{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3NRKBP46X6S62I7JLINOU743FD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b550cf36cc90dff094b12c39e0e815ad9582cc520a784c12ab00fe67ea254d2e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-21T13:18:03Z","title_canon_sha256":"238e8556c075b3800dca07c4d3d4179a7eb3c72d55e59a7c1fcf9b0b4f239893"},"schema_version":"1.0","source":{"id":"2411.14110","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.14110","created_at":"2026-07-05T11:50:29Z"},{"alias_kind":"arxiv_version","alias_value":"2411.14110v2","created_at":"2026-07-05T11:50:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.14110","created_at":"2026-07-05T11:50:29Z"},{"alias_kind":"pith_short_12","alias_value":"3NRKBP46X6S6","created_at":"2026-07-05T11:50:29Z"},{"alias_kind":"pith_short_16","alias_value":"3NRKBP46X6S62I7J","created_at":"2026-07-05T11:50:29Z"},{"alias_kind":"pith_short_8","alias_value":"3NRKBP46","created_at":"2026-07-05T11:50:29Z"}],"graph_snapshots":[{"event_id":"sha256:8da883f7949b739c431683a2e5625e977515590cc2183ed0b6d0cf0359b5a9be","target":"graph","created_at":"2026-07-05T11:50:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.14110/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) expands the knowledge boundary of large language models (LLMs) by integrating external knowledge bases, whose construction is often time-consuming and laborious. If an adversary extracts the knowledge base verbatim, it not only severely infringes the owner's intellectual property but also enables the adversary to replicate the application's functionality for unfair competition. Previous works on knowledge base extraction are limited either by low extraction coverage (usually less than 4%) in query-based attacks or by impractical assumptions of white-box acc","authors_text":"Changyue Jiang, Chenfu Bao, Geng Hong, Min Yang, Xudong Pan, Yang Chen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-21T13:18:03Z","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.14110","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:268bcabc5084e1d30a36f190fbfe0d03dde076a98fcc78d84c5cf891ebf4f4bb","target":"record","created_at":"2026-07-05T11:50:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b550cf36cc90dff094b12c39e0e815ad9582cc520a784c12ab00fe67ea254d2e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-21T13:18:03Z","title_canon_sha256":"238e8556c075b3800dca07c4d3d4179a7eb3c72d55e59a7c1fcf9b0b4f239893"},"schema_version":"1.0","source":{"id":"2411.14110","kind":"arxiv","version":2}},"canonical_sha256":"db62a0bf9ebfa5ed23e95a1aea7f9b28f752b819cdf90206b6bb0b24bc75c7fd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"db62a0bf9ebfa5ed23e95a1aea7f9b28f752b819cdf90206b6bb0b24bc75c7fd","first_computed_at":"2026-07-05T11:50:29.116021Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:50:29.116021Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gDknqXRejWoZ/q0imF4zYih1OAWe8ZPboZWU7oUjYnGobPhbwXAOFKUzFieMPm6PRSQto4Evooe18AGgkE6YDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:50:29.116465Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.14110","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:268bcabc5084e1d30a36f190fbfe0d03dde076a98fcc78d84c5cf891ebf4f4bb","sha256:8da883f7949b739c431683a2e5625e977515590cc2183ed0b6d0cf0359b5a9be"],"state_sha256":"71a655798992fe86d24543aa846b0b73cddd9da582697de0cd64d3f95aaa9cd5"}