{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:FD5OYM274JKJHVAW725W7CU4F5","short_pith_number":"pith:FD5OYM27","canonical_record":{"source":{"id":"2602.24210","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-27T17:39:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a0b65556c527059ed2afaaf9c62f8030a68add20310126d3dbdda7040f4867de","abstract_canon_sha256":"5c5356ea4cd716bdf8d58f8158e52be64742ce6f554047d42c00d499a576a355"},"schema_version":"1.0"},"canonical_sha256":"28faec335fe25493d416febb6f8a9c2f70ac8b893f4f14fc037f0e7164b7e894","source":{"kind":"arxiv","id":"2602.24210","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.24210","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"arxiv_version","alias_value":"2602.24210v2","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.24210","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"pith_short_12","alias_value":"FD5OYM274JKJ","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"pith_short_16","alias_value":"FD5OYM274JKJHVAW","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"pith_short_8","alias_value":"FD5OYM27","created_at":"2026-06-01T02:03:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:FD5OYM274JKJHVAW725W7CU4F5","target":"record","payload":{"canonical_record":{"source":{"id":"2602.24210","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-27T17:39:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a0b65556c527059ed2afaaf9c62f8030a68add20310126d3dbdda7040f4867de","abstract_canon_sha256":"5c5356ea4cd716bdf8d58f8158e52be64742ce6f554047d42c00d499a576a355"},"schema_version":"1.0"},"canonical_sha256":"28faec335fe25493d416febb6f8a9c2f70ac8b893f4f14fc037f0e7164b7e894","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-01T02:03:35.961889Z","signature_b64":"RuWu75bKAN2WgsnMEX88lszd1oDMvmMgGQsD5lQOHW+rz5LLSwk0RUeIz3thA/OfrXyQMTcdRFUN2Jk0/DWQAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"28faec335fe25493d416febb6f8a9c2f70ac8b893f4f14fc037f0e7164b7e894","last_reissued_at":"2026-06-01T02:03:35.961108Z","signature_status":"signed_v1","first_computed_at":"2026-06-01T02:03:35.961108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2602.24210","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-01T02:03:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V9UmsbPE5nxXoPw5jU9nG0IgAqxE3XObGcFUpasjiAqJ/ALxKYYyYYTrYelWJ9jlWwiLcJdGULY3CRLqWEVqDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T17:41:47.006345Z"},"content_sha256":"d1340cedaaf5a34b2bd1582e19d9c1cbaaaae1a2afaf6558b8a15f94209bf651","schema_version":"1.0","event_id":"sha256:d1340cedaaf5a34b2bd1582e19d9c1cbaaaae1a2afaf6558b8a15f94209bf651"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:FD5OYM274JKJHVAW725W7CU4F5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Leaky Thoughts to Private Reasoning: Controlling What LRMs Say to Themselves","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Haonan Li, Haritz Puerto, Iryna Gurevych, Timothy Baldwin, Xudong Han","submitted_at":"2026-02-27T17:39:10Z","abstract_excerpt":"Large reasoning models (LRMs) produce reasoning traces (RTs) that often contain sensitive information. These leaky thoughts are difficult to control and frequently violate explicit privacy directives. Because RTs can be exposed through prompt injection attacks, this becomes a direct privacy risk to the user. We approach this as a controllability problem: since privacy directives are themselves instructions, improving instruction-following (IF) within the RT provides a direct path to reducing privacy leaks. To this end, we introduce an SFT dataset that teaches models to follow general instructi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.24210","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2602.24210/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-01T02:03:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OJbYRoEsxc25oIG80JygfClG37zWTu7q28XCJSfvxfhFKmIDRyevsra2i3yKZjrMIpo4G8tthEQjvAIyGDWhAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T17:41:47.007599Z"},"content_sha256":"e4f22d156ccfc9e8effe7e3e0761adafca854e855ee094ea02e6afbd147bfac6","schema_version":"1.0","event_id":"sha256:e4f22d156ccfc9e8effe7e3e0761adafca854e855ee094ea02e6afbd147bfac6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FD5OYM274JKJHVAW725W7CU4F5/bundle.json","state_url":"https://pith.science/pith/FD5OYM274JKJHVAW725W7CU4F5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FD5OYM274JKJHVAW725W7CU4F5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T17:41:47Z","links":{"resolver":"https://pith.science/pith/FD5OYM274JKJHVAW725W7CU4F5","bundle":"https://pith.science/pith/FD5OYM274JKJHVAW725W7CU4F5/bundle.json","state":"https://pith.science/pith/FD5OYM274JKJHVAW725W7CU4F5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FD5OYM274JKJHVAW725W7CU4F5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:FD5OYM274JKJHVAW725W7CU4F5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c5356ea4cd716bdf8d58f8158e52be64742ce6f554047d42c00d499a576a355","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-27T17:39:10Z","title_canon_sha256":"a0b65556c527059ed2afaaf9c62f8030a68add20310126d3dbdda7040f4867de"},"schema_version":"1.0","source":{"id":"2602.24210","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.24210","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"arxiv_version","alias_value":"2602.24210v2","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.24210","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"pith_short_12","alias_value":"FD5OYM274JKJ","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"pith_short_16","alias_value":"FD5OYM274JKJHVAW","created_at":"2026-06-01T02:03:35Z"},{"alias_kind":"pith_short_8","alias_value":"FD5OYM27","created_at":"2026-06-01T02:03:35Z"}],"graph_snapshots":[{"event_id":"sha256:e4f22d156ccfc9e8effe7e3e0761adafca854e855ee094ea02e6afbd147bfac6","target":"graph","created_at":"2026-06-01T02:03:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2602.24210/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large reasoning models (LRMs) produce reasoning traces (RTs) that often contain sensitive information. These leaky thoughts are difficult to control and frequently violate explicit privacy directives. Because RTs can be exposed through prompt injection attacks, this becomes a direct privacy risk to the user. We approach this as a controllability problem: since privacy directives are themselves instructions, improving instruction-following (IF) within the RT provides a direct path to reducing privacy leaks. To this end, we introduce an SFT dataset that teaches models to follow general instructi","authors_text":"Haonan Li, Haritz Puerto, Iryna Gurevych, Timothy Baldwin, Xudong Han","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-27T17:39:10Z","title":"From Leaky Thoughts to Private Reasoning: Controlling What LRMs Say to Themselves"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.24210","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d1340cedaaf5a34b2bd1582e19d9c1cbaaaae1a2afaf6558b8a15f94209bf651","target":"record","created_at":"2026-06-01T02:03:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c5356ea4cd716bdf8d58f8158e52be64742ce6f554047d42c00d499a576a355","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-27T17:39:10Z","title_canon_sha256":"a0b65556c527059ed2afaaf9c62f8030a68add20310126d3dbdda7040f4867de"},"schema_version":"1.0","source":{"id":"2602.24210","kind":"arxiv","version":2}},"canonical_sha256":"28faec335fe25493d416febb6f8a9c2f70ac8b893f4f14fc037f0e7164b7e894","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"28faec335fe25493d416febb6f8a9c2f70ac8b893f4f14fc037f0e7164b7e894","first_computed_at":"2026-06-01T02:03:35.961108Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-01T02:03:35.961108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RuWu75bKAN2WgsnMEX88lszd1oDMvmMgGQsD5lQOHW+rz5LLSwk0RUeIz3thA/OfrXyQMTcdRFUN2Jk0/DWQAg==","signature_status":"signed_v1","signed_at":"2026-06-01T02:03:35.961889Z","signed_message":"canonical_sha256_bytes"},"source_id":"2602.24210","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d1340cedaaf5a34b2bd1582e19d9c1cbaaaae1a2afaf6558b8a15f94209bf651","sha256:e4f22d156ccfc9e8effe7e3e0761adafca854e855ee094ea02e6afbd147bfac6"],"state_sha256":"973626d0ba53e4e60ef229dca5fb69c2f7503be2a8df6bf29dadee2c707666b1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8tw3cvplb4UJHr56qaXSkbQs38bRs93oVaqjVcljKgR9axS98qQ7YDidXjKg/wJf7Yftex3NvYB6xYYx+RZkCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T17:41:47.014667Z","bundle_sha256":"b24a6212f2bf3f757d1d9072cb1fc25d7fa50a6eb0330ce31c66c4d508df9266"}}