{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:H6W32OSGRDXB7BJEXHKX6YQYTB","short_pith_number":"pith:H6W32OSG","canonical_record":{"source":{"id":"2401.12255","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-21T09:51:45Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"c35f2ea404315fb5770298ce338b4dcbb88ccb113595f3fb3631e0b7abd4a316","abstract_canon_sha256":"7823f907c6bf19798135638e3f6f3ffaf2e56f4ce8d54818759a05293d957e76"},"schema_version":"1.0"},"canonical_sha256":"3fadbd3a4688ee1f8524b9d57f6218985be1e7b063e831c498b4ffb0919297a2","source":{"kind":"arxiv","id":"2401.12255","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.12255","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"arxiv_version","alias_value":"2401.12255v2","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.12255","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"pith_short_12","alias_value":"H6W32OSGRDXB","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"pith_short_16","alias_value":"H6W32OSGRDXB7BJE","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"pith_short_8","alias_value":"H6W32OSG","created_at":"2026-07-05T08:03:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:H6W32OSGRDXB7BJEXHKX6YQYTB","target":"record","payload":{"canonical_record":{"source":{"id":"2401.12255","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-21T09:51:45Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"c35f2ea404315fb5770298ce338b4dcbb88ccb113595f3fb3631e0b7abd4a316","abstract_canon_sha256":"7823f907c6bf19798135638e3f6f3ffaf2e56f4ce8d54818759a05293d957e76"},"schema_version":"1.0"},"canonical_sha256":"3fadbd3a4688ee1f8524b9d57f6218985be1e7b063e831c498b4ffb0919297a2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:03:48.359249Z","signature_b64":"/0lwBXf2mynUi4f/dwE9w8asAWiEPIXuXa4rsGpCsjiHDHC3A0B/7Jy65z9+a58co026KYQHIR7HuUHtmmglBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3fadbd3a4688ee1f8524b9d57f6218985be1e7b063e831c498b4ffb0919297a2","last_reissued_at":"2026-07-05T08:03:48.358762Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:03:48.358762Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.12255","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:03:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IzQJZrzneRZfdPvtT9JW/UIlDn9GH4nsfVaOFGhwdL/ndj+zAFs38NfXRhnZgyxLKOh81s3U0AHJMCgKwCvpDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:15:38.056633Z"},"content_sha256":"23ac2d6c9a6768b28f1561cb808c86187d4f101c73ad2dbc8b266658502055c7","schema_version":"1.0","event_id":"sha256:23ac2d6c9a6768b28f1561cb808c86187d4f101c73ad2dbc8b266658502055c7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:H6W32OSGRDXB7BJEXHKX6YQYTB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Instructional Fingerprinting of Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Chaowei Xiao, Fei Wang, Jiashu Xu, Mingyu Derek Ma, Muhao Chen, Pang Wei Koh","submitted_at":"2024-01-21T09:51:45Z","abstract_excerpt":"The exorbitant cost of training Large language models (LLMs) from scratch makes it essential to fingerprint the models to protect intellectual property via ownership authentication and to ensure downstream users and developers comply with their license terms (e.g. restricting commercial use). In this study, we present a pilot study on LLM fingerprinting as a form of very lightweight instruction tuning. Model publisher specifies a confidential private key and implants it as an instruction backdoor that causes the LLM to generate specific text when the key is present. Results on 11 popularly-use"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.12255","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.12255/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:03:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ews1o3fgIvo8d91sWhU3AEUjdXAw7RxJmsMcA4OGiCZ7A3QKlJhw9boaWu1lgK3d8SPwMEvyH6ONZm8+ROrWAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:15:38.057157Z"},"content_sha256":"57b0712f852c1306812dd6d42f186ea74f2b76daebd04d7e5151a96572e9e52f","schema_version":"1.0","event_id":"sha256:57b0712f852c1306812dd6d42f186ea74f2b76daebd04d7e5151a96572e9e52f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H6W32OSGRDXB7BJEXHKX6YQYTB/bundle.json","state_url":"https://pith.science/pith/H6W32OSGRDXB7BJEXHKX6YQYTB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H6W32OSGRDXB7BJEXHKX6YQYTB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T12:15:38Z","links":{"resolver":"https://pith.science/pith/H6W32OSGRDXB7BJEXHKX6YQYTB","bundle":"https://pith.science/pith/H6W32OSGRDXB7BJEXHKX6YQYTB/bundle.json","state":"https://pith.science/pith/H6W32OSGRDXB7BJEXHKX6YQYTB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H6W32OSGRDXB7BJEXHKX6YQYTB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:H6W32OSGRDXB7BJEXHKX6YQYTB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7823f907c6bf19798135638e3f6f3ffaf2e56f4ce8d54818759a05293d957e76","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-21T09:51:45Z","title_canon_sha256":"c35f2ea404315fb5770298ce338b4dcbb88ccb113595f3fb3631e0b7abd4a316"},"schema_version":"1.0","source":{"id":"2401.12255","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.12255","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"arxiv_version","alias_value":"2401.12255v2","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.12255","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"pith_short_12","alias_value":"H6W32OSGRDXB","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"pith_short_16","alias_value":"H6W32OSGRDXB7BJE","created_at":"2026-07-05T08:03:48Z"},{"alias_kind":"pith_short_8","alias_value":"H6W32OSG","created_at":"2026-07-05T08:03:48Z"}],"graph_snapshots":[{"event_id":"sha256:57b0712f852c1306812dd6d42f186ea74f2b76daebd04d7e5151a96572e9e52f","target":"graph","created_at":"2026-07-05T08:03:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.12255/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The exorbitant cost of training Large language models (LLMs) from scratch makes it essential to fingerprint the models to protect intellectual property via ownership authentication and to ensure downstream users and developers comply with their license terms (e.g. restricting commercial use). In this study, we present a pilot study on LLM fingerprinting as a form of very lightweight instruction tuning. Model publisher specifies a confidential private key and implants it as an instruction backdoor that causes the LLM to generate specific text when the key is present. Results on 11 popularly-use","authors_text":"Chaowei Xiao, Fei Wang, Jiashu Xu, Mingyu Derek Ma, Muhao Chen, Pang Wei Koh","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-21T09:51:45Z","title":"Instructional Fingerprinting of Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.12255","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:23ac2d6c9a6768b28f1561cb808c86187d4f101c73ad2dbc8b266658502055c7","target":"record","created_at":"2026-07-05T08:03:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7823f907c6bf19798135638e3f6f3ffaf2e56f4ce8d54818759a05293d957e76","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-21T09:51:45Z","title_canon_sha256":"c35f2ea404315fb5770298ce338b4dcbb88ccb113595f3fb3631e0b7abd4a316"},"schema_version":"1.0","source":{"id":"2401.12255","kind":"arxiv","version":2}},"canonical_sha256":"3fadbd3a4688ee1f8524b9d57f6218985be1e7b063e831c498b4ffb0919297a2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3fadbd3a4688ee1f8524b9d57f6218985be1e7b063e831c498b4ffb0919297a2","first_computed_at":"2026-07-05T08:03:48.358762Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:03:48.358762Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/0lwBXf2mynUi4f/dwE9w8asAWiEPIXuXa4rsGpCsjiHDHC3A0B/7Jy65z9+a58co026KYQHIR7HuUHtmmglBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:03:48.359249Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.12255","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:23ac2d6c9a6768b28f1561cb808c86187d4f101c73ad2dbc8b266658502055c7","sha256:57b0712f852c1306812dd6d42f186ea74f2b76daebd04d7e5151a96572e9e52f"],"state_sha256":"ddac8a02ce35a18b5cdf58f741956ab22b61dec8478c1f7031df77e1df8bd8f2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L+/G1gUCKIUkm+gPfgraHje+SqtWewRU+DTbA+yh+RoY58+AXIPGVFm5kEk8DGP/3hlECbIugfrMdJIjjeohAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T12:15:38.062406Z","bundle_sha256":"2cbd9a5756f0db86e301c98b8b85702084ef61ba268d23a5a336ff4d125b54c7"}}