{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:F72OWLFIJMB2N3WTINQJI6ZPQN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f7b62f19cb1226175b48a902771a5f339177aa3ebaed98049ef824af3049a010","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-30T09:02:02Z","title_canon_sha256":"1e615b72d4926523de33536a7e37f32ee715763e5c154d5114490d7a90a26033"},"schema_version":"1.0","source":{"id":"2607.27886","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.27886","created_at":"2026-07-31T01:34:33Z"},{"alias_kind":"arxiv_version","alias_value":"2607.27886v1","created_at":"2026-07-31T01:34:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.27886","created_at":"2026-07-31T01:34:33Z"},{"alias_kind":"pith_short_12","alias_value":"F72OWLFIJMB2","created_at":"2026-07-31T01:34:33Z"},{"alias_kind":"pith_short_16","alias_value":"F72OWLFIJMB2N3WT","created_at":"2026-07-31T01:34:33Z"},{"alias_kind":"pith_short_8","alias_value":"F72OWLFI","created_at":"2026-07-31T01:34:33Z"}],"graph_snapshots":[{"event_id":"sha256:62007696b1707c12151ca849264ea87a988e2d0526afdb06cc86dbee33b9331e","target":"graph","created_at":"2026-07-31T01:34:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.27886/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Existing model inversion (MI) attacks predominantly rely on post-training optimization to recover private data from model outputs. However, these methods are fundamentally constrained by the target model's generalization bottleneck, often yielding generic features rather than specific identities, particularly on high-dimensional datasets. In this paper, we introduce GradLock, a novel training-time injection attack that stealthily injects sensitive training data directly into the model parameters. Operating within a compromised supply chain context, GradLock leverages stateless deterministic in","authors_text":"Chansu Han, Han-Ju Lee, Jin-Seong Kim, Seok-Hwan Choi, Seok-Won Hong, Takeshi Takahashi, Tomohiro Morikawa","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-30T09:02:02Z","title":"Don't Trust the AI Ecosystem: Analyzing Privacy Leakage in Compromised Open-Source Components"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.27886","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4aaccbc2658136dd87536b1a830e16f6a97e3c2dcaac31fb0e68ec0c229e448d","target":"record","created_at":"2026-07-31T01:34:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f7b62f19cb1226175b48a902771a5f339177aa3ebaed98049ef824af3049a010","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-30T09:02:02Z","title_canon_sha256":"1e615b72d4926523de33536a7e37f32ee715763e5c154d5114490d7a90a26033"},"schema_version":"1.0","source":{"id":"2607.27886","kind":"arxiv","version":1}},"canonical_sha256":"2ff4eb2ca84b03a6eed34360947b2f836b111651cbbdb4cdcc4550cf2feb4551","receipt":{"builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2ff4eb2ca84b03a6eed34360947b2f836b111651cbbdb4cdcc4550cf2feb4551","first_computed_at":"2026-07-31T01:34:33.921425Z","kind":"pith_receipt","last_reissued_at":"2026-07-31T01:34:33.921425Z","receipt_version":"0.3","signature_status":"unsigned_v0"},"source_id":"2607.27886","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4aaccbc2658136dd87536b1a830e16f6a97e3c2dcaac31fb0e68ec0c229e448d","sha256:62007696b1707c12151ca849264ea87a988e2d0526afdb06cc86dbee33b9331e"],"state_sha256":"4e93ead4b8b555ae926256b5b36f9fd3e714a1e1bbe98c27f1ca628d393b3266"}