{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HXPG2IUQ4COQ3F7LNYR3X7HXFG","short_pith_number":"pith:HXPG2IUQ","canonical_record":{"source":{"id":"2507.03278","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T03:52:53Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"2145b14805a5659d89145f5367fbef5e684f802f03b85b758751a27aafc14bcf","abstract_canon_sha256":"2fe45ea0e486aff5d7dd2720b5849109ea988aa6879fb1dbceaecc6aa7d0f627"},"schema_version":"1.0"},"canonical_sha256":"3dde6d2290e09d0d97eb6e23bbfcf72984898a7dab4cd773a72ff75445a2be98","source":{"kind":"arxiv","id":"2507.03278","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.03278","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"arxiv_version","alias_value":"2507.03278v2","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.03278","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"pith_short_12","alias_value":"HXPG2IUQ4COQ","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"pith_short_16","alias_value":"HXPG2IUQ4COQ3F7L","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"pith_short_8","alias_value":"HXPG2IUQ","created_at":"2026-07-05T11:35:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HXPG2IUQ4COQ3F7LNYR3X7HXFG","target":"record","payload":{"canonical_record":{"source":{"id":"2507.03278","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T03:52:53Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"2145b14805a5659d89145f5367fbef5e684f802f03b85b758751a27aafc14bcf","abstract_canon_sha256":"2fe45ea0e486aff5d7dd2720b5849109ea988aa6879fb1dbceaecc6aa7d0f627"},"schema_version":"1.0"},"canonical_sha256":"3dde6d2290e09d0d97eb6e23bbfcf72984898a7dab4cd773a72ff75445a2be98","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:35:57.698489Z","signature_b64":"bTfw1MX6ObyrwYTyfujFNGOHXi6aW3oDSFQwD6l2cPYZ7WiJrXLgvvhDg28f/hHsaCotLXnJ7N1xd7UHe+VABQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3dde6d2290e09d0d97eb6e23bbfcf72984898a7dab4cd773a72ff75445a2be98","last_reissued_at":"2026-07-05T11:35:57.698017Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:35:57.698017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.03278","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:35:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fEj+KL+76C8gZgXHroFPNSEV5xnLQIs/1ivQ8KYRKz01+bX8dtPOvBexETCrWX/JAWu/nK0sB3HkJhRVrUpHCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:32:44.231652Z"},"content_sha256":"bc5409ae0635e3d06f9b9f026d2591141937f444549930be0a213f5cb6e9f94b","schema_version":"1.0","event_id":"sha256:bc5409ae0635e3d06f9b9f026d2591141937f444549930be0a213f5cb6e9f94b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HXPG2IUQ4COQ3F7LNYR3X7HXFG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Accelerators","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Fan Yao, Jiaqi Xue, Mengxin Zheng, Qian Lou, Yan Solihin, Yifei Zhao","submitted_at":"2025-07-04T03:52:53Z","abstract_excerpt":"Recent advances in Transformer models, e.g., large language models (LLMs), have brought tremendous breakthroughs in various artificial intelligence (AI) tasks, leading to their wide applications in many security-critical domains. Due to their unprecedented scale and prohibitively high development cost, these models have become highly valuable intellectual property for AI stakeholders and are increasingly deployed via machine learning as a service (MLaaS). However, MLaaS often runs on untrusted cloud infrastructure, exposing data and models to potential breaches. Mainstream protection mechanism"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.03278","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.03278/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:35:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vcdKJuvwdbqhw37WCA4Qxij58KtQDdKwi3LAXWkhn+sdM4cgn6D0+bq4U8Wa0eWp2T3NXxbS90Id9/tujClhAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:32:44.232025Z"},"content_sha256":"2b2443b24b6a43d235e3acd9dbaf598a4dad8cdba07be13313e379951aa204e8","schema_version":"1.0","event_id":"sha256:2b2443b24b6a43d235e3acd9dbaf598a4dad8cdba07be13313e379951aa204e8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HXPG2IUQ4COQ3F7LNYR3X7HXFG/bundle.json","state_url":"https://pith.science/pith/HXPG2IUQ4COQ3F7LNYR3X7HXFG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HXPG2IUQ4COQ3F7LNYR3X7HXFG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T21:32:44Z","links":{"resolver":"https://pith.science/pith/HXPG2IUQ4COQ3F7LNYR3X7HXFG","bundle":"https://pith.science/pith/HXPG2IUQ4COQ3F7LNYR3X7HXFG/bundle.json","state":"https://pith.science/pith/HXPG2IUQ4COQ3F7LNYR3X7HXFG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HXPG2IUQ4COQ3F7LNYR3X7HXFG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HXPG2IUQ4COQ3F7LNYR3X7HXFG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2fe45ea0e486aff5d7dd2720b5849109ea988aa6879fb1dbceaecc6aa7d0f627","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T03:52:53Z","title_canon_sha256":"2145b14805a5659d89145f5367fbef5e684f802f03b85b758751a27aafc14bcf"},"schema_version":"1.0","source":{"id":"2507.03278","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.03278","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"arxiv_version","alias_value":"2507.03278v2","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.03278","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"pith_short_12","alias_value":"HXPG2IUQ4COQ","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"pith_short_16","alias_value":"HXPG2IUQ4COQ3F7L","created_at":"2026-07-05T11:35:57Z"},{"alias_kind":"pith_short_8","alias_value":"HXPG2IUQ","created_at":"2026-07-05T11:35:57Z"}],"graph_snapshots":[{"event_id":"sha256:2b2443b24b6a43d235e3acd9dbaf598a4dad8cdba07be13313e379951aa204e8","target":"graph","created_at":"2026-07-05T11:35:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.03278/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in Transformer models, e.g., large language models (LLMs), have brought tremendous breakthroughs in various artificial intelligence (AI) tasks, leading to their wide applications in many security-critical domains. Due to their unprecedented scale and prohibitively high development cost, these models have become highly valuable intellectual property for AI stakeholders and are increasingly deployed via machine learning as a service (MLaaS). However, MLaaS often runs on untrusted cloud infrastructure, exposing data and models to potential breaches. Mainstream protection mechanism","authors_text":"Fan Yao, Jiaqi Xue, Mengxin Zheng, Qian Lou, Yan Solihin, Yifei Zhao","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T03:52:53Z","title":"Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Accelerators"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.03278","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bc5409ae0635e3d06f9b9f026d2591141937f444549930be0a213f5cb6e9f94b","target":"record","created_at":"2026-07-05T11:35:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2fe45ea0e486aff5d7dd2720b5849109ea988aa6879fb1dbceaecc6aa7d0f627","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-04T03:52:53Z","title_canon_sha256":"2145b14805a5659d89145f5367fbef5e684f802f03b85b758751a27aafc14bcf"},"schema_version":"1.0","source":{"id":"2507.03278","kind":"arxiv","version":2}},"canonical_sha256":"3dde6d2290e09d0d97eb6e23bbfcf72984898a7dab4cd773a72ff75445a2be98","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3dde6d2290e09d0d97eb6e23bbfcf72984898a7dab4cd773a72ff75445a2be98","first_computed_at":"2026-07-05T11:35:57.698017Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:35:57.698017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bTfw1MX6ObyrwYTyfujFNGOHXi6aW3oDSFQwD6l2cPYZ7WiJrXLgvvhDg28f/hHsaCotLXnJ7N1xd7UHe+VABQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:35:57.698489Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.03278","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bc5409ae0635e3d06f9b9f026d2591141937f444549930be0a213f5cb6e9f94b","sha256:2b2443b24b6a43d235e3acd9dbaf598a4dad8cdba07be13313e379951aa204e8"],"state_sha256":"79a281401077daa230e47026b145ef5c88cfb5b8faeb61086dff0b8d673ab74b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N/ZM6w6YRikiKq3YGzx/H2W12KiecRG/bVG9ZpKvUeVu7KS3PF5ln19Hbp5tf0rJ2i/zKsbmIujwoHFM7ikrBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T21:32:44.234593Z","bundle_sha256":"fdfddc7d01f84ee9c9e7de3534cebde905e4fec523ece0a2ae6bfb8da1a553e6"}}