{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BWD6XBL2Z32SX2D7J2BKRQPALW","short_pith_number":"pith:BWD6XBL2","canonical_record":{"source":{"id":"2312.04828","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-12-08T05:01:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7cef1b0c20ba801b87d8adcd24735528c41fc467e45882e50de7bddaa875b980","abstract_canon_sha256":"482ca64658503bd884bd9908a51a87724dfb5a3467e7db543270c2bce6a91e8b"},"schema_version":"1.0"},"canonical_sha256":"0d87eb857acef52be87f4e82a8c1e05dac20f014de8969501a18621e109e16a7","source":{"kind":"arxiv","id":"2312.04828","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04828","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04828v5","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04828","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"pith_short_12","alias_value":"BWD6XBL2Z32S","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"pith_short_16","alias_value":"BWD6XBL2Z32SX2D7","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"pith_short_8","alias_value":"BWD6XBL2","created_at":"2026-07-05T09:57:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BWD6XBL2Z32SX2D7J2BKRQPALW","target":"record","payload":{"canonical_record":{"source":{"id":"2312.04828","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-12-08T05:01:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7cef1b0c20ba801b87d8adcd24735528c41fc467e45882e50de7bddaa875b980","abstract_canon_sha256":"482ca64658503bd884bd9908a51a87724dfb5a3467e7db543270c2bce6a91e8b"},"schema_version":"1.0"},"canonical_sha256":"0d87eb857acef52be87f4e82a8c1e05dac20f014de8969501a18621e109e16a7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:57:38.723248Z","signature_b64":"JQEjmWHo/glvs6XMLltJ2AKBm5Nr/B8kN/1912VYN8HaRDmdMTG51YqYOWgat2trtZ8oNmu957eM3aaMtF2oBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0d87eb857acef52be87f4e82a8c1e05dac20f014de8969501a18621e109e16a7","last_reissued_at":"2026-07-05T09:57:38.722777Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:57:38.722777Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.04828","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e2CByXB33s6G2nrK99jL1MY43CWqab5/F43xo9QLpMbLNxGb1DCRFnI1B3K1Tc47vgknqS0M95ZiG1wzNGIcBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T12:56:53.686727Z"},"content_sha256":"ed7bf1c41a422133caea5ec87a532d6771931f1d52ef96e819d5df90c9c4df8b","schema_version":"1.0","event_id":"sha256:ed7bf1c41a422133caea5ec87a532d6771931f1d52ef96e819d5df90c9c4df8b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BWD6XBL2Z32SX2D7J2BKRQPALW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"HuRef: HUman-REadable Fingerprint for Large Language Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Boyi Zeng, Chenghu Zhou, Lizheng Wang, Xinbing Wang, Yi Xu, Yuncong Hu, Yu Yu, Zhouhan Lin","submitted_at":"2023-12-08T05:01:47Z","abstract_excerpt":"Protecting the copyright of large language models (LLMs) has become crucial due to their resource-intensive training and accompanying carefully designed licenses. However, identifying the original base model of an LLM is challenging due to potential parameter alterations. In this study, we introduce HuRef, a human-readable fingerprint for LLMs that uniquely identifies the base model without interfering with training or exposing model parameters to the public. We first observe that the vector direction of LLM parameters remains stable after the model has converged during pretraining, with negli"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04828","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.04828/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HkiQSS6cNr/6R59PD0gtR3K5a2k5+GoDVPV4foaIfGPsYuNjwomXxp1PCXITf8O9eIQHV/udK+u7b350dzIkDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T12:56:53.687202Z"},"content_sha256":"31b747efabe1ebb801f91a0bb734c86f19ea9861cab1e0750e4647c1931c3f6b","schema_version":"1.0","event_id":"sha256:31b747efabe1ebb801f91a0bb734c86f19ea9861cab1e0750e4647c1931c3f6b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BWD6XBL2Z32SX2D7J2BKRQPALW/bundle.json","state_url":"https://pith.science/pith/BWD6XBL2Z32SX2D7J2BKRQPALW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BWD6XBL2Z32SX2D7J2BKRQPALW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T12:56:53Z","links":{"resolver":"https://pith.science/pith/BWD6XBL2Z32SX2D7J2BKRQPALW","bundle":"https://pith.science/pith/BWD6XBL2Z32SX2D7J2BKRQPALW/bundle.json","state":"https://pith.science/pith/BWD6XBL2Z32SX2D7J2BKRQPALW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BWD6XBL2Z32SX2D7J2BKRQPALW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BWD6XBL2Z32SX2D7J2BKRQPALW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"482ca64658503bd884bd9908a51a87724dfb5a3467e7db543270c2bce6a91e8b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-12-08T05:01:47Z","title_canon_sha256":"7cef1b0c20ba801b87d8adcd24735528c41fc467e45882e50de7bddaa875b980"},"schema_version":"1.0","source":{"id":"2312.04828","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04828","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04828v5","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04828","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"pith_short_12","alias_value":"BWD6XBL2Z32S","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"pith_short_16","alias_value":"BWD6XBL2Z32SX2D7","created_at":"2026-07-05T09:57:38Z"},{"alias_kind":"pith_short_8","alias_value":"BWD6XBL2","created_at":"2026-07-05T09:57:38Z"}],"graph_snapshots":[{"event_id":"sha256:31b747efabe1ebb801f91a0bb734c86f19ea9861cab1e0750e4647c1931c3f6b","target":"graph","created_at":"2026-07-05T09:57:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.04828/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Protecting the copyright of large language models (LLMs) has become crucial due to their resource-intensive training and accompanying carefully designed licenses. However, identifying the original base model of an LLM is challenging due to potential parameter alterations. In this study, we introduce HuRef, a human-readable fingerprint for LLMs that uniquely identifies the base model without interfering with training or exposing model parameters to the public. We first observe that the vector direction of LLM parameters remains stable after the model has converged during pretraining, with negli","authors_text":"Boyi Zeng, Chenghu Zhou, Lizheng Wang, Xinbing Wang, Yi Xu, Yuncong Hu, Yu Yu, Zhouhan Lin","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-12-08T05:01:47Z","title":"HuRef: HUman-REadable Fingerprint for Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04828","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ed7bf1c41a422133caea5ec87a532d6771931f1d52ef96e819d5df90c9c4df8b","target":"record","created_at":"2026-07-05T09:57:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"482ca64658503bd884bd9908a51a87724dfb5a3467e7db543270c2bce6a91e8b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-12-08T05:01:47Z","title_canon_sha256":"7cef1b0c20ba801b87d8adcd24735528c41fc467e45882e50de7bddaa875b980"},"schema_version":"1.0","source":{"id":"2312.04828","kind":"arxiv","version":5}},"canonical_sha256":"0d87eb857acef52be87f4e82a8c1e05dac20f014de8969501a18621e109e16a7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0d87eb857acef52be87f4e82a8c1e05dac20f014de8969501a18621e109e16a7","first_computed_at":"2026-07-05T09:57:38.722777Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:57:38.722777Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JQEjmWHo/glvs6XMLltJ2AKBm5Nr/B8kN/1912VYN8HaRDmdMTG51YqYOWgat2trtZ8oNmu957eM3aaMtF2oBw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:57:38.723248Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.04828","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ed7bf1c41a422133caea5ec87a532d6771931f1d52ef96e819d5df90c9c4df8b","sha256:31b747efabe1ebb801f91a0bb734c86f19ea9861cab1e0750e4647c1931c3f6b"],"state_sha256":"1327f76f591bed1bba3f3c058837c13a10d2c878bb5c1e7c840896ad5fb684a0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EUiqCyhUFR7udbVRuxH33rYgL1XCK/rXEJ9WXC0ZEKrRZAZ8Z0N8GsWz21o+w2P4YxCgPj1tJEh9VhDfnC+ACw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T12:56:53.691202Z","bundle_sha256":"c1013af65d39086590a5a8b5de22983118c9225d343a9394520c2564eae8278e"}}