{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:FWWBM4VSB2VKKBSUDXCXEULMYJ","short_pith_number":"pith:FWWBM4VS","canonical_record":{"source":{"id":"2506.19889","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-24T07:28:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"27ad60e164ba9f8969928c927e59c856b22fdb782f68b3d2b7434cdf5832fc1c","abstract_canon_sha256":"f677457eb6c7cd7ad36d1582a680242b68528d7ddfef6593973eeca06502554b"},"schema_version":"1.0"},"canonical_sha256":"2dac1672b20eaaa506541dc572516cc27060e123ad552f3aa0ae9df0eccbe5ad","source":{"kind":"arxiv","id":"2506.19889","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.19889","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"arxiv_version","alias_value":"2506.19889v1","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.19889","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"pith_short_12","alias_value":"FWWBM4VSB2VK","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"pith_short_16","alias_value":"FWWBM4VSB2VKKBSU","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"pith_short_8","alias_value":"FWWBM4VS","created_at":"2026-07-05T11:26:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:FWWBM4VSB2VKKBSUDXCXEULMYJ","target":"record","payload":{"canonical_record":{"source":{"id":"2506.19889","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-24T07:28:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"27ad60e164ba9f8969928c927e59c856b22fdb782f68b3d2b7434cdf5832fc1c","abstract_canon_sha256":"f677457eb6c7cd7ad36d1582a680242b68528d7ddfef6593973eeca06502554b"},"schema_version":"1.0"},"canonical_sha256":"2dac1672b20eaaa506541dc572516cc27060e123ad552f3aa0ae9df0eccbe5ad","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:26:54.951856Z","signature_b64":"S1gFi76vr6qOR7o1dM/xXHLEsOAhOSg/9iooACkqxWvuB+rMknARHZzuSziuCA43RMZeOc+yXPxcJxdWSduqBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2dac1672b20eaaa506541dc572516cc27060e123ad552f3aa0ae9df0eccbe5ad","last_reissued_at":"2026-07-05T11:26:54.951466Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:26:54.951466Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.19889","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:26:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qHDh9VcBx8ErOlsxciTE4s0Pn5LLllqvpQGQ8mBYgi2F0fb4jQFdXk0U6ODdvyH/Q1UoIIdk87Wf/bpLCNiCAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:52:44.388068Z"},"content_sha256":"a16bccbd4a8a0486e7ba2000e47f377621fbae2e4c8ba2f7feeef8d03efdbfc8","schema_version":"1.0","event_id":"sha256:a16bccbd4a8a0486e7ba2000e47f377621fbae2e4c8ba2f7feeef8d03efdbfc8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:FWWBM4VSB2VKKBSUDXCXEULMYJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hang Fu, Juan Wen, Wanli Peng, Xin Chen, Xinyu He, Xue Yiming","submitted_at":"2025-06-24T07:28:29Z","abstract_excerpt":"Recent advances in large language models (LLMs) have made a profound impact on our society and also raised new security concerns. Particularly, due to the remarkable inference ability of LLMs, the privacy violation attack (PVA), revealed by Staab et al., introduces serious personal privacy issues. Existing defense methods mainly leverage LLMs to anonymize the input query, which requires costly inference time and cannot gain satisfactory defense performance. Moreover, directly rejecting the PVA query seems like an effective defense method, while the defense method is exposed, promoting the evol"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.19889","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.19889/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:26:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zm9ZB118TOHPcT1C6GlCJ5r3s85Ukkk66mzz5kmrKbhLzLYlpTD8vBPqp4frmJOl4tdWGXQpkO5ophwALsS3AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:52:44.388566Z"},"content_sha256":"ad67646df2b4eec2514b8803440710bf80490db1c79c830f0bdb63b2f52f231e","schema_version":"1.0","event_id":"sha256:ad67646df2b4eec2514b8803440710bf80490db1c79c830f0bdb63b2f52f231e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FWWBM4VSB2VKKBSUDXCXEULMYJ/bundle.json","state_url":"https://pith.science/pith/FWWBM4VSB2VKKBSUDXCXEULMYJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FWWBM4VSB2VKKBSUDXCXEULMYJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T04:52:44Z","links":{"resolver":"https://pith.science/pith/FWWBM4VSB2VKKBSUDXCXEULMYJ","bundle":"https://pith.science/pith/FWWBM4VSB2VKKBSUDXCXEULMYJ/bundle.json","state":"https://pith.science/pith/FWWBM4VSB2VKKBSUDXCXEULMYJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FWWBM4VSB2VKKBSUDXCXEULMYJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:FWWBM4VSB2VKKBSUDXCXEULMYJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f677457eb6c7cd7ad36d1582a680242b68528d7ddfef6593973eeca06502554b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-24T07:28:29Z","title_canon_sha256":"27ad60e164ba9f8969928c927e59c856b22fdb782f68b3d2b7434cdf5832fc1c"},"schema_version":"1.0","source":{"id":"2506.19889","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.19889","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"arxiv_version","alias_value":"2506.19889v1","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.19889","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"pith_short_12","alias_value":"FWWBM4VSB2VK","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"pith_short_16","alias_value":"FWWBM4VSB2VKKBSU","created_at":"2026-07-05T11:26:54Z"},{"alias_kind":"pith_short_8","alias_value":"FWWBM4VS","created_at":"2026-07-05T11:26:54Z"}],"graph_snapshots":[{"event_id":"sha256:ad67646df2b4eec2514b8803440710bf80490db1c79c830f0bdb63b2f52f231e","target":"graph","created_at":"2026-07-05T11:26:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.19889/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in large language models (LLMs) have made a profound impact on our society and also raised new security concerns. Particularly, due to the remarkable inference ability of LLMs, the privacy violation attack (PVA), revealed by Staab et al., introduces serious personal privacy issues. Existing defense methods mainly leverage LLMs to anonymize the input query, which requires costly inference time and cannot gain satisfactory defense performance. Moreover, directly rejecting the PVA query seems like an effective defense method, while the defense method is exposed, promoting the evol","authors_text":"Hang Fu, Juan Wen, Wanli Peng, Xin Chen, Xinyu He, Xue Yiming","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-24T07:28:29Z","title":"Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.19889","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a16bccbd4a8a0486e7ba2000e47f377621fbae2e4c8ba2f7feeef8d03efdbfc8","target":"record","created_at":"2026-07-05T11:26:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f677457eb6c7cd7ad36d1582a680242b68528d7ddfef6593973eeca06502554b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-24T07:28:29Z","title_canon_sha256":"27ad60e164ba9f8969928c927e59c856b22fdb782f68b3d2b7434cdf5832fc1c"},"schema_version":"1.0","source":{"id":"2506.19889","kind":"arxiv","version":1}},"canonical_sha256":"2dac1672b20eaaa506541dc572516cc27060e123ad552f3aa0ae9df0eccbe5ad","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2dac1672b20eaaa506541dc572516cc27060e123ad552f3aa0ae9df0eccbe5ad","first_computed_at":"2026-07-05T11:26:54.951466Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:26:54.951466Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S1gFi76vr6qOR7o1dM/xXHLEsOAhOSg/9iooACkqxWvuB+rMknARHZzuSziuCA43RMZeOc+yXPxcJxdWSduqBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:26:54.951856Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.19889","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a16bccbd4a8a0486e7ba2000e47f377621fbae2e4c8ba2f7feeef8d03efdbfc8","sha256:ad67646df2b4eec2514b8803440710bf80490db1c79c830f0bdb63b2f52f231e"],"state_sha256":"2e42bd0660c0d67964993589eac8f6908fa797167166f51bf95415177200fac5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vp81O0uLYxcQYfVv/UczzrFujCiEowL4A8Id0mqanPuGekS7mwiW/h3zzHxP88Scf0uSwsD6CnN8Ndku99N2CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T04:52:44.392244Z","bundle_sha256":"ed55eb4fa2ea99ee772e1c927c216123073a5e300bddebefa3ce85ebb6f3e87e"}}