{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5AFGNBD6LRWVMWK33DB6TEZ4ZV","short_pith_number":"pith:5AFGNBD6","canonical_record":{"source":{"id":"2506.09452","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-11T06:56:12Z","cross_cats_sorted":["cs.CL","cs.CR","cs.IT","math.IT"],"title_canon_sha256":"f06a4808aed73643f60a9838632b1fea412a31c25154dd0c2dad2607e5ce3c86","abstract_canon_sha256":"78440c13bbfc6fc65345f7b3e90cf87782149ab64927030d3b1cdaf43ee4de1b"},"schema_version":"1.0"},"canonical_sha256":"e80a66847e5c6d56595bd8c3e9933ccd72bf1bd5a0690beba85eae5198c7d505","source":{"kind":"arxiv","id":"2506.09452","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.09452","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"arxiv_version","alias_value":"2506.09452v1","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.09452","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"pith_short_12","alias_value":"5AFGNBD6LRWV","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"pith_short_16","alias_value":"5AFGNBD6LRWVMWK3","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"pith_short_8","alias_value":"5AFGNBD6","created_at":"2026-07-05T11:19:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5AFGNBD6LRWVMWK33DB6TEZ4ZV","target":"record","payload":{"canonical_record":{"source":{"id":"2506.09452","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-11T06:56:12Z","cross_cats_sorted":["cs.CL","cs.CR","cs.IT","math.IT"],"title_canon_sha256":"f06a4808aed73643f60a9838632b1fea412a31c25154dd0c2dad2607e5ce3c86","abstract_canon_sha256":"78440c13bbfc6fc65345f7b3e90cf87782149ab64927030d3b1cdaf43ee4de1b"},"schema_version":"1.0"},"canonical_sha256":"e80a66847e5c6d56595bd8c3e9933ccd72bf1bd5a0690beba85eae5198c7d505","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:19:37.714763Z","signature_b64":"oIVlAQ+eukjjazrHaEcPBbcm5cBa3SSHsy5ocuf2NLSXpMx9WyYE+e07Fsr2ekkDIFAxgCxZgesspc5ZdPxlDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e80a66847e5c6d56595bd8c3e9933ccd72bf1bd5a0690beba85eae5198c7d505","last_reissued_at":"2026-07-05T11:19:37.714278Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:19:37.714278Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.09452","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:19:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dXr/vGFYC0KKaRlf0A+wZCRA62Lrd2+acQMRCe8OdclVvPu1QPb3ZAh7rKLKSVamX6Rl+HVjMkCW2+Mjmc29BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:07:14.119367Z"},"content_sha256":"4ac05e3248a8a0069920d77022cbbc801e7d5d43bc338b4b7dbd2431b362f39c","schema_version":"1.0","event_id":"sha256:4ac05e3248a8a0069920d77022cbbc801e7d5d43bc338b4b7dbd2431b362f39c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5AFGNBD6LRWVMWK33DB6TEZ4ZV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learning Obfuscations Of LLM Embedding Sequences: Stained Glass Transform","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CL","cs.CR","cs.IT","math.IT"],"primary_cat":"cs.LG","authors_text":"Jay Roberts, Kaan Kale, Kyle Mylonakis, Sidhartha Roy","submitted_at":"2025-06-11T06:56:12Z","abstract_excerpt":"The high cost of ownership of AI compute infrastructure and challenges of robust serving of large language models (LLMs) has led to a surge in managed Model-as-a-service deployments. Even when enterprises choose on-premises deployments, the compute infrastructure is typically shared across many teams in order to maximize the return on investment. In both scenarios the deployed models operate only on plaintext data, and so enterprise data owners must allow their data to appear in plaintext on a shared or multi-tenant compute infrastructure. This results in data owners with private or sensitive "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.09452","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.09452/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:19:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p2r3j34At5O6Jmudng5H7M1wIgPmBEgbvlEp12YzMAHpCIOBX+CxpwgNcHfCiWPs0BQ+5OOH87Cq93/hZ7b6DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:07:14.120270Z"},"content_sha256":"af7e8996fc0b13697dd4f6442393d97e408217a5e8566e7a4d8cad21c18fe453","schema_version":"1.0","event_id":"sha256:af7e8996fc0b13697dd4f6442393d97e408217a5e8566e7a4d8cad21c18fe453"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5AFGNBD6LRWVMWK33DB6TEZ4ZV/bundle.json","state_url":"https://pith.science/pith/5AFGNBD6LRWVMWK33DB6TEZ4ZV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5AFGNBD6LRWVMWK33DB6TEZ4ZV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T22:07:14Z","links":{"resolver":"https://pith.science/pith/5AFGNBD6LRWVMWK33DB6TEZ4ZV","bundle":"https://pith.science/pith/5AFGNBD6LRWVMWK33DB6TEZ4ZV/bundle.json","state":"https://pith.science/pith/5AFGNBD6LRWVMWK33DB6TEZ4ZV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5AFGNBD6LRWVMWK33DB6TEZ4ZV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5AFGNBD6LRWVMWK33DB6TEZ4ZV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78440c13bbfc6fc65345f7b3e90cf87782149ab64927030d3b1cdaf43ee4de1b","cross_cats_sorted":["cs.CL","cs.CR","cs.IT","math.IT"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-11T06:56:12Z","title_canon_sha256":"f06a4808aed73643f60a9838632b1fea412a31c25154dd0c2dad2607e5ce3c86"},"schema_version":"1.0","source":{"id":"2506.09452","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.09452","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"arxiv_version","alias_value":"2506.09452v1","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.09452","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"pith_short_12","alias_value":"5AFGNBD6LRWV","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"pith_short_16","alias_value":"5AFGNBD6LRWVMWK3","created_at":"2026-07-05T11:19:37Z"},{"alias_kind":"pith_short_8","alias_value":"5AFGNBD6","created_at":"2026-07-05T11:19:37Z"}],"graph_snapshots":[{"event_id":"sha256:af7e8996fc0b13697dd4f6442393d97e408217a5e8566e7a4d8cad21c18fe453","target":"graph","created_at":"2026-07-05T11:19:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.09452/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The high cost of ownership of AI compute infrastructure and challenges of robust serving of large language models (LLMs) has led to a surge in managed Model-as-a-service deployments. Even when enterprises choose on-premises deployments, the compute infrastructure is typically shared across many teams in order to maximize the return on investment. In both scenarios the deployed models operate only on plaintext data, and so enterprise data owners must allow their data to appear in plaintext on a shared or multi-tenant compute infrastructure. This results in data owners with private or sensitive ","authors_text":"Jay Roberts, Kaan Kale, Kyle Mylonakis, Sidhartha Roy","cross_cats":["cs.CL","cs.CR","cs.IT","math.IT"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-11T06:56:12Z","title":"Learning Obfuscations Of LLM Embedding Sequences: Stained Glass Transform"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.09452","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4ac05e3248a8a0069920d77022cbbc801e7d5d43bc338b4b7dbd2431b362f39c","target":"record","created_at":"2026-07-05T11:19:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78440c13bbfc6fc65345f7b3e90cf87782149ab64927030d3b1cdaf43ee4de1b","cross_cats_sorted":["cs.CL","cs.CR","cs.IT","math.IT"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-11T06:56:12Z","title_canon_sha256":"f06a4808aed73643f60a9838632b1fea412a31c25154dd0c2dad2607e5ce3c86"},"schema_version":"1.0","source":{"id":"2506.09452","kind":"arxiv","version":1}},"canonical_sha256":"e80a66847e5c6d56595bd8c3e9933ccd72bf1bd5a0690beba85eae5198c7d505","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e80a66847e5c6d56595bd8c3e9933ccd72bf1bd5a0690beba85eae5198c7d505","first_computed_at":"2026-07-05T11:19:37.714278Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:19:37.714278Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oIVlAQ+eukjjazrHaEcPBbcm5cBa3SSHsy5ocuf2NLSXpMx9WyYE+e07Fsr2ekkDIFAxgCxZgesspc5ZdPxlDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:19:37.714763Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.09452","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4ac05e3248a8a0069920d77022cbbc801e7d5d43bc338b4b7dbd2431b362f39c","sha256:af7e8996fc0b13697dd4f6442393d97e408217a5e8566e7a4d8cad21c18fe453"],"state_sha256":"1385af67cbf58c259357f0778b569dfa911e50fd2e8ca0ce3be6297049797efc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E5Fd/uCyhS6UjZu7Mw/3DssuC/xMVFAdS+K45k4axEHXCr8bW3AZgT79ho5KJyUTzQUbyT53hUjnLu+umJySAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T22:07:14.177465Z","bundle_sha256":"4f7b64814796dc30344d56a8774f5473208458f005af436e898ded4d20c00466"}}