{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:6SYJMJKOV2NSGN4NZGOWVOPMHA","short_pith_number":"pith:6SYJMJKO","canonical_record":{"source":{"id":"2409.12367","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-18T23:59:32Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"24f7ea9ae7b559b6658f89f191730ac94f627d0d01b4999fd604eafba8966201","abstract_canon_sha256":"1458268f6bdc698c510ca05c578d333dbb42be51705687e106e8c82bb9c64cc4"},"schema_version":"1.0"},"canonical_sha256":"f4b096254eae9b23378dc99d6ab9ec383b765135a282d68bc1441ada5ac63283","source":{"kind":"arxiv","id":"2409.12367","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.12367","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"arxiv_version","alias_value":"2409.12367v2","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.12367","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"pith_short_12","alias_value":"6SYJMJKOV2NS","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"pith_short_16","alias_value":"6SYJMJKOV2NSGN4N","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"pith_short_8","alias_value":"6SYJMJKO","created_at":"2026-07-05T09:14:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:6SYJMJKOV2NSGN4NZGOWVOPMHA","target":"record","payload":{"canonical_record":{"source":{"id":"2409.12367","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-18T23:59:32Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"24f7ea9ae7b559b6658f89f191730ac94f627d0d01b4999fd604eafba8966201","abstract_canon_sha256":"1458268f6bdc698c510ca05c578d333dbb42be51705687e106e8c82bb9c64cc4"},"schema_version":"1.0"},"canonical_sha256":"f4b096254eae9b23378dc99d6ab9ec383b765135a282d68bc1441ada5ac63283","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:14:38.692040Z","signature_b64":"ddGk04IT481YjWiuVN8SAko1Ommzs4lLCVs9cqR5GIpXRDG8Nkhcg8U0tGGIAOC6D8QmSpClObWOL78lmp7ACg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f4b096254eae9b23378dc99d6ab9ec383b765135a282d68bc1441ada5ac63283","last_reissued_at":"2026-07-05T09:14:38.691617Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:14:38.691617Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.12367","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PHtmBRMbhM7GCSffk85heSlvbz/EOFxVzBxyECSGCPuKj/zpQw10vEKXhi8LQygTQynH7UAIvVPIDZN7ZNAfBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T07:21:39.991218Z"},"content_sha256":"66c9f3d7b188262a9d64f7c41ea4df45c778be904c3995c1a428dceca8d4f22d","schema_version":"1.0","event_id":"sha256:66c9f3d7b188262a9d64f7c41ea4df45c778be904c3995c1a428dceca8d4f22d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:6SYJMJKOV2NSGN4NZGOWVOPMHA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Extracting Memorized Training Data via Decomposition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Amin Karbasi, Amy Chang, Anu Vellore, Blaine Nelson, Ellen Su, Paul Kassianik, Raffaele Mura","submitted_at":"2024-09-18T23:59:32Z","abstract_excerpt":"The widespread use of Large Language Models (LLMs) in society creates new information security challenges for developers, organizations, and end-users alike. LLMs are trained on large volumes of data, and their susceptibility to reveal the exact contents of the source training datasets poses security and safety risks. Although current alignment procedures restrict common risky behaviors, they do not completely prevent LLMs from leaking data. Prior work demonstrated that LLMs may be tricked into divulging training data by using out-of-distribution queries or adversarial techniques. In this pape"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.12367","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.12367/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m2UAADG0p8DMA8P7A9TQ9zsV88yzSQqW5wiGKTniG0jOpC+V2r0QLqjyNIcndjIFL6WtrtlN7A0HF2R3eBw/CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T07:21:39.991716Z"},"content_sha256":"0a39155e3f87e9298830233fb75ce61f566053159a6c229de0f064eeefaf1267","schema_version":"1.0","event_id":"sha256:0a39155e3f87e9298830233fb75ce61f566053159a6c229de0f064eeefaf1267"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6SYJMJKOV2NSGN4NZGOWVOPMHA/bundle.json","state_url":"https://pith.science/pith/6SYJMJKOV2NSGN4NZGOWVOPMHA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6SYJMJKOV2NSGN4NZGOWVOPMHA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T07:21:39Z","links":{"resolver":"https://pith.science/pith/6SYJMJKOV2NSGN4NZGOWVOPMHA","bundle":"https://pith.science/pith/6SYJMJKOV2NSGN4NZGOWVOPMHA/bundle.json","state":"https://pith.science/pith/6SYJMJKOV2NSGN4NZGOWVOPMHA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6SYJMJKOV2NSGN4NZGOWVOPMHA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:6SYJMJKOV2NSGN4NZGOWVOPMHA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1458268f6bdc698c510ca05c578d333dbb42be51705687e106e8c82bb9c64cc4","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-18T23:59:32Z","title_canon_sha256":"24f7ea9ae7b559b6658f89f191730ac94f627d0d01b4999fd604eafba8966201"},"schema_version":"1.0","source":{"id":"2409.12367","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.12367","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"arxiv_version","alias_value":"2409.12367v2","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.12367","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"pith_short_12","alias_value":"6SYJMJKOV2NS","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"pith_short_16","alias_value":"6SYJMJKOV2NSGN4N","created_at":"2026-07-05T09:14:38Z"},{"alias_kind":"pith_short_8","alias_value":"6SYJMJKO","created_at":"2026-07-05T09:14:38Z"}],"graph_snapshots":[{"event_id":"sha256:0a39155e3f87e9298830233fb75ce61f566053159a6c229de0f064eeefaf1267","target":"graph","created_at":"2026-07-05T09:14:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.12367/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread use of Large Language Models (LLMs) in society creates new information security challenges for developers, organizations, and end-users alike. LLMs are trained on large volumes of data, and their susceptibility to reveal the exact contents of the source training datasets poses security and safety risks. Although current alignment procedures restrict common risky behaviors, they do not completely prevent LLMs from leaking data. Prior work demonstrated that LLMs may be tricked into divulging training data by using out-of-distribution queries or adversarial techniques. In this pape","authors_text":"Amin Karbasi, Amy Chang, Anu Vellore, Blaine Nelson, Ellen Su, Paul Kassianik, Raffaele Mura","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-18T23:59:32Z","title":"Extracting Memorized Training Data via Decomposition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.12367","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:66c9f3d7b188262a9d64f7c41ea4df45c778be904c3995c1a428dceca8d4f22d","target":"record","created_at":"2026-07-05T09:14:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1458268f6bdc698c510ca05c578d333dbb42be51705687e106e8c82bb9c64cc4","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-18T23:59:32Z","title_canon_sha256":"24f7ea9ae7b559b6658f89f191730ac94f627d0d01b4999fd604eafba8966201"},"schema_version":"1.0","source":{"id":"2409.12367","kind":"arxiv","version":2}},"canonical_sha256":"f4b096254eae9b23378dc99d6ab9ec383b765135a282d68bc1441ada5ac63283","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f4b096254eae9b23378dc99d6ab9ec383b765135a282d68bc1441ada5ac63283","first_computed_at":"2026-07-05T09:14:38.691617Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:14:38.691617Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ddGk04IT481YjWiuVN8SAko1Ommzs4lLCVs9cqR5GIpXRDG8Nkhcg8U0tGGIAOC6D8QmSpClObWOL78lmp7ACg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:14:38.692040Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.12367","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:66c9f3d7b188262a9d64f7c41ea4df45c778be904c3995c1a428dceca8d4f22d","sha256:0a39155e3f87e9298830233fb75ce61f566053159a6c229de0f064eeefaf1267"],"state_sha256":"40cbd42a4e30b67e0a082f71da4927f8cba76d7900a047a460808205b90106d7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VZoe4qGqVAMWe8ff62Em/FAFfmKL+jZbmurgJBFgNRx35wJSIhvkNL9hrqe/Fi7qBw8fIOUDchjdMwTQ2tQUBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T07:21:39.996557Z","bundle_sha256":"baf814b683c8ce4193993bc042313fb716d04f728d462c619e63be4b677fe65c"}}