{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CRY5QVLXFLQHAQO44BU65LNCA3","short_pith_number":"pith:CRY5QVLX","canonical_record":{"source":{"id":"2502.00306","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-01T04:01:18Z","cross_cats_sorted":["cs.AI","cs.CL","cs.IR","cs.LG"],"title_canon_sha256":"879fb8cc4d20d7095e7a4e5fe384c240342d9c12eea487903cb06abd0699ffd5","abstract_canon_sha256":"839ebffba45f57e8533779ceb6835d0b59f4ecd503dc44a5dcc3c3cbfed5ebd9"},"schema_version":"1.0"},"canonical_sha256":"1471d855772ae07041dce069eeada206f336bc4dec192be95bec1b0d688e01bb","source":{"kind":"arxiv","id":"2502.00306","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.00306","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"arxiv_version","alias_value":"2502.00306v2","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.00306","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"pith_short_12","alias_value":"CRY5QVLXFLQH","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"pith_short_16","alias_value":"CRY5QVLXFLQHAQO4","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"pith_short_8","alias_value":"CRY5QVLX","created_at":"2026-07-05T11:29:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CRY5QVLXFLQHAQO44BU65LNCA3","target":"record","payload":{"canonical_record":{"source":{"id":"2502.00306","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-01T04:01:18Z","cross_cats_sorted":["cs.AI","cs.CL","cs.IR","cs.LG"],"title_canon_sha256":"879fb8cc4d20d7095e7a4e5fe384c240342d9c12eea487903cb06abd0699ffd5","abstract_canon_sha256":"839ebffba45f57e8533779ceb6835d0b59f4ecd503dc44a5dcc3c3cbfed5ebd9"},"schema_version":"1.0"},"canonical_sha256":"1471d855772ae07041dce069eeada206f336bc4dec192be95bec1b0d688e01bb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:29:06.312917Z","signature_b64":"7xapDCqvKfk96br8/qU+qsVqZNhUdv10b8iORa8liNqk+//a3NmeCXjhLkogbgY+XD4ZSaiAVRtkdXX1MacGBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1471d855772ae07041dce069eeada206f336bc4dec192be95bec1b0d688e01bb","last_reissued_at":"2026-07-05T11:29:06.312210Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:29:06.312210Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.00306","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FO1jgWmHSONjzrG2R0LHcjYnYl1sZoq267JGiSQSalSFFLaTr1h4VC/fN9q5kECCmmOqWwsXHtEHBKtSauZPCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T02:04:00.259782Z"},"content_sha256":"f95c8d66450f00fba01871bbf446c83c6ee5562a4e75498148d2c58ac1c44fde","schema_version":"1.0","event_id":"sha256:f95c8d66450f00fba01871bbf446c83c6ee5562a4e75498148d2c58ac1c44fde"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CRY5QVLXFLQHAQO44BU65LNCA3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.IR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Alina Oprea, Ali Naseh, Amir Houmansadr, Anshuman Suri, Harsh Chaudhari, Yuefeng Peng","submitted_at":"2025-02-01T04:01:18Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) enables Large Language Models (LLMs) to generate grounded responses by leveraging external knowledge databases without altering model parameters. Although the absence of weight tuning prevents leakage via model parameters, it introduces the risk of inference adversaries exploiting retrieved documents in the model's context. Existing methods for membership inference and data extraction often rely on jailbreaking or carefully crafted unnatural queries, which can be easily detected or thwarted with query rewriting techniques common in RAG systems. In this work"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.00306","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.00306/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WjVzP2hfInjTn61YGTu9IlYjhvS+L862OzH7iIGFhIZEwqqr3imfT8D+hrdFv2CSwH7umapWwWmSNCf4Ri2FBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T02:04:00.260289Z"},"content_sha256":"95ed8c7fd47c1475a30c9981580b2d61e9b913dfbea20827cb374f321ab77059","schema_version":"1.0","event_id":"sha256:95ed8c7fd47c1475a30c9981580b2d61e9b913dfbea20827cb374f321ab77059"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CRY5QVLXFLQHAQO44BU65LNCA3/bundle.json","state_url":"https://pith.science/pith/CRY5QVLXFLQHAQO44BU65LNCA3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CRY5QVLXFLQHAQO44BU65LNCA3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T02:04:00Z","links":{"resolver":"https://pith.science/pith/CRY5QVLXFLQHAQO44BU65LNCA3","bundle":"https://pith.science/pith/CRY5QVLXFLQHAQO44BU65LNCA3/bundle.json","state":"https://pith.science/pith/CRY5QVLXFLQHAQO44BU65LNCA3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CRY5QVLXFLQHAQO44BU65LNCA3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CRY5QVLXFLQHAQO44BU65LNCA3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"839ebffba45f57e8533779ceb6835d0b59f4ecd503dc44a5dcc3c3cbfed5ebd9","cross_cats_sorted":["cs.AI","cs.CL","cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-01T04:01:18Z","title_canon_sha256":"879fb8cc4d20d7095e7a4e5fe384c240342d9c12eea487903cb06abd0699ffd5"},"schema_version":"1.0","source":{"id":"2502.00306","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.00306","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"arxiv_version","alias_value":"2502.00306v2","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.00306","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"pith_short_12","alias_value":"CRY5QVLXFLQH","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"pith_short_16","alias_value":"CRY5QVLXFLQHAQO4","created_at":"2026-07-05T11:29:06Z"},{"alias_kind":"pith_short_8","alias_value":"CRY5QVLX","created_at":"2026-07-05T11:29:06Z"}],"graph_snapshots":[{"event_id":"sha256:95ed8c7fd47c1475a30c9981580b2d61e9b913dfbea20827cb374f321ab77059","target":"graph","created_at":"2026-07-05T11:29:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.00306/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) enables Large Language Models (LLMs) to generate grounded responses by leveraging external knowledge databases without altering model parameters. Although the absence of weight tuning prevents leakage via model parameters, it introduces the risk of inference adversaries exploiting retrieved documents in the model's context. Existing methods for membership inference and data extraction often rely on jailbreaking or carefully crafted unnatural queries, which can be easily detected or thwarted with query rewriting techniques common in RAG systems. In this work","authors_text":"Alina Oprea, Ali Naseh, Amir Houmansadr, Anshuman Suri, Harsh Chaudhari, Yuefeng Peng","cross_cats":["cs.AI","cs.CL","cs.IR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-01T04:01:18Z","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.00306","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f95c8d66450f00fba01871bbf446c83c6ee5562a4e75498148d2c58ac1c44fde","target":"record","created_at":"2026-07-05T11:29:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"839ebffba45f57e8533779ceb6835d0b59f4ecd503dc44a5dcc3c3cbfed5ebd9","cross_cats_sorted":["cs.AI","cs.CL","cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-01T04:01:18Z","title_canon_sha256":"879fb8cc4d20d7095e7a4e5fe384c240342d9c12eea487903cb06abd0699ffd5"},"schema_version":"1.0","source":{"id":"2502.00306","kind":"arxiv","version":2}},"canonical_sha256":"1471d855772ae07041dce069eeada206f336bc4dec192be95bec1b0d688e01bb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1471d855772ae07041dce069eeada206f336bc4dec192be95bec1b0d688e01bb","first_computed_at":"2026-07-05T11:29:06.312210Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:29:06.312210Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7xapDCqvKfk96br8/qU+qsVqZNhUdv10b8iORa8liNqk+//a3NmeCXjhLkogbgY+XD4ZSaiAVRtkdXX1MacGBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:29:06.312917Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.00306","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f95c8d66450f00fba01871bbf446c83c6ee5562a4e75498148d2c58ac1c44fde","sha256:95ed8c7fd47c1475a30c9981580b2d61e9b913dfbea20827cb374f321ab77059"],"state_sha256":"92fbb810a9952ee775f4afcc61a3424d369b7c01e413d5146e82ce4133fcd698"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"leRCfEmGLkxxVRLGOEt8ceLWIcrr8ErMtP0ZRBCk4lVNbBoij0I6YQmkKQQHFj+O7eDfc3NQwb99QMKcZ+wWBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T02:04:00.265289Z","bundle_sha256":"43bdad723c9caf20542320a14bfa4b11221ae3e8edd2fe0a81a61901ac713628"}}