{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:CPGL7K7W4O55I2SMUS2JENXASV","short_pith_number":"pith:CPGL7K7W","canonical_record":{"source":{"id":"2210.17546","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-31T17:57:55Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"ae7a770484e71c93fe89311e39d8bbef628e1efc109f847914433751f35372e6","abstract_canon_sha256":"03fc711715c0244f6ef3f815b228b49b49c74af0a688988ddae5381efd13f31e"},"schema_version":"1.0"},"canonical_sha256":"13ccbfabf6e3bbd46a4ca4b49236e09548fcec622c930d2e61b752488e412429","source":{"kind":"arxiv","id":"2210.17546","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.17546","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"arxiv_version","alias_value":"2210.17546v3","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.17546","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"pith_short_12","alias_value":"CPGL7K7W4O55","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"pith_short_16","alias_value":"CPGL7K7W4O55I2SM","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"pith_short_8","alias_value":"CPGL7K7W","created_at":"2026-07-05T06:49:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:CPGL7K7W4O55I2SMUS2JENXASV","target":"record","payload":{"canonical_record":{"source":{"id":"2210.17546","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-31T17:57:55Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"ae7a770484e71c93fe89311e39d8bbef628e1efc109f847914433751f35372e6","abstract_canon_sha256":"03fc711715c0244f6ef3f815b228b49b49c74af0a688988ddae5381efd13f31e"},"schema_version":"1.0"},"canonical_sha256":"13ccbfabf6e3bbd46a4ca4b49236e09548fcec622c930d2e61b752488e412429","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:49:17.175404Z","signature_b64":"G1VPwEtYw2eXtF6dJMseEPktPE+bFsC7EXBd9PBA6qLDMBHvbU41eiVo2R3fZKjNVomwPSxACf/xvOxM1WrnDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"13ccbfabf6e3bbd46a4ca4b49236e09548fcec622c930d2e61b752488e412429","last_reissued_at":"2026-07-05T06:49:17.174894Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:49:17.174894Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.17546","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:49:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tsg8pCu1PF0WZRgF9C+ZokLoL1vXn7cHdiCcPRetGL7GsOYypO8IY6uax9usRU7Tew9WaoSG+EzUawgFCdDrDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T02:03:03.329833Z"},"content_sha256":"dfea51f35ed6e2ab3bd320926a4a9c58f344e54d5b44426fe0741d332f1e7fe3","schema_version":"1.0","event_id":"sha256:dfea51f35ed6e2ab3bd320926a4a9c58f344e54d5b44426fe0741d332f1e7fe3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:CPGL7K7W4O55I2SMUS2JENXASV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.LG","authors_text":"Chiyuan Zhang, Christopher A. Choquette-Choo, Daphne Ippolito, Florian Tram\\`er, Katherine Lee, Matthew Jagielski, Milad Nasr, Nicholas Carlini","submitted_at":"2022-10-31T17:57:55Z","abstract_excerpt":"Studying data memorization in neural language models helps us understand the risks (e.g., to privacy or copyright) associated with models regurgitating training data and aids in the development of countermeasures. Many prior works -- and some recently deployed defenses -- focus on \"verbatim memorization\", defined as a model generation that exactly matches a substring from the training set. We argue that verbatim memorization definitions are too restrictive and fail to capture more subtle forms of memorization. Specifically, we design and implement an efficient defense that perfectly prevents a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.17546","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.17546/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:49:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lYDCTr/jasO9q3DSsKwPgiZFPxQidxRhIai8AEmjh1/zXKb2+UD7Di3g9K/H3fCPJVXCuPk8E13qguwAVRdkDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T02:03:03.330333Z"},"content_sha256":"6817fdcec87e56afda24f6256234fa988e4bd5767e42fbb2d51d6fb8125cd0c5","schema_version":"1.0","event_id":"sha256:6817fdcec87e56afda24f6256234fa988e4bd5767e42fbb2d51d6fb8125cd0c5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CPGL7K7W4O55I2SMUS2JENXASV/bundle.json","state_url":"https://pith.science/pith/CPGL7K7W4O55I2SMUS2JENXASV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CPGL7K7W4O55I2SMUS2JENXASV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T02:03:03Z","links":{"resolver":"https://pith.science/pith/CPGL7K7W4O55I2SMUS2JENXASV","bundle":"https://pith.science/pith/CPGL7K7W4O55I2SMUS2JENXASV/bundle.json","state":"https://pith.science/pith/CPGL7K7W4O55I2SMUS2JENXASV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CPGL7K7W4O55I2SMUS2JENXASV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:CPGL7K7W4O55I2SMUS2JENXASV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"03fc711715c0244f6ef3f815b228b49b49c74af0a688988ddae5381efd13f31e","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-31T17:57:55Z","title_canon_sha256":"ae7a770484e71c93fe89311e39d8bbef628e1efc109f847914433751f35372e6"},"schema_version":"1.0","source":{"id":"2210.17546","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.17546","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"arxiv_version","alias_value":"2210.17546v3","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.17546","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"pith_short_12","alias_value":"CPGL7K7W4O55","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"pith_short_16","alias_value":"CPGL7K7W4O55I2SM","created_at":"2026-07-05T06:49:17Z"},{"alias_kind":"pith_short_8","alias_value":"CPGL7K7W","created_at":"2026-07-05T06:49:17Z"}],"graph_snapshots":[{"event_id":"sha256:6817fdcec87e56afda24f6256234fa988e4bd5767e42fbb2d51d6fb8125cd0c5","target":"graph","created_at":"2026-07-05T06:49:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.17546/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Studying data memorization in neural language models helps us understand the risks (e.g., to privacy or copyright) associated with models regurgitating training data and aids in the development of countermeasures. Many prior works -- and some recently deployed defenses -- focus on \"verbatim memorization\", defined as a model generation that exactly matches a substring from the training set. We argue that verbatim memorization definitions are too restrictive and fail to capture more subtle forms of memorization. Specifically, we design and implement an efficient defense that perfectly prevents a","authors_text":"Chiyuan Zhang, Christopher A. Choquette-Choo, Daphne Ippolito, Florian Tram\\`er, Katherine Lee, Matthew Jagielski, Milad Nasr, Nicholas Carlini","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-31T17:57:55Z","title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.17546","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dfea51f35ed6e2ab3bd320926a4a9c58f344e54d5b44426fe0741d332f1e7fe3","target":"record","created_at":"2026-07-05T06:49:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"03fc711715c0244f6ef3f815b228b49b49c74af0a688988ddae5381efd13f31e","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-31T17:57:55Z","title_canon_sha256":"ae7a770484e71c93fe89311e39d8bbef628e1efc109f847914433751f35372e6"},"schema_version":"1.0","source":{"id":"2210.17546","kind":"arxiv","version":3}},"canonical_sha256":"13ccbfabf6e3bbd46a4ca4b49236e09548fcec622c930d2e61b752488e412429","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"13ccbfabf6e3bbd46a4ca4b49236e09548fcec622c930d2e61b752488e412429","first_computed_at":"2026-07-05T06:49:17.174894Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:49:17.174894Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"G1VPwEtYw2eXtF6dJMseEPktPE+bFsC7EXBd9PBA6qLDMBHvbU41eiVo2R3fZKjNVomwPSxACf/xvOxM1WrnDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:49:17.175404Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.17546","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dfea51f35ed6e2ab3bd320926a4a9c58f344e54d5b44426fe0741d332f1e7fe3","sha256:6817fdcec87e56afda24f6256234fa988e4bd5767e42fbb2d51d6fb8125cd0c5"],"state_sha256":"464b093d8ba8d3cb7b9596c9456190a89d780124a9366aa5fdcde4fef84fec6c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iOR+Fr6M6NOPvWTTvf/BpCZzyt+IFi1P8pnQF8qYuIaHy67HF3E93h4TtoOW7UT6UXl89IQkrpz5UGmkJQICCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T02:03:03.335371Z","bundle_sha256":"f70c72488b18ddce89719369a2463fa7c824ee211e4aca860ee5f1e228a2c86f"}}