{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CJFL2NQ5LRWLIXYJKNLG3X6OTT","short_pith_number":"pith:CJFL2NQ5","canonical_record":{"source":{"id":"2502.09974","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-14T08:00:42Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"dbb55307cef7db02a6239ff80f2f328a6d8ce09023ac0d19d28da84136e0d8b2","abstract_canon_sha256":"14f84e2852732fadf96e116210cbb6f19849794046f6685039bfe2600fba7ca4"},"schema_version":"1.0"},"canonical_sha256":"124abd361d5c6cb45f0953566ddfce9ccd08fa1a62e4b4adc57cfbcd097a4380","source":{"kind":"arxiv","id":"2502.09974","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.09974","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"arxiv_version","alias_value":"2502.09974v1","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.09974","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"pith_short_12","alias_value":"CJFL2NQ5LRWL","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"pith_short_16","alias_value":"CJFL2NQ5LRWLIXYJ","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"pith_short_8","alias_value":"CJFL2NQ5","created_at":"2026-07-05T10:14:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CJFL2NQ5LRWLIXYJKNLG3X6OTT","target":"record","payload":{"canonical_record":{"source":{"id":"2502.09974","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-14T08:00:42Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"dbb55307cef7db02a6239ff80f2f328a6d8ce09023ac0d19d28da84136e0d8b2","abstract_canon_sha256":"14f84e2852732fadf96e116210cbb6f19849794046f6685039bfe2600fba7ca4"},"schema_version":"1.0"},"canonical_sha256":"124abd361d5c6cb45f0953566ddfce9ccd08fa1a62e4b4adc57cfbcd097a4380","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:14:15.473649Z","signature_b64":"CErXBjP2yrblJpuEGctvtGpMZslUFI2PbMqJE2SKleTnKW8vgr4DPUySLzw2i57DTp5pAmEKIWRrQa8ZXNLfAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"124abd361d5c6cb45f0953566ddfce9ccd08fa1a62e4b4adc57cfbcd097a4380","last_reissued_at":"2026-07-05T10:14:15.473244Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:14:15.473244Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.09974","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"93cWQ273kUniue+X6Wj1DdPqkxzjlm7m0MpuKbJTP3Y6ZRmczc3RpMXhvwLQOgXHATyhjKK4Uhd78+RbeRXpBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T12:19:19.543248Z"},"content_sha256":"75951ce1d591affd513b5630dcd501201d50e7f8fb7d5368b6667963aeec0089","schema_version":"1.0","event_id":"sha256:75951ce1d591affd513b5630dcd501201d50e7f8fb7d5368b6667963aeec0089"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CJFL2NQ5LRWLIXYJKNLG3X6OTT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.AI","authors_text":"Abhimanyu Hans, Avi Schwarzschild, Roman Levin, Tom Goldstein, Valeriia Cherepanova","submitted_at":"2025-02-14T08:00:42Z","abstract_excerpt":"Prompt engineering has emerged as a powerful technique for optimizing large language models (LLMs) for specific applications, enabling faster prototyping and improved performance, and giving rise to the interest of the community in protecting proprietary system prompts. In this work, we explore a novel perspective on prompt privacy through the lens of membership inference. We develop Prompt Detective, a statistical method to reliably determine whether a given system prompt was used by a third-party language model. Our approach relies on a statistical test comparing the distributions of two gro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.09974","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.09974/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H1etJ0pGN/UtXzTiMWBWDK1oNG3Omthts2hjIRU6QUr9ClnbEn5FFk4lhaFOFfAiDA9iXUrVngWztvx1hJg8Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T12:19:19.543636Z"},"content_sha256":"98a3f53299d4ca2d2c84ca512ad45ebb93b284dd943a90cdabc8a12e8f292300","schema_version":"1.0","event_id":"sha256:98a3f53299d4ca2d2c84ca512ad45ebb93b284dd943a90cdabc8a12e8f292300"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CJFL2NQ5LRWLIXYJKNLG3X6OTT/bundle.json","state_url":"https://pith.science/pith/CJFL2NQ5LRWLIXYJKNLG3X6OTT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CJFL2NQ5LRWLIXYJKNLG3X6OTT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-24T12:19:19Z","links":{"resolver":"https://pith.science/pith/CJFL2NQ5LRWLIXYJKNLG3X6OTT","bundle":"https://pith.science/pith/CJFL2NQ5LRWLIXYJKNLG3X6OTT/bundle.json","state":"https://pith.science/pith/CJFL2NQ5LRWLIXYJKNLG3X6OTT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CJFL2NQ5LRWLIXYJKNLG3X6OTT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CJFL2NQ5LRWLIXYJKNLG3X6OTT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"14f84e2852732fadf96e116210cbb6f19849794046f6685039bfe2600fba7ca4","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-14T08:00:42Z","title_canon_sha256":"dbb55307cef7db02a6239ff80f2f328a6d8ce09023ac0d19d28da84136e0d8b2"},"schema_version":"1.0","source":{"id":"2502.09974","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.09974","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"arxiv_version","alias_value":"2502.09974v1","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.09974","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"pith_short_12","alias_value":"CJFL2NQ5LRWL","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"pith_short_16","alias_value":"CJFL2NQ5LRWLIXYJ","created_at":"2026-07-05T10:14:15Z"},{"alias_kind":"pith_short_8","alias_value":"CJFL2NQ5","created_at":"2026-07-05T10:14:15Z"}],"graph_snapshots":[{"event_id":"sha256:98a3f53299d4ca2d2c84ca512ad45ebb93b284dd943a90cdabc8a12e8f292300","target":"graph","created_at":"2026-07-05T10:14:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.09974/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Prompt engineering has emerged as a powerful technique for optimizing large language models (LLMs) for specific applications, enabling faster prototyping and improved performance, and giving rise to the interest of the community in protecting proprietary system prompts. In this work, we explore a novel perspective on prompt privacy through the lens of membership inference. We develop Prompt Detective, a statistical method to reliably determine whether a given system prompt was used by a third-party language model. Our approach relies on a statistical test comparing the distributions of two gro","authors_text":"Abhimanyu Hans, Avi Schwarzschild, Roman Levin, Tom Goldstein, Valeriia Cherepanova","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-14T08:00:42Z","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.09974","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:75951ce1d591affd513b5630dcd501201d50e7f8fb7d5368b6667963aeec0089","target":"record","created_at":"2026-07-05T10:14:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"14f84e2852732fadf96e116210cbb6f19849794046f6685039bfe2600fba7ca4","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-14T08:00:42Z","title_canon_sha256":"dbb55307cef7db02a6239ff80f2f328a6d8ce09023ac0d19d28da84136e0d8b2"},"schema_version":"1.0","source":{"id":"2502.09974","kind":"arxiv","version":1}},"canonical_sha256":"124abd361d5c6cb45f0953566ddfce9ccd08fa1a62e4b4adc57cfbcd097a4380","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"124abd361d5c6cb45f0953566ddfce9ccd08fa1a62e4b4adc57cfbcd097a4380","first_computed_at":"2026-07-05T10:14:15.473244Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:14:15.473244Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CErXBjP2yrblJpuEGctvtGpMZslUFI2PbMqJE2SKleTnKW8vgr4DPUySLzw2i57DTp5pAmEKIWRrQa8ZXNLfAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:14:15.473649Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.09974","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:75951ce1d591affd513b5630dcd501201d50e7f8fb7d5368b6667963aeec0089","sha256:98a3f53299d4ca2d2c84ca512ad45ebb93b284dd943a90cdabc8a12e8f292300"],"state_sha256":"6070afe75bec73f46197417725ebf03e68099e63732720a453b9e99f4e77043a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0bs5ek0iix1XA/7pr5GAFLWT5Z6M1koYTDrbYUKti67MfbZgeWRKXCe1SIVdycB6U6NjdRGol1gvOXYCV5HwDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-24T12:19:19.545707Z","bundle_sha256":"efc179d68dbe177e5b2a535ffb055d86c208290ce85cb6866d0002debfd135bb"}}