{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KEXEUKJ7HFZYREVE4BL4SPBTDZ","short_pith_number":"pith:KEXEUKJ7","canonical_record":{"source":{"id":"2510.02964","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T12:53:45Z","cross_cats_sorted":[],"title_canon_sha256":"a88fc0d159634b539c778c8854168e12cc299f5b647d3cf2e507e847d53b420e","abstract_canon_sha256":"139b0344f239a43ba12eff0e4a256817c6b2b028699f164e9b29a7843a85bdc0"},"schema_version":"1.0"},"canonical_sha256":"512e4a293f39738892a4e057c93c331e6a5c1821ab10c7c3a05f9e63a452b59f","source":{"kind":"arxiv","id":"2510.02964","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.02964","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"arxiv_version","alias_value":"2510.02964v2","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.02964","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"pith_short_12","alias_value":"KEXEUKJ7HFZY","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"pith_short_16","alias_value":"KEXEUKJ7HFZYREVE","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"pith_short_8","alias_value":"KEXEUKJ7","created_at":"2026-07-08T01:18:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KEXEUKJ7HFZYREVE4BL4SPBTDZ","target":"record","payload":{"canonical_record":{"source":{"id":"2510.02964","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T12:53:45Z","cross_cats_sorted":[],"title_canon_sha256":"a88fc0d159634b539c778c8854168e12cc299f5b647d3cf2e507e847d53b420e","abstract_canon_sha256":"139b0344f239a43ba12eff0e4a256817c6b2b028699f164e9b29a7843a85bdc0"},"schema_version":"1.0"},"canonical_sha256":"512e4a293f39738892a4e057c93c331e6a5c1821ab10c7c3a05f9e63a452b59f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-08T01:18:20.761385Z","signature_b64":"zQhDY3ICJ9tOxAAutgCwibOz/+2R2NTuetSXeLDGvf+oG7LtB+ZkeTfnUZq7SFH1iryGwqxNNNeJ5PfdR7ZSBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"512e4a293f39738892a4e057c93c331e6a5c1821ab10c7c3a05f9e63a452b59f","last_reissued_at":"2026-07-08T01:18:20.760675Z","signature_status":"signed_v1","first_computed_at":"2026-07-08T01:18:20.760675Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2510.02964","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-08T01:18:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2KdFlCe5qXAN5nxm8aqZpy85cYvjUzT6GP7EZJUoRmqaD8k2eVU81ixx47oEIRE+300IgyhEMdx0KsTBJEPVDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:52:57.015061Z"},"content_sha256":"f506da9c53de352a129cd582a84d639603ee1a57b525778dc43e4b028127c65e","schema_version":"1.0","event_id":"sha256:f506da9c53de352a129cd582a84d639603ee1a57b525778dc43e4b028127c65e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KEXEUKJ7HFZYREVE4BL4SPBTDZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Boheng Li, Dacheng Tao, Leyi Qi, Shuo Shao, Yifei Chen, Yiming Li, Yu He, Zhan Qin","submitted_at":"2025-10-03T12:53:45Z","abstract_excerpt":"In recent years, RAG has emerged as a key paradigm for enhancing large language models (LLMs). By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data extraction attacks (EDEAs), where sensitive or copyrighted data in its knowledge base may be extracted verbatim. These risks are particularly acute when RAG is used to customize specialized LLM applications with private knowledge bases. Despite initial studies exploring these risks, they often lack a fo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.02964","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2510.02964/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-08T01:18:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n8SUx4a3VjopED8vk7rgySWjEqb2FOMzXDa37LV4XTYAXg0c/KJKqQG+r0H9q9LS8AcsZs9EOTi/5xLPIqUkBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:52:57.015600Z"},"content_sha256":"69a9a2c95d648ffd07b254fad0f339fd27885adf7332beaf88009c9c921c8043","schema_version":"1.0","event_id":"sha256:69a9a2c95d648ffd07b254fad0f339fd27885adf7332beaf88009c9c921c8043"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KEXEUKJ7HFZYREVE4BL4SPBTDZ/bundle.json","state_url":"https://pith.science/pith/KEXEUKJ7HFZYREVE4BL4SPBTDZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KEXEUKJ7HFZYREVE4BL4SPBTDZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T12:52:57Z","links":{"resolver":"https://pith.science/pith/KEXEUKJ7HFZYREVE4BL4SPBTDZ","bundle":"https://pith.science/pith/KEXEUKJ7HFZYREVE4BL4SPBTDZ/bundle.json","state":"https://pith.science/pith/KEXEUKJ7HFZYREVE4BL4SPBTDZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KEXEUKJ7HFZYREVE4BL4SPBTDZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KEXEUKJ7HFZYREVE4BL4SPBTDZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"139b0344f239a43ba12eff0e4a256817c6b2b028699f164e9b29a7843a85bdc0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T12:53:45Z","title_canon_sha256":"a88fc0d159634b539c778c8854168e12cc299f5b647d3cf2e507e847d53b420e"},"schema_version":"1.0","source":{"id":"2510.02964","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.02964","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"arxiv_version","alias_value":"2510.02964v2","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.02964","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"pith_short_12","alias_value":"KEXEUKJ7HFZY","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"pith_short_16","alias_value":"KEXEUKJ7HFZYREVE","created_at":"2026-07-08T01:18:20Z"},{"alias_kind":"pith_short_8","alias_value":"KEXEUKJ7","created_at":"2026-07-08T01:18:20Z"}],"graph_snapshots":[{"event_id":"sha256:69a9a2c95d648ffd07b254fad0f339fd27885adf7332beaf88009c9c921c8043","target":"graph","created_at":"2026-07-08T01:18:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2510.02964/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, RAG has emerged as a key paradigm for enhancing large language models (LLMs). By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data extraction attacks (EDEAs), where sensitive or copyrighted data in its knowledge base may be extracted verbatim. These risks are particularly acute when RAG is used to customize specialized LLM applications with private knowledge bases. Despite initial studies exploring these risks, they often lack a fo","authors_text":"Boheng Li, Dacheng Tao, Leyi Qi, Shuo Shao, Yifei Chen, Yiming Li, Yu He, Zhan Qin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.02964","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f506da9c53de352a129cd582a84d639603ee1a57b525778dc43e4b028127c65e","target":"record","created_at":"2026-07-08T01:18:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"139b0344f239a43ba12eff0e4a256817c6b2b028699f164e9b29a7843a85bdc0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T12:53:45Z","title_canon_sha256":"a88fc0d159634b539c778c8854168e12cc299f5b647d3cf2e507e847d53b420e"},"schema_version":"1.0","source":{"id":"2510.02964","kind":"arxiv","version":2}},"canonical_sha256":"512e4a293f39738892a4e057c93c331e6a5c1821ab10c7c3a05f9e63a452b59f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"512e4a293f39738892a4e057c93c331e6a5c1821ab10c7c3a05f9e63a452b59f","first_computed_at":"2026-07-08T01:18:20.760675Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-08T01:18:20.760675Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zQhDY3ICJ9tOxAAutgCwibOz/+2R2NTuetSXeLDGvf+oG7LtB+ZkeTfnUZq7SFH1iryGwqxNNNeJ5PfdR7ZSBw==","signature_status":"signed_v1","signed_at":"2026-07-08T01:18:20.761385Z","signed_message":"canonical_sha256_bytes"},"source_id":"2510.02964","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f506da9c53de352a129cd582a84d639603ee1a57b525778dc43e4b028127c65e","sha256:69a9a2c95d648ffd07b254fad0f339fd27885adf7332beaf88009c9c921c8043"],"state_sha256":"6d8497c81ae53d548005158c9d0343b5b8f0d89969a732619119dba97c1eed5a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n0AYq3YvZuLioz5YkSMp57qKPIwz5fFKAP0JoYlOZYssTryBmTphPINe8BSVLEuHXeUbzuq74P1EjebhCJKXDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T12:52:57.019806Z","bundle_sha256":"017de885c2d6eb2446472586087cc2cac0be12257c36087910c657bad21fb8a0"}}