{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:HOZIRVIDDYFQ5OZ7UZ5S7IRYHT","short_pith_number":"pith:HOZIRVID","canonical_record":{"source":{"id":"2305.15594","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-05-24T22:06:08Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"bdfc4e11477db93589759d1977fa7886f92c5fe77303ce9782f56f737de7ea6c","abstract_canon_sha256":"cf2cfdebba1ef3af305b85e91821453e4864d9cee981d9ecc1072c709b12f68d"},"schema_version":"1.0"},"canonical_sha256":"3bb288d5031e0b0ebb3fa67b2fa2383ce3333b78e10a9c800b99f60a723be6f6","source":{"kind":"arxiv","id":"2305.15594","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.15594","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"arxiv_version","alias_value":"2305.15594v1","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.15594","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"pith_short_12","alias_value":"HOZIRVIDDYFQ","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"pith_short_16","alias_value":"HOZIRVIDDYFQ5OZ7","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"pith_short_8","alias_value":"HOZIRVID","created_at":"2026-07-05T06:13:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:HOZIRVIDDYFQ5OZ7UZ5S7IRYHT","target":"record","payload":{"canonical_record":{"source":{"id":"2305.15594","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-05-24T22:06:08Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"bdfc4e11477db93589759d1977fa7886f92c5fe77303ce9782f56f737de7ea6c","abstract_canon_sha256":"cf2cfdebba1ef3af305b85e91821453e4864d9cee981d9ecc1072c709b12f68d"},"schema_version":"1.0"},"canonical_sha256":"3bb288d5031e0b0ebb3fa67b2fa2383ce3333b78e10a9c800b99f60a723be6f6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:13:42.320305Z","signature_b64":"H28RgQ89C/YD/K6fLZAxFDkDQ/+11eSKtcBvuCG9t7SkQK5MQhQxgDl8Gz0n5NBp3X12a27yLFsYfFbfVrSsAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3bb288d5031e0b0ebb3fa67b2fa2383ce3333b78e10a9c800b99f60a723be6f6","last_reissued_at":"2026-07-05T06:13:42.319809Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:13:42.319809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.15594","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:13:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xJWPLAFo2lDfS4aBCgzWMnnCWC7tRFwppnpn93XNE98F+/RGV6s5OoxN8XOboAq9PjNXlnxguUgeH1oduLkuAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:14:16.610552Z"},"content_sha256":"179ba0a8a5a1448d64eb12da23f9666bdc818b17aa05279c3c61fd762b222249","schema_version":"1.0","event_id":"sha256:179ba0a8a5a1448d64eb12da23f9666bdc818b17aa05279c3c61fd762b222249"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:HOZIRVIDDYFQ5OZ7UZ5S7IRYHT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Adam Dziedzic, Franziska Boenisch, Haonan Duan, Nicolas Papernot","submitted_at":"2023-05-24T22:06:08Z","abstract_excerpt":"Large language models (LLMs) are excellent in-context learners. However, the sensitivity of data contained in prompts raises privacy concerns. Our work first shows that these concerns are valid: we instantiate a simple but highly effective membership inference attack against the data used to prompt LLMs. To address this vulnerability, one could forego prompting and resort to fine-tuning LLMs with known algorithms for private gradient descent. However, this comes at the expense of the practicality and efficiency offered by prompting. Therefore, we propose to privately learn to prompt. We first "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.15594","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.15594/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:13:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aa45tFaJAqYlubJ0JIQzQXjWULdjBk3W1Eq+UR000ovOyr6N6V+UEPb5qSOGasIj2dR5sSJaSk7pgDFCntNvDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:14:16.611063Z"},"content_sha256":"a5ec4a4a65e4af7f764567d541b0a7a19224ea60c724e7a95045bda90d2fd009","schema_version":"1.0","event_id":"sha256:a5ec4a4a65e4af7f764567d541b0a7a19224ea60c724e7a95045bda90d2fd009"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HOZIRVIDDYFQ5OZ7UZ5S7IRYHT/bundle.json","state_url":"https://pith.science/pith/HOZIRVIDDYFQ5OZ7UZ5S7IRYHT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HOZIRVIDDYFQ5OZ7UZ5S7IRYHT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T11:14:16Z","links":{"resolver":"https://pith.science/pith/HOZIRVIDDYFQ5OZ7UZ5S7IRYHT","bundle":"https://pith.science/pith/HOZIRVIDDYFQ5OZ7UZ5S7IRYHT/bundle.json","state":"https://pith.science/pith/HOZIRVIDDYFQ5OZ7UZ5S7IRYHT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HOZIRVIDDYFQ5OZ7UZ5S7IRYHT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:HOZIRVIDDYFQ5OZ7UZ5S7IRYHT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cf2cfdebba1ef3af305b85e91821453e4864d9cee981d9ecc1072c709b12f68d","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-05-24T22:06:08Z","title_canon_sha256":"bdfc4e11477db93589759d1977fa7886f92c5fe77303ce9782f56f737de7ea6c"},"schema_version":"1.0","source":{"id":"2305.15594","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.15594","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"arxiv_version","alias_value":"2305.15594v1","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.15594","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"pith_short_12","alias_value":"HOZIRVIDDYFQ","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"pith_short_16","alias_value":"HOZIRVIDDYFQ5OZ7","created_at":"2026-07-05T06:13:42Z"},{"alias_kind":"pith_short_8","alias_value":"HOZIRVID","created_at":"2026-07-05T06:13:42Z"}],"graph_snapshots":[{"event_id":"sha256:a5ec4a4a65e4af7f764567d541b0a7a19224ea60c724e7a95045bda90d2fd009","target":"graph","created_at":"2026-07-05T06:13:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.15594/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are excellent in-context learners. However, the sensitivity of data contained in prompts raises privacy concerns. Our work first shows that these concerns are valid: we instantiate a simple but highly effective membership inference attack against the data used to prompt LLMs. To address this vulnerability, one could forego prompting and resort to fine-tuning LLMs with known algorithms for private gradient descent. However, this comes at the expense of the practicality and efficiency offered by prompting. Therefore, we propose to privately learn to prompt. We first ","authors_text":"Adam Dziedzic, Franziska Boenisch, Haonan Duan, Nicolas Papernot","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-05-24T22:06:08Z","title":"Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.15594","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:179ba0a8a5a1448d64eb12da23f9666bdc818b17aa05279c3c61fd762b222249","target":"record","created_at":"2026-07-05T06:13:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cf2cfdebba1ef3af305b85e91821453e4864d9cee981d9ecc1072c709b12f68d","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-05-24T22:06:08Z","title_canon_sha256":"bdfc4e11477db93589759d1977fa7886f92c5fe77303ce9782f56f737de7ea6c"},"schema_version":"1.0","source":{"id":"2305.15594","kind":"arxiv","version":1}},"canonical_sha256":"3bb288d5031e0b0ebb3fa67b2fa2383ce3333b78e10a9c800b99f60a723be6f6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3bb288d5031e0b0ebb3fa67b2fa2383ce3333b78e10a9c800b99f60a723be6f6","first_computed_at":"2026-07-05T06:13:42.319809Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:13:42.319809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"H28RgQ89C/YD/K6fLZAxFDkDQ/+11eSKtcBvuCG9t7SkQK5MQhQxgDl8Gz0n5NBp3X12a27yLFsYfFbfVrSsAA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:13:42.320305Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.15594","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:179ba0a8a5a1448d64eb12da23f9666bdc818b17aa05279c3c61fd762b222249","sha256:a5ec4a4a65e4af7f764567d541b0a7a19224ea60c724e7a95045bda90d2fd009"],"state_sha256":"6b9f0a7ee5b739dd887427903e6284dbf66856a51a2dcbffaf8beb8b126ad36f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IytTPdB0xfszkpcAMsdz3arH9tlTZ2hMCIPBw8Ka1a1UvH3qU/gEdueIlgwlD2bEDS0UXh2Vc3eW7jijnZ/gCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T11:14:16.616083Z","bundle_sha256":"f82ad02f16b5b25db434ec1dd2d20bcc97e50c9ba09dbf7e8cfb482c9bbe1880"}}