{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7FSUTUEKZ5IPSLTBUCCIRDUWIA","short_pith_number":"pith:7FSUTUEK","canonical_record":{"source":{"id":"2402.12991","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-20T13:20:39Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"a5f44c4a967b3ee05b91a15719f083b43492e37fcc38c391354f10b5b9fc088a","abstract_canon_sha256":"843ec51e62c7d1e7444695018d864ac2dcc601aa6105e7986e3e90c67a61be3b"},"schema_version":"1.0"},"canonical_sha256":"f96549d08acf50f92e61a084888e96401b80849d995400ee8f7573822f571aed","source":{"kind":"arxiv","id":"2402.12991","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.12991","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"arxiv_version","alias_value":"2402.12991v2","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.12991","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"pith_short_12","alias_value":"7FSUTUEKZ5IP","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"pith_short_16","alias_value":"7FSUTUEKZ5IPSLTB","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"pith_short_8","alias_value":"7FSUTUEK","created_at":"2026-07-05T08:28:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7FSUTUEKZ5IPSLTBUCCIRDUWIA","target":"record","payload":{"canonical_record":{"source":{"id":"2402.12991","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-20T13:20:39Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"a5f44c4a967b3ee05b91a15719f083b43492e37fcc38c391354f10b5b9fc088a","abstract_canon_sha256":"843ec51e62c7d1e7444695018d864ac2dcc601aa6105e7986e3e90c67a61be3b"},"schema_version":"1.0"},"canonical_sha256":"f96549d08acf50f92e61a084888e96401b80849d995400ee8f7573822f571aed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:28:27.131331Z","signature_b64":"kFjY1Yo2Qkop6jpseC3uHczp93Ao/kiYt8GGan6f+pfSvT3vk/kmCY3Ku/Jdnzqmu+dQ6UzbO6ILZJp8ypuXCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f96549d08acf50f92e61a084888e96401b80849d995400ee8f7573822f571aed","last_reissued_at":"2026-07-05T08:28:27.130855Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:28:27.130855Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.12991","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:28:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w6ewbt0kdHw1wEv3JCCBUKxK5ZHzeRiHyNAIaCjHf7H2Y/t0EvkkaPvvPqm5vnOTsf9Ix3nzHFq0UE8ccPpmCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:15:19.161104Z"},"content_sha256":"653c42baf0e523f4c706950dbac8f8688360c3b9c6dc04b614bff3c748c66aba","schema_version":"1.0","event_id":"sha256:653c42baf0e523f4c706950dbac8f8688360c3b9c6dc04b614bff3c748c66aba"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7FSUTUEKZ5IPSLTBUCCIRDUWIA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Dennis Ulmer, Hwaran Lee, Martin Gubri, Sangdoo Yun, Seong Joon Oh","submitted_at":"2024-02-20T13:20:39Z","abstract_excerpt":"Large Language Model (LLM) services and models often come with legal rules on who can use them and how they must use them. Assessing the compliance of the released LLMs is crucial, as these rules protect the interests of the LLM contributor and prevent misuse. In this context, we describe the novel fingerprinting problem of Black-box Identity Verification (BBIV). The goal is to determine whether a third-party application uses a certain LLM through its chat function. We propose a method called Targeted Random Adversarial Prompt (TRAP) that identifies the specific LLM in use. We repurpose advers"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.12991","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.12991/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:28:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bN22xp84904JuE1+236BhEnaUlEE74qLjDty1EYS6ZYAyV5wCNjIikAjaA5gs6yN3iioFxhQYERC5YjKM3gsBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:15:19.161711Z"},"content_sha256":"ecbcf2338bf8804ca3e1a90fe1f4de48273238dbbed2568c5e474b90aacbcc03","schema_version":"1.0","event_id":"sha256:ecbcf2338bf8804ca3e1a90fe1f4de48273238dbbed2568c5e474b90aacbcc03"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7FSUTUEKZ5IPSLTBUCCIRDUWIA/bundle.json","state_url":"https://pith.science/pith/7FSUTUEKZ5IPSLTBUCCIRDUWIA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7FSUTUEKZ5IPSLTBUCCIRDUWIA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T15:15:19Z","links":{"resolver":"https://pith.science/pith/7FSUTUEKZ5IPSLTBUCCIRDUWIA","bundle":"https://pith.science/pith/7FSUTUEKZ5IPSLTBUCCIRDUWIA/bundle.json","state":"https://pith.science/pith/7FSUTUEKZ5IPSLTBUCCIRDUWIA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7FSUTUEKZ5IPSLTBUCCIRDUWIA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7FSUTUEKZ5IPSLTBUCCIRDUWIA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"843ec51e62c7d1e7444695018d864ac2dcc601aa6105e7986e3e90c67a61be3b","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-20T13:20:39Z","title_canon_sha256":"a5f44c4a967b3ee05b91a15719f083b43492e37fcc38c391354f10b5b9fc088a"},"schema_version":"1.0","source":{"id":"2402.12991","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.12991","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"arxiv_version","alias_value":"2402.12991v2","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.12991","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"pith_short_12","alias_value":"7FSUTUEKZ5IP","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"pith_short_16","alias_value":"7FSUTUEKZ5IPSLTB","created_at":"2026-07-05T08:28:27Z"},{"alias_kind":"pith_short_8","alias_value":"7FSUTUEK","created_at":"2026-07-05T08:28:27Z"}],"graph_snapshots":[{"event_id":"sha256:ecbcf2338bf8804ca3e1a90fe1f4de48273238dbbed2568c5e474b90aacbcc03","target":"graph","created_at":"2026-07-05T08:28:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.12991/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model (LLM) services and models often come with legal rules on who can use them and how they must use them. Assessing the compliance of the released LLMs is crucial, as these rules protect the interests of the LLM contributor and prevent misuse. In this context, we describe the novel fingerprinting problem of Black-box Identity Verification (BBIV). The goal is to determine whether a third-party application uses a certain LLM through its chat function. We propose a method called Targeted Random Adversarial Prompt (TRAP) that identifies the specific LLM in use. We repurpose advers","authors_text":"Dennis Ulmer, Hwaran Lee, Martin Gubri, Sangdoo Yun, Seong Joon Oh","cross_cats":["cs.AI","cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-20T13:20:39Z","title":"TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.12991","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:653c42baf0e523f4c706950dbac8f8688360c3b9c6dc04b614bff3c748c66aba","target":"record","created_at":"2026-07-05T08:28:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"843ec51e62c7d1e7444695018d864ac2dcc601aa6105e7986e3e90c67a61be3b","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-20T13:20:39Z","title_canon_sha256":"a5f44c4a967b3ee05b91a15719f083b43492e37fcc38c391354f10b5b9fc088a"},"schema_version":"1.0","source":{"id":"2402.12991","kind":"arxiv","version":2}},"canonical_sha256":"f96549d08acf50f92e61a084888e96401b80849d995400ee8f7573822f571aed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f96549d08acf50f92e61a084888e96401b80849d995400ee8f7573822f571aed","first_computed_at":"2026-07-05T08:28:27.130855Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:28:27.130855Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kFjY1Yo2Qkop6jpseC3uHczp93Ao/kiYt8GGan6f+pfSvT3vk/kmCY3Ku/Jdnzqmu+dQ6UzbO6ILZJp8ypuXCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:28:27.131331Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.12991","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:653c42baf0e523f4c706950dbac8f8688360c3b9c6dc04b614bff3c748c66aba","sha256:ecbcf2338bf8804ca3e1a90fe1f4de48273238dbbed2568c5e474b90aacbcc03"],"state_sha256":"714a14a8db84af4b33385103a7c392bf5d039b7c9c283854b46788171f6588da"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+JQ/5aO8El0+TS9umv9oOJosxzJ0dzDTNFWKpWdv9cIJ1f/LIVjg6KQ9rSt+G7tl8Eg5Ba+9o/YuEuMj8S+hCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T15:15:19.166248Z","bundle_sha256":"fcbc4ad87593942d8a91ad17b4660df7e3daf993887eb8e6592e92e74868c1b4"}}