{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:AAS3TGS2IOZXPGMVOUELOMK53B","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2764a03930d705bee1313adaf18bc96a99c0d9159c2ccd8b77c5438b22d26bbb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-01T16:04:48Z","title_canon_sha256":"09894ee46a08000cce8facc61b77991b6997e3fc0f6b8fa06d22baa53c8ac203"},"schema_version":"1.0","source":{"id":"2302.00539","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.00539","created_at":"2026-07-05T06:03:27Z"},{"alias_kind":"arxiv_version","alias_value":"2302.00539v4","created_at":"2026-07-05T06:03:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.00539","created_at":"2026-07-05T06:03:27Z"},{"alias_kind":"pith_short_12","alias_value":"AAS3TGS2IOZX","created_at":"2026-07-05T06:03:27Z"},{"alias_kind":"pith_short_16","alias_value":"AAS3TGS2IOZXPGMV","created_at":"2026-07-05T06:03:27Z"},{"alias_kind":"pith_short_8","alias_value":"AAS3TGS2","created_at":"2026-07-05T06:03:27Z"}],"graph_snapshots":[{"event_id":"sha256:9c2ed1c849be2841fb35bedcf0345d9b82eda0c4b70713cf598840e319fb7c0e","target":"graph","created_at":"2026-07-05T06:03:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.00539/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Language Models (LMs) have been shown to leak information about training data through sentence-level membership inference and reconstruction attacks. Understanding the risk of LMs leaking Personally Identifiable Information (PII) has received less attention, which can be attributed to the false assumption that dataset curation techniques such as scrubbing are sufficient to prevent PII leakage. Scrubbing techniques reduce but do not prevent the risk of PII leakage: in practice scrubbing is imperfect and must balance the trade-off between minimizing disclosure and preserving the utility of the d","authors_text":"Ahmed Salem, Lukas Wutschitz, Nils Lukas, Robert Sim, Santiago Zanella-B\\'eguelin, Shruti Tople","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-01T16:04:48Z","title":"Analyzing Leakage of Personally Identifiable Information in Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.00539","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:26aa09532599afb8ac75b576c33d628bd54638fc5a64bbd2e8ae35a8f0869980","target":"record","created_at":"2026-07-05T06:03:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2764a03930d705bee1313adaf18bc96a99c0d9159c2ccd8b77c5438b22d26bbb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-01T16:04:48Z","title_canon_sha256":"09894ee46a08000cce8facc61b77991b6997e3fc0f6b8fa06d22baa53c8ac203"},"schema_version":"1.0","source":{"id":"2302.00539","kind":"arxiv","version":4}},"canonical_sha256":"0025b99a5a43b37799957508b7315dd87b8aa6bc63b359b586a03214f71099fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0025b99a5a43b37799957508b7315dd87b8aa6bc63b359b586a03214f71099fe","first_computed_at":"2026-07-05T06:03:27.515868Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:03:27.515868Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gbXvGLS5xmWBcEOC2ODRANp9wBr2Dx/hX/0JiRkk1wCdBO17swKpyzBXwVdkcUPKscZvfukTyuh7vAOoEAhGDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:03:27.516406Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.00539","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:26aa09532599afb8ac75b576c33d628bd54638fc5a64bbd2e8ae35a8f0869980","sha256:9c2ed1c849be2841fb35bedcf0345d9b82eda0c4b70713cf598840e319fb7c0e"],"state_sha256":"cecf44d3cd3362fbcf840c3882ac0c9e1a0d20859102f7678973add57f89c9b7"}