{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ITZQ5HPBHZ7SWC6SZ2AAF3UUHU","short_pith_number":"pith:ITZQ5HPB","canonical_record":{"source":{"id":"2507.16969","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-22T19:20:23Z","cross_cats_sorted":[],"title_canon_sha256":"8c7377e16b6a4900b220cd352d9f4518e05dba5bbc32b7eaf49987135e61cdef","abstract_canon_sha256":"973bfd8a4479e3cf1a4c38d77b66a29b2be9dc7c66be4f466529ca795fdfa213"},"schema_version":"1.0"},"canonical_sha256":"44f30e9de13e7f2b0bd2ce8002ee943d2132d0eda29a8de999ba9a03e97a96b1","source":{"kind":"arxiv","id":"2507.16969","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.16969","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"arxiv_version","alias_value":"2507.16969v1","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.16969","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"pith_short_12","alias_value":"ITZQ5HPBHZ7S","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"pith_short_16","alias_value":"ITZQ5HPBHZ7SWC6S","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"pith_short_8","alias_value":"ITZQ5HPB","created_at":"2026-07-05T11:41:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ITZQ5HPBHZ7SWC6SZ2AAF3UUHU","target":"record","payload":{"canonical_record":{"source":{"id":"2507.16969","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-22T19:20:23Z","cross_cats_sorted":[],"title_canon_sha256":"8c7377e16b6a4900b220cd352d9f4518e05dba5bbc32b7eaf49987135e61cdef","abstract_canon_sha256":"973bfd8a4479e3cf1a4c38d77b66a29b2be9dc7c66be4f466529ca795fdfa213"},"schema_version":"1.0"},"canonical_sha256":"44f30e9de13e7f2b0bd2ce8002ee943d2132d0eda29a8de999ba9a03e97a96b1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:41:59.247095Z","signature_b64":"ETZaPHY/GsdTveph8QV9mDBMdAc6wSRiC65XqeZd9u3C56oM2U7Ti3HwaYk3NqrQQVTuBxQBhdGe+RYoZHO0Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"44f30e9de13e7f2b0bd2ce8002ee943d2132d0eda29a8de999ba9a03e97a96b1","last_reissued_at":"2026-07-05T11:41:59.246603Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:41:59.246603Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.16969","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NaYpO7TyBVxgqUJgAOMJyaq5XtuGbujE8lkI6Is5Ob2UBj0xa1H5u82IPXFRloxqdXFG+6mKZuywjE75s1o+AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T19:19:10.266585Z"},"content_sha256":"b8c25329ea8f64dcb098b327a9c10cb2cb951827a716ec582ebf003b4cfcbd89","schema_version":"1.0","event_id":"sha256:b8c25329ea8f64dcb098b327a9c10cb2cb951827a716ec582ebf003b4cfcbd89"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ITZQ5HPBHZ7SWC6SZ2AAF3UUHU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM4MEA: Data-free Model Extraction Attacks on Sequential Recommenders via Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.IR","authors_text":"Du Su, Fei Sun, Huawei Shen, Kaike Zhang, Shaoling Jing, Shilong Zhao, Xueqi Cheng, Zhichao Shi, Zhiyi Yin","submitted_at":"2025-07-22T19:20:23Z","abstract_excerpt":"Recent studies have demonstrated the vulnerability of sequential recommender systems to Model Extraction Attacks (MEAs). MEAs collect responses from recommender systems to replicate their functionality, enabling unauthorized deployments and posing critical privacy and security risks. Black-box attacks in prior MEAs are ineffective at exposing recommender system vulnerabilities due to random sampling in data selection, which leads to misaligned synthetic and real-world distributions. To overcome this limitation, we propose LLM4MEA, a novel model extraction method that leverages Large Language M"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.16969","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.16969/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zvaOv8IiJHgbDk28O2w0ww02Q5PKjCS457DxaHq4Xpo2Oq+RpxRD1AarWxDsfVrd4T789hmD7k051yLHYr0VBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T19:19:10.267163Z"},"content_sha256":"aa8d3996276dd8da50959b61f13a62827dc21f2625f58e2f49680887b5e4691f","schema_version":"1.0","event_id":"sha256:aa8d3996276dd8da50959b61f13a62827dc21f2625f58e2f49680887b5e4691f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ITZQ5HPBHZ7SWC6SZ2AAF3UUHU/bundle.json","state_url":"https://pith.science/pith/ITZQ5HPBHZ7SWC6SZ2AAF3UUHU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ITZQ5HPBHZ7SWC6SZ2AAF3UUHU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T19:19:10Z","links":{"resolver":"https://pith.science/pith/ITZQ5HPBHZ7SWC6SZ2AAF3UUHU","bundle":"https://pith.science/pith/ITZQ5HPBHZ7SWC6SZ2AAF3UUHU/bundle.json","state":"https://pith.science/pith/ITZQ5HPBHZ7SWC6SZ2AAF3UUHU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ITZQ5HPBHZ7SWC6SZ2AAF3UUHU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ITZQ5HPBHZ7SWC6SZ2AAF3UUHU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"973bfd8a4479e3cf1a4c38d77b66a29b2be9dc7c66be4f466529ca795fdfa213","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-22T19:20:23Z","title_canon_sha256":"8c7377e16b6a4900b220cd352d9f4518e05dba5bbc32b7eaf49987135e61cdef"},"schema_version":"1.0","source":{"id":"2507.16969","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.16969","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"arxiv_version","alias_value":"2507.16969v1","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.16969","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"pith_short_12","alias_value":"ITZQ5HPBHZ7S","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"pith_short_16","alias_value":"ITZQ5HPBHZ7SWC6S","created_at":"2026-07-05T11:41:59Z"},{"alias_kind":"pith_short_8","alias_value":"ITZQ5HPB","created_at":"2026-07-05T11:41:59Z"}],"graph_snapshots":[{"event_id":"sha256:aa8d3996276dd8da50959b61f13a62827dc21f2625f58e2f49680887b5e4691f","target":"graph","created_at":"2026-07-05T11:41:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.16969/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have demonstrated the vulnerability of sequential recommender systems to Model Extraction Attacks (MEAs). MEAs collect responses from recommender systems to replicate their functionality, enabling unauthorized deployments and posing critical privacy and security risks. Black-box attacks in prior MEAs are ineffective at exposing recommender system vulnerabilities due to random sampling in data selection, which leads to misaligned synthetic and real-world distributions. To overcome this limitation, we propose LLM4MEA, a novel model extraction method that leverages Large Language M","authors_text":"Du Su, Fei Sun, Huawei Shen, Kaike Zhang, Shaoling Jing, Shilong Zhao, Xueqi Cheng, Zhichao Shi, Zhiyi Yin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-22T19:20:23Z","title":"LLM4MEA: Data-free Model Extraction Attacks on Sequential Recommenders via Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.16969","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b8c25329ea8f64dcb098b327a9c10cb2cb951827a716ec582ebf003b4cfcbd89","target":"record","created_at":"2026-07-05T11:41:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"973bfd8a4479e3cf1a4c38d77b66a29b2be9dc7c66be4f466529ca795fdfa213","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-22T19:20:23Z","title_canon_sha256":"8c7377e16b6a4900b220cd352d9f4518e05dba5bbc32b7eaf49987135e61cdef"},"schema_version":"1.0","source":{"id":"2507.16969","kind":"arxiv","version":1}},"canonical_sha256":"44f30e9de13e7f2b0bd2ce8002ee943d2132d0eda29a8de999ba9a03e97a96b1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"44f30e9de13e7f2b0bd2ce8002ee943d2132d0eda29a8de999ba9a03e97a96b1","first_computed_at":"2026-07-05T11:41:59.246603Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:41:59.246603Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ETZaPHY/GsdTveph8QV9mDBMdAc6wSRiC65XqeZd9u3C56oM2U7Ti3HwaYk3NqrQQVTuBxQBhdGe+RYoZHO0Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:41:59.247095Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.16969","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b8c25329ea8f64dcb098b327a9c10cb2cb951827a716ec582ebf003b4cfcbd89","sha256:aa8d3996276dd8da50959b61f13a62827dc21f2625f58e2f49680887b5e4691f"],"state_sha256":"28df02830b7a2e5559f0a3f68ae1220ffae2ba53386900cd6aae295cb90f846a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Dw3iZRE+ICVtUljQm9xaJnHY7TPzINM2e/3x3nnWXFFIp+sh6M+tyyRpME88WQfT2U6p9Po/Ztx5rOje9nz+Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T19:19:10.270402Z","bundle_sha256":"bd3d46b4efe1b0dead900761ff8c9de2843708bf6b7171b6dcb3e948217bc15a"}}