{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:56B4FAAJTIMWTTSBWIV64DHPLZ","short_pith_number":"pith:56B4FAAJ","canonical_record":{"source":{"id":"2501.05965","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-10T13:47:13Z","cross_cats_sorted":[],"title_canon_sha256":"bf633a9eeba8509869d7e9753459b0639a2edabeeddceb84ab11a4bc5b693828","abstract_canon_sha256":"4c44d5bed15af0810bda6eae33fdc88364c5b64cf3f46af972e75d80d5db4684"},"schema_version":"1.0"},"canonical_sha256":"ef83c280099a1969ce41b22bee0cef5e4953deff06296ab6340309e782100e51","source":{"kind":"arxiv","id":"2501.05965","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.05965","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"arxiv_version","alias_value":"2501.05965v1","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.05965","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"pith_short_12","alias_value":"56B4FAAJTIMW","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"pith_short_16","alias_value":"56B4FAAJTIMWTTSB","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"pith_short_8","alias_value":"56B4FAAJ","created_at":"2026-07-05T09:59:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:56B4FAAJTIMWTTSBWIV64DHPLZ","target":"record","payload":{"canonical_record":{"source":{"id":"2501.05965","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-10T13:47:13Z","cross_cats_sorted":[],"title_canon_sha256":"bf633a9eeba8509869d7e9753459b0639a2edabeeddceb84ab11a4bc5b693828","abstract_canon_sha256":"4c44d5bed15af0810bda6eae33fdc88364c5b64cf3f46af972e75d80d5db4684"},"schema_version":"1.0"},"canonical_sha256":"ef83c280099a1969ce41b22bee0cef5e4953deff06296ab6340309e782100e51","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:59:30.955958Z","signature_b64":"a6e1j8YOfE89NTBZACpku3BWPvikRaJf0E7hq0Q6vv8HZi+l7DBDUhfTCk+izFzNJnztLdjEkPWerqm2yYm8Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ef83c280099a1969ce41b22bee0cef5e4953deff06296ab6340309e782100e51","last_reissued_at":"2026-07-05T09:59:30.955573Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:59:30.955573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.05965","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:59:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rUSXql/4dd/dhhUremKayWyDYZBV8TphMJpiElaPvxIN9JiXlYwWmhFXsFGKZno+of7MAJ6nXW7xMaECa4Q9Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T12:57:13.490124Z"},"content_sha256":"4f4e16f0ba5988d2e1266ed80fec4d5cfd0b1698488b97fc18a793af76265d9d","schema_version":"1.0","event_id":"sha256:4f4e16f0ba5988d2e1266ed80fec4d5cfd0b1698488b97fc18a793af76265d9d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:56B4FAAJTIMWTTSBWIV64DHPLZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model Inversion in Split Learning for Personalized LLMs: New Insights from Information Bottleneck Theory","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Haojin Zhu, Shaofeng Li, Tian Dong, Yan Meng, Yunmeng Shu","submitted_at":"2025-01-10T13:47:13Z","abstract_excerpt":"Personalized Large Language Models (LLMs) have become increasingly prevalent, showcasing the impressive capabilities of models like GPT-4. This trend has also catalyzed extensive research on deploying LLMs on mobile devices. Feasible approaches for such edge-cloud deployment include using split learning. However, previous research has largely overlooked the privacy leakage associated with intermediate representations transmitted from devices to servers. This work is the first to identify model inversion attacks in the split learning framework for LLMs, emphasizing the necessity of secure defen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.05965","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.05965/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:59:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xYuExJ2CuHc0QIXYBdxUhj/AumTEmsI0kNg3fYKFpxsctttxnq0UAzLlNP1OChs5jIpRiGq0DeLKjqdm8dhFDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T12:57:13.490710Z"},"content_sha256":"b5298311e7b1110c0f2445d426f3152e57912793e7763b9adeed338180c9b2a3","schema_version":"1.0","event_id":"sha256:b5298311e7b1110c0f2445d426f3152e57912793e7763b9adeed338180c9b2a3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/56B4FAAJTIMWTTSBWIV64DHPLZ/bundle.json","state_url":"https://pith.science/pith/56B4FAAJTIMWTTSBWIV64DHPLZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/56B4FAAJTIMWTTSBWIV64DHPLZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T12:57:13Z","links":{"resolver":"https://pith.science/pith/56B4FAAJTIMWTTSBWIV64DHPLZ","bundle":"https://pith.science/pith/56B4FAAJTIMWTTSBWIV64DHPLZ/bundle.json","state":"https://pith.science/pith/56B4FAAJTIMWTTSBWIV64DHPLZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/56B4FAAJTIMWTTSBWIV64DHPLZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:56B4FAAJTIMWTTSBWIV64DHPLZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4c44d5bed15af0810bda6eae33fdc88364c5b64cf3f46af972e75d80d5db4684","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-10T13:47:13Z","title_canon_sha256":"bf633a9eeba8509869d7e9753459b0639a2edabeeddceb84ab11a4bc5b693828"},"schema_version":"1.0","source":{"id":"2501.05965","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.05965","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"arxiv_version","alias_value":"2501.05965v1","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.05965","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"pith_short_12","alias_value":"56B4FAAJTIMW","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"pith_short_16","alias_value":"56B4FAAJTIMWTTSB","created_at":"2026-07-05T09:59:30Z"},{"alias_kind":"pith_short_8","alias_value":"56B4FAAJ","created_at":"2026-07-05T09:59:30Z"}],"graph_snapshots":[{"event_id":"sha256:b5298311e7b1110c0f2445d426f3152e57912793e7763b9adeed338180c9b2a3","target":"graph","created_at":"2026-07-05T09:59:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.05965/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Personalized Large Language Models (LLMs) have become increasingly prevalent, showcasing the impressive capabilities of models like GPT-4. This trend has also catalyzed extensive research on deploying LLMs on mobile devices. Feasible approaches for such edge-cloud deployment include using split learning. However, previous research has largely overlooked the privacy leakage associated with intermediate representations transmitted from devices to servers. This work is the first to identify model inversion attacks in the split learning framework for LLMs, emphasizing the necessity of secure defen","authors_text":"Haojin Zhu, Shaofeng Li, Tian Dong, Yan Meng, Yunmeng Shu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-10T13:47:13Z","title":"Model Inversion in Split Learning for Personalized LLMs: New Insights from Information Bottleneck Theory"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.05965","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4f4e16f0ba5988d2e1266ed80fec4d5cfd0b1698488b97fc18a793af76265d9d","target":"record","created_at":"2026-07-05T09:59:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4c44d5bed15af0810bda6eae33fdc88364c5b64cf3f46af972e75d80d5db4684","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-10T13:47:13Z","title_canon_sha256":"bf633a9eeba8509869d7e9753459b0639a2edabeeddceb84ab11a4bc5b693828"},"schema_version":"1.0","source":{"id":"2501.05965","kind":"arxiv","version":1}},"canonical_sha256":"ef83c280099a1969ce41b22bee0cef5e4953deff06296ab6340309e782100e51","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ef83c280099a1969ce41b22bee0cef5e4953deff06296ab6340309e782100e51","first_computed_at":"2026-07-05T09:59:30.955573Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:59:30.955573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a6e1j8YOfE89NTBZACpku3BWPvikRaJf0E7hq0Q6vv8HZi+l7DBDUhfTCk+izFzNJnztLdjEkPWerqm2yYm8Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:59:30.955958Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.05965","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4f4e16f0ba5988d2e1266ed80fec4d5cfd0b1698488b97fc18a793af76265d9d","sha256:b5298311e7b1110c0f2445d426f3152e57912793e7763b9adeed338180c9b2a3"],"state_sha256":"cf437e285bee9bc280b12e79562564793418fe5a8f99c705b2e6ecd94c8a1f6b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jARWI0NCs+ANofEbZyVrZO+WtrdloGsr5SpXdTFvj4O6+OkkZV7Xy14JR+PP4ewUyVTsabLpm3Sczyw+AIIbDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T12:57:13.495320Z","bundle_sha256":"b5baa552d0ad896c48a22ba3bbf24d170db1d70bd5caa6bb1435f196df5b98a3"}}