{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JN72IUBQH2RYBZBBYAW3FBU2BQ","short_pith_number":"pith:JN72IUBQ","canonical_record":{"source":{"id":"2509.06026","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-07T11:58:02Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"656acd7122f8f2c9c977d1c01784508c9432b789eeec39a48b57614278609921","abstract_canon_sha256":"1b71e7e168bb197b973f450ed1bae8c8bd82c8238c2e3930aa72d0cc0b1dc6db"},"schema_version":"1.0"},"canonical_sha256":"4b7fa450303ea380e421c02db2869a0c1969e7ac5074d13d531f5f33344c472c","source":{"kind":"arxiv","id":"2509.06026","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.06026","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"arxiv_version","alias_value":"2509.06026v1","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.06026","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"pith_short_12","alias_value":"JN72IUBQH2RY","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"pith_short_16","alias_value":"JN72IUBQH2RYBZBB","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"pith_short_8","alias_value":"JN72IUBQ","created_at":"2026-07-05T12:06:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JN72IUBQH2RYBZBBYAW3FBU2BQ","target":"record","payload":{"canonical_record":{"source":{"id":"2509.06026","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-07T11:58:02Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"656acd7122f8f2c9c977d1c01784508c9432b789eeec39a48b57614278609921","abstract_canon_sha256":"1b71e7e168bb197b973f450ed1bae8c8bd82c8238c2e3930aa72d0cc0b1dc6db"},"schema_version":"1.0"},"canonical_sha256":"4b7fa450303ea380e421c02db2869a0c1969e7ac5074d13d531f5f33344c472c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:06:28.555845Z","signature_b64":"aBzuv/5JfmhYqQ+rhMnmQwNwZsTFEDJtAJJXz757R1Fz6Ymz1haBxOEmDOIKZ3NNJPmbRx18UD6E4bmtl2XLCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4b7fa450303ea380e421c02db2869a0c1969e7ac5074d13d531f5f33344c472c","last_reissued_at":"2026-07-05T12:06:28.555344Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:06:28.555344Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.06026","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NCVsnYb86aoMz5SfDwaPnv93q2gRcK+HuJWvu0kK7q7s51mlR0i88rou+tK7m2mpp3AK4qwTDH2GsUGsX3KLCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:51:01.255520Z"},"content_sha256":"60f7b23f31de28cbc338a20006150b1f75e2ece39d76dc9cccd2c621a0778be4","schema_version":"1.0","event_id":"sha256:60f7b23f31de28cbc338a20006150b1f75e2ece39d76dc9cccd2c621a0778be4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JN72IUBQH2RYBZBBYAW3FBU2BQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DCMI: A Differential Calibration Membership Inference Attack Against Retrieval-Augmented Generation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Shanqing Guo, Xiangtao Meng, Xinyu Gao, Yingkai Dong, Zheng Li","submitted_at":"2025-09-07T11:58:02Z","abstract_excerpt":"While Retrieval-Augmented Generation (RAG) effectively reduces hallucinations by integrating external knowledge bases, it introduces vulnerabilities to membership inference attacks (MIAs), particularly in systems handling sensitive data. Existing MIAs targeting RAG's external databases often rely on model responses but ignore the interference of non-member-retrieved documents on RAG outputs, limiting their effectiveness. To address this, we propose DCMI, a differential calibration MIA that mitigates the negative impact of non-member-retrieved documents. Specifically, DCMI leverages the sensiti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.06026","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.06026/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iPjhhoADuWIXtAMDSIdm7LHGLam356hBGhpNpwr2eBH+LvQ6RxcKEtTcfbGmUdNYgwsPwfTEfnUnjB2IlTkMAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:51:01.256484Z"},"content_sha256":"9b35064dfd4d74b2ed9359220ba7aee4ac3c740fc0f27c8eb5bf896cdc8d0e0d","schema_version":"1.0","event_id":"sha256:9b35064dfd4d74b2ed9359220ba7aee4ac3c740fc0f27c8eb5bf896cdc8d0e0d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JN72IUBQH2RYBZBBYAW3FBU2BQ/bundle.json","state_url":"https://pith.science/pith/JN72IUBQH2RYBZBBYAW3FBU2BQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JN72IUBQH2RYBZBBYAW3FBU2BQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T09:51:01Z","links":{"resolver":"https://pith.science/pith/JN72IUBQH2RYBZBBYAW3FBU2BQ","bundle":"https://pith.science/pith/JN72IUBQH2RYBZBBYAW3FBU2BQ/bundle.json","state":"https://pith.science/pith/JN72IUBQH2RYBZBBYAW3FBU2BQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JN72IUBQH2RYBZBBYAW3FBU2BQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JN72IUBQH2RYBZBBYAW3FBU2BQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1b71e7e168bb197b973f450ed1bae8c8bd82c8238c2e3930aa72d0cc0b1dc6db","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-07T11:58:02Z","title_canon_sha256":"656acd7122f8f2c9c977d1c01784508c9432b789eeec39a48b57614278609921"},"schema_version":"1.0","source":{"id":"2509.06026","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.06026","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"arxiv_version","alias_value":"2509.06026v1","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.06026","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"pith_short_12","alias_value":"JN72IUBQH2RY","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"pith_short_16","alias_value":"JN72IUBQH2RYBZBB","created_at":"2026-07-05T12:06:28Z"},{"alias_kind":"pith_short_8","alias_value":"JN72IUBQ","created_at":"2026-07-05T12:06:28Z"}],"graph_snapshots":[{"event_id":"sha256:9b35064dfd4d74b2ed9359220ba7aee4ac3c740fc0f27c8eb5bf896cdc8d0e0d","target":"graph","created_at":"2026-07-05T12:06:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.06026/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While Retrieval-Augmented Generation (RAG) effectively reduces hallucinations by integrating external knowledge bases, it introduces vulnerabilities to membership inference attacks (MIAs), particularly in systems handling sensitive data. Existing MIAs targeting RAG's external databases often rely on model responses but ignore the interference of non-member-retrieved documents on RAG outputs, limiting their effectiveness. To address this, we propose DCMI, a differential calibration MIA that mitigates the negative impact of non-member-retrieved documents. Specifically, DCMI leverages the sensiti","authors_text":"Shanqing Guo, Xiangtao Meng, Xinyu Gao, Yingkai Dong, Zheng Li","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-07T11:58:02Z","title":"DCMI: A Differential Calibration Membership Inference Attack Against Retrieval-Augmented Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.06026","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:60f7b23f31de28cbc338a20006150b1f75e2ece39d76dc9cccd2c621a0778be4","target":"record","created_at":"2026-07-05T12:06:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1b71e7e168bb197b973f450ed1bae8c8bd82c8238c2e3930aa72d0cc0b1dc6db","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-07T11:58:02Z","title_canon_sha256":"656acd7122f8f2c9c977d1c01784508c9432b789eeec39a48b57614278609921"},"schema_version":"1.0","source":{"id":"2509.06026","kind":"arxiv","version":1}},"canonical_sha256":"4b7fa450303ea380e421c02db2869a0c1969e7ac5074d13d531f5f33344c472c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4b7fa450303ea380e421c02db2869a0c1969e7ac5074d13d531f5f33344c472c","first_computed_at":"2026-07-05T12:06:28.555344Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:06:28.555344Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aBzuv/5JfmhYqQ+rhMnmQwNwZsTFEDJtAJJXz757R1Fz6Ymz1haBxOEmDOIKZ3NNJPmbRx18UD6E4bmtl2XLCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:06:28.555845Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.06026","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:60f7b23f31de28cbc338a20006150b1f75e2ece39d76dc9cccd2c621a0778be4","sha256:9b35064dfd4d74b2ed9359220ba7aee4ac3c740fc0f27c8eb5bf896cdc8d0e0d"],"state_sha256":"4a0fb8c649741f27968efa78d2348adcbb60ac94b22e30753ad525172968fbd6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XFgAnbAgLg0mFQQOmmkyWeodkfEZ3A9AxoVUBE19UDEHS83iVZpBBVkocFlKzW/chTaFiPsNcCg3cbi0/peyCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T09:51:01.262202Z","bundle_sha256":"e2727f14070117ee5cb3b746e0ededacde72f787e9a46900bf289d963d83fa97"}}