8bdc16ecf0b35155359b7cb71fb574091d84b51","schema_version":"1.0","event_id":"sha256:b104a920dd89510b12e84feba8bdc16ecf0b35155359b7cb71fb574091d84b51"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:34KESAW4XOZT5EBWSA7JPT7CKJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tracing Privacy Leakage of Language Models to Training Data via Adjusted Influence Functions","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Jinxin Liu, Zao Yang","submitted_at":"2024-08-20T00:40:49Z","abstract_excerpt":"The responses generated by Large Language Models (LLMs) can include sensitive information from individuals and organizations, leading to potential privacy leakage. This work implements Influence Functions (IFs) to trace privacy leakage back to the training data, thereby mitigating privacy concerns of Language Models (LMs). However, we notice that current IFs struggle to accurately estimate the influence of tokens with large gradient norms, potentially overestimating their influence. When tracing the most influential samples, this leads to frequently tracing back to samples with large gradient "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10468","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.10468/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:03:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GubP/2ZvfWdmaY3nIfGxRfnREN4LoYkb/CylFgXidhxFTP4PzPztb5oXNWkhILzQQtMSftAvRYDPiB6T/JTgCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:57:47.224005Z"},"content_sha256":"a1efe3eba6b537e0cd4fe040ecba2401e4067317190f539cec2b79eb9837f412","schema_version":"1.0","event_id":"sha256:a1efe3eba6b537e0cd4fe040ecba2401e4067317190f539cec2b79eb9837f412"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/34KESAW4XOZT5EBWSA7JPT7CKJ/bundle.json","state_url":"https://pith.science/pith/34KESAW4XOZT5EBWSA7JPT7CKJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/34KESAW4XOZT5EBWSA7JPT7CKJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T12:57:47Z","links":{"resolver":"https://pith.science/pith/34KESAW4XOZT5EBWSA7JPT7CKJ","bundle":"https://pith.science/pith/34KESAW4XOZT5EBWSA7JPT7CKJ/bundle.json","state":"https://pith.science/pith/34KESAW4XOZT5EBWSA7JPT7CKJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/34KESAW4XOZT5EBWSA7JPT7CKJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:34KESAW4XOZT5EBWSA7JPT7CKJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4010d744e1cdd1bb9367606b2a125d6a4540bbece611fe27d1bbfdee7e58caee","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T00:40:49Z","title_canon_sha256":"fd1ed13c46c95013b4bbaac7f9c481e31f6705b8ef3fd798f4779b581c4c3ec6"},"schema_version":"1.0","source":{"id":"2408.10468","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10468","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10468v4","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10468","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"pith_short_12","alias_value":"34KESAW4XOZT","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"pith_short_16","alias_value":"34KESAW4XOZT5EBW","created_at":"2026-07-05T09:03:40Z"},{"alias_kind":"pith_short_8","alias_value":"34KESAW4","created_at":"2026-07-05T09:03:40Z"}],"graph_snapshots":[{"event_id":"sha256:a1efe3eba6b537e0cd4fe040ecba2401e4067317190f539cec2b79eb9837f412","target":"graph","created_at":"2026-07-05T09:03:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.10468/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The responses generated by Large Language Models (LLMs) can include sensitive information from individuals and organizations, leading to potential privacy leakage. This work implements Influence Functions (IFs) to trace privacy leakage back to the training data, thereby mitigating privacy concerns of Language Models (LMs). However, we notice that current IFs struggle to accurately estimate the influence of tokens with large gradient norms, potentially overestimating their influence. When tracing the most influential samples, this leads to frequently tracing back to samples with large gradient ","authors_text":"Jinxin Liu, Zao Yang","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T00:40:49Z","title":"Tracing Privacy Leakage of Language Models to Training Data via Adjusted Influence Functions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10468","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b104a920dd89510b12e84feba8bdc16ecf0b35155359b7cb71fb574091d84b51","target":"record","created_at":"2026-07-05T09:03:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4010d744e1cdd1bb9367606b2a125d6a4540bbece611fe27d1bbfdee7e58caee","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T00:40:49Z","title_canon_sha256":"fd1ed13c46c95013b4bbaac7f9c481e31f6705b8ef3fd798f4779b581c4c3ec6"},"schema_version":"1.0","source":{"id":"2408.10468","kind":"arxiv","version":4}},"canonical_sha256":"df144902dcbbb33e9036903e97cfe252606c5d0b4fbb5e33d350bca83e3ac168","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"df144902dcbbb33e9036903e97cfe252606c5d0b4fbb5e33d350bca83e3ac168","first_computed_at":"2026-07-05T09:03:40.911674Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:03:40.911674Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZHPdxxSeYHz7gcQdjmb3t633KiKJlT0TEUWmyyGdehY0vFn5cu9YXwO82vZEU+tULG+WesgPQD8MDEBvKf4rBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:03:40.912187Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.10468","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b104a920dd89510b12e84feba8bdc16ecf0b35155359b7cb71fb574091d84b51","sha256:a1efe3eba6b537e0cd4fe040ecba2401e4067317190f539cec2b79eb9837f412"],"state_sha256":"e7723df2f5bc28855b740f71252ed315b36d5239e99d1fec2b71b736254b1651"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0ib89xglN+RSAdhSSUlADrMQi29FYg8Kc1YJbpIJ++SYPp9Tqg9e/GB8xZ1J63kqvcaCggFq+8597WNvb05hCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T12:57:47.228108Z","bundle_sha256":"0143b0fef941123a3d8c2a80c9147f403bd6a7a36c2fe858d1074a42aa2a9071"}}