{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:KQ5OV7LZ3UEGREZQN6QYBUWGRK","short_pith_number":"pith:KQ5OV7LZ","canonical_record":{"source":{"id":"2608.11408","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-08-11T20:16:20Z","cross_cats_sorted":[],"title_canon_sha256":"5dd7440050a533a5119f1473195dd74c38994115f006d2c44481cca851e3ab7a","abstract_canon_sha256":"6d14ef6e25647b636982e12e612c769349646ccc06cba78919947b29fdfd2103"},"schema_version":"1.0"},"canonical_sha256":"543aeafd79dd086893306fa180d2c68aab42828e7c5f6418e3ed44b68ecec993","source":{"kind":"arxiv","id":"2608.11408","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.11408","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"arxiv_version","alias_value":"2608.11408v1","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.11408","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"pith_short_12","alias_value":"KQ5OV7LZ3UEG","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"pith_short_16","alias_value":"KQ5OV7LZ3UEGREZQ","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"pith_short_8","alias_value":"KQ5OV7LZ","created_at":"2026-08-13T00:21:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:KQ5OV7LZ3UEGREZQN6QYBUWGRK","target":"record","payload":{"canonical_record":{"source":{"id":"2608.11408","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-08-11T20:16:20Z","cross_cats_sorted":[],"title_canon_sha256":"5dd7440050a533a5119f1473195dd74c38994115f006d2c44481cca851e3ab7a","abstract_canon_sha256":"6d14ef6e25647b636982e12e612c769349646ccc06cba78919947b29fdfd2103"},"schema_version":"1.0"},"canonical_sha256":"543aeafd79dd086893306fa180d2c68aab42828e7c5f6418e3ed44b68ecec993","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-13T00:21:47.693508Z","signature_b64":"5lOgEe4/UOdQg+JwZY6uQugzqnDZPTXgv9cHVrhNkmPoLLMJe1YSb0GWAUC0qgY5mm0Qzqz8R5X2HOF/EQglBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"543aeafd79dd086893306fa180d2c68aab42828e7c5f6418e3ed44b68ecec993","last_reissued_at":"2026-08-13T00:21:47.691837Z","signature_status":"signed_v1","first_computed_at":"2026-08-13T00:21:47.691837Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.11408","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-13T00:21:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ggi2Tj1NjL0cWh5pKseO67VsY/zzXJ3koy8fzckQZPCztXmyrtv8Sg9E86aJeFXush3Qp14gzP+ryxI8PSMcAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:16:23.645612Z"},"content_sha256":"77614e52193a79dd58f954c71050adff7182962600c34fc49d660d65dc31faf2","schema_version":"1.0","event_id":"sha256:77614e52193a79dd58f954c71050adff7182962600c34fc49d660d65dc31faf2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:KQ5OV7LZ3UEGREZQN6QYBUWGRK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Measure, Don't Optimize: Forecasting Recovery in LLM Unlearning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Fengxian Ji, Huaxing Liu, Jinghui Zhang, Lang Gao, Shuai Li, Xiang Wang, Xiaojun Chang, Xinye Li, Xiuying Chen, Zheng Lu, Zirui Song","submitted_at":"2026-08-11T20:16:20Z","abstract_excerpt":"Prior white-box studies show that large language models can retain latent traces of target knowledge after unlearning, even when the knowledge is no longer expressed in their outputs. However, existing audits remain limited to one-off diagnostics: it is unclear whether these residual signals can predict future recovery under continued training or serve as reliable optimization targets. Resolving this gap is essential to determine whether internal auditing can move beyond post-hoc evaluation toward proactive risk monitoring and safer unlearning. We propose J-Access, an inference-time audit that"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.11408","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.11408/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-13T00:21:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4CPl50jkoCivH8El0Fmm1YcQa524rbStHiM+ldb/mCWpZSb9Mfe2mjyvl9H4LwHssBCKX+nRPbffluFABFMoCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:16:23.646502Z"},"content_sha256":"b2e9710625dac9cfd354a1872b77df2f55f3c6eb0a75ba285761dc4fb33b5cc2","schema_version":"1.0","event_id":"sha256:b2e9710625dac9cfd354a1872b77df2f55f3c6eb0a75ba285761dc4fb33b5cc2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KQ5OV7LZ3UEGREZQN6QYBUWGRK/bundle.json","state_url":"https://pith.science/pith/KQ5OV7LZ3UEGREZQN6QYBUWGRK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KQ5OV7LZ3UEGREZQN6QYBUWGRK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T03:16:23Z","links":{"resolver":"https://pith.science/pith/KQ5OV7LZ3UEGREZQN6QYBUWGRK","bundle":"https://pith.science/pith/KQ5OV7LZ3UEGREZQN6QYBUWGRK/bundle.json","state":"https://pith.science/pith/KQ5OV7LZ3UEGREZQN6QYBUWGRK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KQ5OV7LZ3UEGREZQN6QYBUWGRK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:KQ5OV7LZ3UEGREZQN6QYBUWGRK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6d14ef6e25647b636982e12e612c769349646ccc06cba78919947b29fdfd2103","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-08-11T20:16:20Z","title_canon_sha256":"5dd7440050a533a5119f1473195dd74c38994115f006d2c44481cca851e3ab7a"},"schema_version":"1.0","source":{"id":"2608.11408","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.11408","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"arxiv_version","alias_value":"2608.11408v1","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.11408","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"pith_short_12","alias_value":"KQ5OV7LZ3UEG","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"pith_short_16","alias_value":"KQ5OV7LZ3UEGREZQ","created_at":"2026-08-13T00:21:47Z"},{"alias_kind":"pith_short_8","alias_value":"KQ5OV7LZ","created_at":"2026-08-13T00:21:47Z"}],"graph_snapshots":[{"event_id":"sha256:b2e9710625dac9cfd354a1872b77df2f55f3c6eb0a75ba285761dc4fb33b5cc2","target":"graph","created_at":"2026-08-13T00:21:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.11408/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Prior white-box studies show that large language models can retain latent traces of target knowledge after unlearning, even when the knowledge is no longer expressed in their outputs. However, existing audits remain limited to one-off diagnostics: it is unclear whether these residual signals can predict future recovery under continued training or serve as reliable optimization targets. Resolving this gap is essential to determine whether internal auditing can move beyond post-hoc evaluation toward proactive risk monitoring and safer unlearning. We propose J-Access, an inference-time audit that","authors_text":"Fengxian Ji, Huaxing Liu, Jinghui Zhang, Lang Gao, Shuai Li, Xiang Wang, Xiaojun Chang, Xinye Li, Xiuying Chen, Zheng Lu, Zirui Song","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-08-11T20:16:20Z","title":"Measure, Don't Optimize: Forecasting Recovery in LLM Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.11408","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:77614e52193a79dd58f954c71050adff7182962600c34fc49d660d65dc31faf2","target":"record","created_at":"2026-08-13T00:21:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6d14ef6e25647b636982e12e612c769349646ccc06cba78919947b29fdfd2103","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-08-11T20:16:20Z","title_canon_sha256":"5dd7440050a533a5119f1473195dd74c38994115f006d2c44481cca851e3ab7a"},"schema_version":"1.0","source":{"id":"2608.11408","kind":"arxiv","version":1}},"canonical_sha256":"543aeafd79dd086893306fa180d2c68aab42828e7c5f6418e3ed44b68ecec993","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"543aeafd79dd086893306fa180d2c68aab42828e7c5f6418e3ed44b68ecec993","first_computed_at":"2026-08-13T00:21:47.691837Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-13T00:21:47.691837Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5lOgEe4/UOdQg+JwZY6uQugzqnDZPTXgv9cHVrhNkmPoLLMJe1YSb0GWAUC0qgY5mm0Qzqz8R5X2HOF/EQglBw==","signature_status":"signed_v1","signed_at":"2026-08-13T00:21:47.693508Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.11408","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:77614e52193a79dd58f954c71050adff7182962600c34fc49d660d65dc31faf2","sha256:b2e9710625dac9cfd354a1872b77df2f55f3c6eb0a75ba285761dc4fb33b5cc2"],"state_sha256":"3005ad2b682b7a1ca49f944a6d69efe323531dfe28356ea2a2220d6d753211d9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sg5eMIXN4f2NxTLOW5KE8T3Orh+Hveai0r1dqMsHwKvRXFsRmEvywoQqhB8NxcQ0rQFA9AAkyQXOnZdCMBDWAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T03:16:23.652161Z","bundle_sha256":"8ba2d49230e4fd0f2d2bcf362205a5762d507d10537299cb3f4c4bdba5fc5b70"}}