{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:FQSZTPOQSKHBKLVSKKCJQRDSRZ","short_pith_number":"pith:FQSZTPOQ","canonical_record":{"source":{"id":"2209.15259","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-30T06:36:49Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"38103be53633e392fc83757fef08ef5cf70d3920ea8f17aaaa6f778eeacf40ce","abstract_canon_sha256":"106f4fcf907b2457bb502eb971035a64240314e338dfb310e867a5484f5d6fe8"},"schema_version":"1.0"},"canonical_sha256":"2c2599bdd0928e152eb252849844728e755508469e56b0ec0551be51550b4c3e","source":{"kind":"arxiv","id":"2209.15259","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.15259","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"arxiv_version","alias_value":"2209.15259v2","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.15259","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"pith_short_12","alias_value":"FQSZTPOQSKHB","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"pith_short_16","alias_value":"FQSZTPOQSKHBKLVS","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"pith_short_8","alias_value":"FQSZTPOQ","created_at":"2026-07-05T06:08:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:FQSZTPOQSKHBKLVSKKCJQRDSRZ","target":"record","payload":{"canonical_record":{"source":{"id":"2209.15259","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-30T06:36:49Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"38103be53633e392fc83757fef08ef5cf70d3920ea8f17aaaa6f778eeacf40ce","abstract_canon_sha256":"106f4fcf907b2457bb502eb971035a64240314e338dfb310e867a5484f5d6fe8"},"schema_version":"1.0"},"canonical_sha256":"2c2599bdd0928e152eb252849844728e755508469e56b0ec0551be51550b4c3e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:08:09.739425Z","signature_b64":"buRf5M+oLyYTY7PIzIcR2+QZK9krJvCt+69E/1LYZmlDWrF98pJ3x1mOxo2Td8yujpUJbk21A6gZIgK9FsclDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2c2599bdd0928e152eb252849844728e755508469e56b0ec0551be51550b4c3e","last_reissued_at":"2026-07-05T06:08:09.738932Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:08:09.738932Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2209.15259","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:08:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"58jhTJOyiBFSoDGEzX2Te0UnrSM4PNRIxfkkipQ0nE7zDdDKTjMT44dUAyMJXzezVQ7Trg7bRpPniTkdTgqUCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T20:10:11.848578Z"},"content_sha256":"31d0a17a397c270692fcfb055126b77d89ff54436e477371ee75ead51f111c1c","schema_version":"1.0","event_id":"sha256:31d0a17a397c270692fcfb055126b77d89ff54436e477371ee75ead51f111c1c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:FQSZTPOQSKHBKLVSKKCJQRDSRZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Impossible Safety of Large AI Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"El-Mahdi El-Mhamdi, John Stephan, L\\^e-Nguy\\^en Hoang, Nirupam Gupta, Rachid Guerraoui, Rafael Pinot, Sadegh Farhadkhani, S\\'ebastien Rouault","submitted_at":"2022-09-30T06:36:49Z","abstract_excerpt":"Large AI Models (LAIMs), of which large language models are the most prominent recent example, showcase some impressive performance. However they have been empirically found to pose serious security issues. This paper systematizes our knowledge about the fundamental impossibility of building arbitrarily accurate and secure machine learning models. More precisely, we identify key challenging features of many of today's machine learning settings. Namely, high accuracy seems to require memorizing large training datasets, which are often user-generated and highly heterogeneous, with both sensitive"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.15259","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2209.15259/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:08:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xGv5ZE76p2+9M6kl5CksOOLm+h/ibir+gXCCtNTVM+BvVi8stss1Xby8MOfs3/guNa/Yg2g8PyfWU/4NfDCsCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T20:10:11.850330Z"},"content_sha256":"27353c90e92f7cb7876fc844c6793fae8846d84da0d7fd4d7e39d81f25f5baea","schema_version":"1.0","event_id":"sha256:27353c90e92f7cb7876fc844c6793fae8846d84da0d7fd4d7e39d81f25f5baea"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FQSZTPOQSKHBKLVSKKCJQRDSRZ/bundle.json","state_url":"https://pith.science/pith/FQSZTPOQSKHBKLVSKKCJQRDSRZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FQSZTPOQSKHBKLVSKKCJQRDSRZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T20:10:11Z","links":{"resolver":"https://pith.science/pith/FQSZTPOQSKHBKLVSKKCJQRDSRZ","bundle":"https://pith.science/pith/FQSZTPOQSKHBKLVSKKCJQRDSRZ/bundle.json","state":"https://pith.science/pith/FQSZTPOQSKHBKLVSKKCJQRDSRZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FQSZTPOQSKHBKLVSKKCJQRDSRZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:FQSZTPOQSKHBKLVSKKCJQRDSRZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"106f4fcf907b2457bb502eb971035a64240314e338dfb310e867a5484f5d6fe8","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-30T06:36:49Z","title_canon_sha256":"38103be53633e392fc83757fef08ef5cf70d3920ea8f17aaaa6f778eeacf40ce"},"schema_version":"1.0","source":{"id":"2209.15259","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.15259","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"arxiv_version","alias_value":"2209.15259v2","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.15259","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"pith_short_12","alias_value":"FQSZTPOQSKHB","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"pith_short_16","alias_value":"FQSZTPOQSKHBKLVS","created_at":"2026-07-05T06:08:09Z"},{"alias_kind":"pith_short_8","alias_value":"FQSZTPOQ","created_at":"2026-07-05T06:08:09Z"}],"graph_snapshots":[{"event_id":"sha256:27353c90e92f7cb7876fc844c6793fae8846d84da0d7fd4d7e39d81f25f5baea","target":"graph","created_at":"2026-07-05T06:08:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.15259/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large AI Models (LAIMs), of which large language models are the most prominent recent example, showcase some impressive performance. However they have been empirically found to pose serious security issues. This paper systematizes our knowledge about the fundamental impossibility of building arbitrarily accurate and secure machine learning models. More precisely, we identify key challenging features of many of today's machine learning settings. Namely, high accuracy seems to require memorizing large training datasets, which are often user-generated and highly heterogeneous, with both sensitive","authors_text":"El-Mahdi El-Mhamdi, John Stephan, L\\^e-Nguy\\^en Hoang, Nirupam Gupta, Rachid Guerraoui, Rafael Pinot, Sadegh Farhadkhani, S\\'ebastien Rouault","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-30T06:36:49Z","title":"On the Impossible Safety of Large AI Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.15259","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:31d0a17a397c270692fcfb055126b77d89ff54436e477371ee75ead51f111c1c","target":"record","created_at":"2026-07-05T06:08:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"106f4fcf907b2457bb502eb971035a64240314e338dfb310e867a5484f5d6fe8","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-30T06:36:49Z","title_canon_sha256":"38103be53633e392fc83757fef08ef5cf70d3920ea8f17aaaa6f778eeacf40ce"},"schema_version":"1.0","source":{"id":"2209.15259","kind":"arxiv","version":2}},"canonical_sha256":"2c2599bdd0928e152eb252849844728e755508469e56b0ec0551be51550b4c3e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2c2599bdd0928e152eb252849844728e755508469e56b0ec0551be51550b4c3e","first_computed_at":"2026-07-05T06:08:09.738932Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:08:09.738932Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"buRf5M+oLyYTY7PIzIcR2+QZK9krJvCt+69E/1LYZmlDWrF98pJ3x1mOxo2Td8yujpUJbk21A6gZIgK9FsclDg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:08:09.739425Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.15259","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:31d0a17a397c270692fcfb055126b77d89ff54436e477371ee75ead51f111c1c","sha256:27353c90e92f7cb7876fc844c6793fae8846d84da0d7fd4d7e39d81f25f5baea"],"state_sha256":"154a16641974888736578eb7f1842e9f07534337faa84bd4a284a8130f548e1f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mSfLGjZsOvGPujVuUh8KglHgIRrE8wEJoB5ffgCuIplbgIq7MkYzlZG1/vLRgueXiT4jvgJz5K/aRuApkyOpDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T20:10:11.855765Z","bundle_sha256":"5cde5b3ca2f5b01e7e3407214bb7c10ab706b4cfcf6e5e814f8573e42a63803e"}}