{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DMY3LGA6LS3OB4OKZZNOW5L6QH","short_pith_number":"pith:DMY3LGA6","canonical_record":{"source":{"id":"2503.04332","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-06T11:30:32Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a44164d7f5fef1a6242e8998501822bf4e08ab081b636c3115508173828a7525","abstract_canon_sha256":"f07a12cade02089ae5f453fc4f91863d894229f062d595aa48d8e7ef4a72c260"},"schema_version":"1.0"},"canonical_sha256":"1b31b5981e5cb6e0f1cace5aeb757e81d375de3b2c1c5ab501820cf35e75e007","source":{"kind":"arxiv","id":"2503.04332","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.04332","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"arxiv_version","alias_value":"2503.04332v1","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.04332","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"pith_short_12","alias_value":"DMY3LGA6LS3O","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"pith_short_16","alias_value":"DMY3LGA6LS3OB4OK","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"pith_short_8","alias_value":"DMY3LGA6","created_at":"2026-07-05T10:25:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DMY3LGA6LS3OB4OKZZNOW5L6QH","target":"record","payload":{"canonical_record":{"source":{"id":"2503.04332","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-06T11:30:32Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a44164d7f5fef1a6242e8998501822bf4e08ab081b636c3115508173828a7525","abstract_canon_sha256":"f07a12cade02089ae5f453fc4f91863d894229f062d595aa48d8e7ef4a72c260"},"schema_version":"1.0"},"canonical_sha256":"1b31b5981e5cb6e0f1cace5aeb757e81d375de3b2c1c5ab501820cf35e75e007","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:25:36.033527Z","signature_b64":"ZiUiyHVVWIaC8LIRyNMAyS8IfU7x+wl66p7VItoD5D6x3E3Oxb89HqMbf3DWgUc+V3UWjwHJ/Ivt9JVtOO6qBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1b31b5981e5cb6e0f1cace5aeb757e81d375de3b2c1c5ab501820cf35e75e007","last_reissued_at":"2026-07-05T10:25:36.032895Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:25:36.032895Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.04332","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:25:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZQEpHbQkag57+FjD/rCwjMLDjS0CMLEzjs27Og6vs4SpXhGStwYDXVJLGtvxe5uNf56rnTM0MDjiqq7askTPDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:45:58.661336Z"},"content_sha256":"812e9ae224422ec179d0c226fba8f4fea0c559b9ac29c8d221679280b7addd8e","schema_version":"1.0","event_id":"sha256:812e9ae224422ec179d0c226fba8f4fea0c559b9ac29c8d221679280b7addd8e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DMY3LGA6LS3OB4OKZZNOW5L6QH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Challenge of Identifying the Origin of Black-Box Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Michael Backes, Wei Dai, Yang Zhang, Yixin Wu, Yun Shen, Ziqing Yang","submitted_at":"2025-03-06T11:30:32Z","abstract_excerpt":"The tremendous commercial potential of large language models (LLMs) has heightened concerns about their unauthorized use. Third parties can customize LLMs through fine-tuning and offer only black-box API access, effectively concealing unauthorized usage and complicating external auditing processes. This practice not only exacerbates unfair competition, but also violates licensing agreements. In response, identifying the origin of black-box LLMs is an intrinsic solution to this issue. In this paper, we first reveal the limitations of state-of-the-art passive and proactive identification methods"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.04332","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.04332/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:25:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Rue3Gvt/GrCVzE2ccdbvG345EwqTqsatnWzjA/MQKcHBkY20jaWIVqEzvcSsfULu5rqLNDGeUECJ7Q1jsbRyBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:45:58.662323Z"},"content_sha256":"62dcd08e01fc655db6a4c3422efecdb7f3dc993c90dbedd558a35d5a45935cc1","schema_version":"1.0","event_id":"sha256:62dcd08e01fc655db6a4c3422efecdb7f3dc993c90dbedd558a35d5a45935cc1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DMY3LGA6LS3OB4OKZZNOW5L6QH/bundle.json","state_url":"https://pith.science/pith/DMY3LGA6LS3OB4OKZZNOW5L6QH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DMY3LGA6LS3OB4OKZZNOW5L6QH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:45:58Z","links":{"resolver":"https://pith.science/pith/DMY3LGA6LS3OB4OKZZNOW5L6QH","bundle":"https://pith.science/pith/DMY3LGA6LS3OB4OKZZNOW5L6QH/bundle.json","state":"https://pith.science/pith/DMY3LGA6LS3OB4OKZZNOW5L6QH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DMY3LGA6LS3OB4OKZZNOW5L6QH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DMY3LGA6LS3OB4OKZZNOW5L6QH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f07a12cade02089ae5f453fc4f91863d894229f062d595aa48d8e7ef4a72c260","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-06T11:30:32Z","title_canon_sha256":"a44164d7f5fef1a6242e8998501822bf4e08ab081b636c3115508173828a7525"},"schema_version":"1.0","source":{"id":"2503.04332","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.04332","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"arxiv_version","alias_value":"2503.04332v1","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.04332","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"pith_short_12","alias_value":"DMY3LGA6LS3O","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"pith_short_16","alias_value":"DMY3LGA6LS3OB4OK","created_at":"2026-07-05T10:25:36Z"},{"alias_kind":"pith_short_8","alias_value":"DMY3LGA6","created_at":"2026-07-05T10:25:36Z"}],"graph_snapshots":[{"event_id":"sha256:62dcd08e01fc655db6a4c3422efecdb7f3dc993c90dbedd558a35d5a45935cc1","target":"graph","created_at":"2026-07-05T10:25:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.04332/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The tremendous commercial potential of large language models (LLMs) has heightened concerns about their unauthorized use. Third parties can customize LLMs through fine-tuning and offer only black-box API access, effectively concealing unauthorized usage and complicating external auditing processes. This practice not only exacerbates unfair competition, but also violates licensing agreements. In response, identifying the origin of black-box LLMs is an intrinsic solution to this issue. In this paper, we first reveal the limitations of state-of-the-art passive and proactive identification methods","authors_text":"Michael Backes, Wei Dai, Yang Zhang, Yixin Wu, Yun Shen, Ziqing Yang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-06T11:30:32Z","title":"The Challenge of Identifying the Origin of Black-Box Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.04332","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:812e9ae224422ec179d0c226fba8f4fea0c559b9ac29c8d221679280b7addd8e","target":"record","created_at":"2026-07-05T10:25:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f07a12cade02089ae5f453fc4f91863d894229f062d595aa48d8e7ef4a72c260","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-06T11:30:32Z","title_canon_sha256":"a44164d7f5fef1a6242e8998501822bf4e08ab081b636c3115508173828a7525"},"schema_version":"1.0","source":{"id":"2503.04332","kind":"arxiv","version":1}},"canonical_sha256":"1b31b5981e5cb6e0f1cace5aeb757e81d375de3b2c1c5ab501820cf35e75e007","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1b31b5981e5cb6e0f1cace5aeb757e81d375de3b2c1c5ab501820cf35e75e007","first_computed_at":"2026-07-05T10:25:36.032895Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:25:36.032895Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZiUiyHVVWIaC8LIRyNMAyS8IfU7x+wl66p7VItoD5D6x3E3Oxb89HqMbf3DWgUc+V3UWjwHJ/Ivt9JVtOO6qBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:25:36.033527Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.04332","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:812e9ae224422ec179d0c226fba8f4fea0c559b9ac29c8d221679280b7addd8e","sha256:62dcd08e01fc655db6a4c3422efecdb7f3dc993c90dbedd558a35d5a45935cc1"],"state_sha256":"1c60f66f0f5c82ce0701b208f2df16345023e770cfe27dea2b3fc500d59852cc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/eD8zelvOTtaK8JV8XYWiFt3oe6CSoeoY04q0sdGAtUNZY1pvzxEBteCR+NFE2KB3a2JCZ+rfqC2Ex7yBej5CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:45:58.669688Z","bundle_sha256":"f619b248cdf5c930cd452be4b68b06647306ee28fe4c71b985fbb4100426d0d5"}}