{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6ZEHHRKQRGC7N2NNZHCGBCYHBS","short_pith_number":"pith:6ZEHHRKQ","canonical_record":{"source":{"id":"2305.03010","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-04T17:31:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b10432391cbcde4fcc6dbe84cbe06fd74067e2d187dde7781db08e19e90b4356","abstract_canon_sha256":"fbc21d55d1fe99d9c51825ec69504a15b01723fe256c26c764b5d136536cb01b"},"schema_version":"1.0"},"canonical_sha256":"f64873c5508985f6e9adc9c4608b070c89e08364506a62786f856bc306741966","source":{"kind":"arxiv","id":"2305.03010","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.03010","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"arxiv_version","alias_value":"2305.03010v1","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.03010","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"pith_short_12","alias_value":"6ZEHHRKQRGC7","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"pith_short_16","alias_value":"6ZEHHRKQRGC7N2NN","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"pith_short_8","alias_value":"6ZEHHRKQ","created_at":"2026-07-05T06:07:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6ZEHHRKQRGC7N2NNZHCGBCYHBS","target":"record","payload":{"canonical_record":{"source":{"id":"2305.03010","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-04T17:31:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b10432391cbcde4fcc6dbe84cbe06fd74067e2d187dde7781db08e19e90b4356","abstract_canon_sha256":"fbc21d55d1fe99d9c51825ec69504a15b01723fe256c26c764b5d136536cb01b"},"schema_version":"1.0"},"canonical_sha256":"f64873c5508985f6e9adc9c4608b070c89e08364506a62786f856bc306741966","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:07:07.268771Z","signature_b64":"UuPg6+9SFRziiU45bhihHhkS75N1HusccvsPOzMsHUdflbLrFAHGpNsrlIwMS52mZUPlVPYtqzuI2gIVnPW3DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f64873c5508985f6e9adc9c4608b070c89e08364506a62786f856bc306741966","last_reissued_at":"2026-07-05T06:07:07.268408Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:07:07.268408Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.03010","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:07:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kdCxD6QQQFwT+B2WpEaRzAb8ZmV7zHeoUxKLovZwtwky6L3MBe9EkJI7zU7lXSFZOYJfJGaeq6LF4vTT3OgFCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T15:43:46.456773Z"},"content_sha256":"0916799d9f1e34546c7ccca7586377871752aef5079767e5d6be4ba45232bf37","schema_version":"1.0","event_id":"sha256:0916799d9f1e34546c7ccca7586377871752aef5079767e5d6be4ba45232bf37"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6ZEHHRKQRGC7N2NNZHCGBCYHBS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CL","authors_text":"Haoran Li, Mingshi Xu, Yangqiu Song","submitted_at":"2023-05-04T17:31:41Z","abstract_excerpt":"Sentence-level representations are beneficial for various natural language processing tasks. It is commonly believed that vector representations can capture rich linguistic properties. Currently, large language models (LMs) achieve state-of-the-art performance on sentence embedding. However, some recent works suggest that vector representations from LMs can cause information leakage. In this work, we further investigate the information leakage issue and propose a generative embedding inversion attack (GEIA) that aims to reconstruct input sequences based only on their sentence embeddings. Given"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.03010","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.03010/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:07:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uIO0icHnA81UnF+5+kaNKWdcEBvdGjpG8ofACieO+GIcKogPTQkzAqVmm5oKLLpCRyDzjJkrEGwuF91IED1cAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T15:43:46.457280Z"},"content_sha256":"3161862840c9bdb25198fe1b1bdd86e0b3cedb8325f1cf3d506c9d6199c0b889","schema_version":"1.0","event_id":"sha256:3161862840c9bdb25198fe1b1bdd86e0b3cedb8325f1cf3d506c9d6199c0b889"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6ZEHHRKQRGC7N2NNZHCGBCYHBS/bundle.json","state_url":"https://pith.science/pith/6ZEHHRKQRGC7N2NNZHCGBCYHBS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6ZEHHRKQRGC7N2NNZHCGBCYHBS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T15:43:46Z","links":{"resolver":"https://pith.science/pith/6ZEHHRKQRGC7N2NNZHCGBCYHBS","bundle":"https://pith.science/pith/6ZEHHRKQRGC7N2NNZHCGBCYHBS/bundle.json","state":"https://pith.science/pith/6ZEHHRKQRGC7N2NNZHCGBCYHBS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6ZEHHRKQRGC7N2NNZHCGBCYHBS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6ZEHHRKQRGC7N2NNZHCGBCYHBS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fbc21d55d1fe99d9c51825ec69504a15b01723fe256c26c764b5d136536cb01b","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-04T17:31:41Z","title_canon_sha256":"b10432391cbcde4fcc6dbe84cbe06fd74067e2d187dde7781db08e19e90b4356"},"schema_version":"1.0","source":{"id":"2305.03010","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.03010","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"arxiv_version","alias_value":"2305.03010v1","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.03010","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"pith_short_12","alias_value":"6ZEHHRKQRGC7","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"pith_short_16","alias_value":"6ZEHHRKQRGC7N2NN","created_at":"2026-07-05T06:07:07Z"},{"alias_kind":"pith_short_8","alias_value":"6ZEHHRKQ","created_at":"2026-07-05T06:07:07Z"}],"graph_snapshots":[{"event_id":"sha256:3161862840c9bdb25198fe1b1bdd86e0b3cedb8325f1cf3d506c9d6199c0b889","target":"graph","created_at":"2026-07-05T06:07:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.03010/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Sentence-level representations are beneficial for various natural language processing tasks. It is commonly believed that vector representations can capture rich linguistic properties. Currently, large language models (LMs) achieve state-of-the-art performance on sentence embedding. However, some recent works suggest that vector representations from LMs can cause information leakage. In this work, we further investigate the information leakage issue and propose a generative embedding inversion attack (GEIA) that aims to reconstruct input sequences based only on their sentence embeddings. Given","authors_text":"Haoran Li, Mingshi Xu, Yangqiu Song","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-04T17:31:41Z","title":"Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.03010","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0916799d9f1e34546c7ccca7586377871752aef5079767e5d6be4ba45232bf37","target":"record","created_at":"2026-07-05T06:07:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fbc21d55d1fe99d9c51825ec69504a15b01723fe256c26c764b5d136536cb01b","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-04T17:31:41Z","title_canon_sha256":"b10432391cbcde4fcc6dbe84cbe06fd74067e2d187dde7781db08e19e90b4356"},"schema_version":"1.0","source":{"id":"2305.03010","kind":"arxiv","version":1}},"canonical_sha256":"f64873c5508985f6e9adc9c4608b070c89e08364506a62786f856bc306741966","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f64873c5508985f6e9adc9c4608b070c89e08364506a62786f856bc306741966","first_computed_at":"2026-07-05T06:07:07.268408Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:07:07.268408Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UuPg6+9SFRziiU45bhihHhkS75N1HusccvsPOzMsHUdflbLrFAHGpNsrlIwMS52mZUPlVPYtqzuI2gIVnPW3DA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:07:07.268771Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.03010","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0916799d9f1e34546c7ccca7586377871752aef5079767e5d6be4ba45232bf37","sha256:3161862840c9bdb25198fe1b1bdd86e0b3cedb8325f1cf3d506c9d6199c0b889"],"state_sha256":"76048d6e682b0528241fc6fbf0d56c652f38f09bdf77f12dc7cdb49776903120"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YFTBJs+RTc8bonMy63wu7O+ID+uatwSx9NxGmFq45QwLLuv6dvtpiVDwm5PpIo6nm+oZCXVBNUDCaHeKypilCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T15:43:46.460867Z","bundle_sha256":"8def1cb38db2ce984f22ba7b88d79060987fb7aa44128af1bf0ab5d4dab942c3"}}