{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:L6LQKWGCREV7NQYDMYNUMJF2T6","short_pith_number":"pith:L6LQKWGC","canonical_record":{"source":{"id":"2607.20723","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T20:51:28Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a07d9661022bfac3bd0d06ed0c92314a5044705c63c397a3c83d3933f8c716ff","abstract_canon_sha256":"117c56beb5713840b9389d6ae3314bfe529200b13c4b9b1098092f1253a16c32"},"schema_version":"1.0"},"canonical_sha256":"5f970558c2892bf6c303661b4624ba9fa318d58f9a20a87c76e8b9aed711d5ba","source":{"kind":"arxiv","id":"2607.20723","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.20723","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"arxiv_version","alias_value":"2607.20723v1","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.20723","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"pith_short_12","alias_value":"L6LQKWGCREV7","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"pith_short_16","alias_value":"L6LQKWGCREV7NQYD","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"pith_short_8","alias_value":"L6LQKWGC","created_at":"2026-07-24T00:23:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:L6LQKWGCREV7NQYDMYNUMJF2T6","target":"record","payload":{"canonical_record":{"source":{"id":"2607.20723","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T20:51:28Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a07d9661022bfac3bd0d06ed0c92314a5044705c63c397a3c83d3933f8c716ff","abstract_canon_sha256":"117c56beb5713840b9389d6ae3314bfe529200b13c4b9b1098092f1253a16c32"},"schema_version":"1.0"},"canonical_sha256":"5f970558c2892bf6c303661b4624ba9fa318d58f9a20a87c76e8b9aed711d5ba","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-24T00:23:31.372931Z","signature_b64":"UGQr5CI/gJiBGMxeQejMFdZ5z/wBFD/+gpE6GoS2SkZQgcggMpGvl3z0SeDa0ZFQWvMFqteaAzm/PVse7JE9AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5f970558c2892bf6c303661b4624ba9fa318d58f9a20a87c76e8b9aed711d5ba","last_reissued_at":"2026-07-24T00:23:31.372126Z","signature_status":"signed_v1","first_computed_at":"2026-07-24T00:23:31.372126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.20723","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-24T00:23:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AuATVewhHuh8KEIWic3MVxWzRgWfor/3w1clp9O4w9+Os4NaDg1V41TzFmKvKbbkbHET91NF5vN5kRCMIboEDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:54:28.553123Z"},"content_sha256":"1cccb33a95e753a6b643b7ace7922783717af43df17061ec4c3e3b163b451fe6","schema_version":"1.0","event_id":"sha256:1cccb33a95e753a6b643b7ace7922783717af43df17061ec4c3e3b163b451fe6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:L6LQKWGCREV7NQYDMYNUMJF2T6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Leaky Language Models: Stealing Architecture and Inference Optimizations via Per-Token Timing","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Kazem Taram, Niloofar Mireshghallah, Sadegh Majidi","submitted_at":"2026-07-22T20:51:28Z","abstract_excerpt":"This work presents LeakyLMs, a set of attacks that leak proprietary model, architecture, and deployment information from production language models. LeakyLMs is the first to demonstrate that key model and deployment details can be inferred using only token generation timing, even when interacting through remote APIs. LeakyLMs introduces two core attacks. The first attack targets inference optimizations and deployment strategies. For example, our attack detects whether a provider uses speculative decoding, a widely deployed inference-time optimization, and further identifies the context length "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.20723","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.20723/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-24T00:23:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jJGlPldb2lkXQuM6IPgUW97M0q/DotKafKqFCmi5SsqdgCXwrMInnT3SWfNC3ceiZN/Hv1GLC1P0+F5mxCESAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:54:28.554552Z"},"content_sha256":"dfb3374c3cfdae9073edb670b59ad774d32b3f7ba48b7452cd2768c9a9914e03","schema_version":"1.0","event_id":"sha256:dfb3374c3cfdae9073edb670b59ad774d32b3f7ba48b7452cd2768c9a9914e03"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:L6LQKWGCREV7NQYDMYNUMJF2T6","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2023.findings-emnlp.257) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Speculative Decoding: Exploiting Speculative Execution for Accelerating Seq2seq Generation. InFindings of the Association for Computational Linguistics: EMNLP 2023, Houda Bouamor, Juan Pino, and Kalika Bali (Eds.). Association for Computati","arxiv_id":"2607.20723","detector":"doi_compliance","evidence":{"ref_index":2023,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/2023.findings-","reconstructed_doi":"10.18653/v1/2023.findings-emnlp.257"},"severity":"advisory","ref_index":2023,"audited_at":"2026-08-01T09:40:04.589776Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2023.findings-emnlp.257","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"15c08ff5cb574a4e39c56232a650cfa7416c20e40ee6903e6491c0f7e1151563","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":15558,"payload_sha256":"46674cba3dceef078a2d2df6236943278162cca27c3c16addab81b0305528cc1","signature_b64":"aRsxaxgDVQluXNLOoux73ylk8pfuKQhc4qjsrV3AvqWsyQly65+OSWPSJNRDjAuJawVH4N3c4u0zRrmsNlBBCg==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T09:43:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"duAYd6XsfXzhf69jX4gxUN9j7CVcuuWlq6bivxHtAqPvCFQTIZXxP0fThVe9pEx/06kU00xxaVLSGLkLVkHOBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:54:28.565693Z"},"content_sha256":"ec6d3f8c30b303c8ad67aa88a57bf0564b7d8dd525756fa2a6d0d5d00aaafaaa","schema_version":"1.0","event_id":"sha256:ec6d3f8c30b303c8ad67aa88a57bf0564b7d8dd525756fa2a6d0d5d00aaafaaa"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:L6LQKWGCREV7NQYDMYNUMJF2T6","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2023.acl-long.689) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Andrea Santilli, Silvio Severino, Emilian Postolache, Valentino Maiorca, Michele Mancusi, Riccardo Marin, and Emanuele Rodolà. 2023. Accelerating Transformer Inference for Translation via Parallel Decoding. 12336–12355. doi:10.18653/v1/ 202","arxiv_id":"2607.20723","detector":"doi_compliance","evidence":{"ref_index":51,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/","reconstructed_doi":"10.18653/v1/2023.acl-long.689"},"severity":"advisory","ref_index":51,"audited_at":"2026-08-01T09:40:04.589776Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2023.acl-long.689","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"416fc7430dee497801540f15f499b765b401b60e55ab0699823de2203b4f47c2","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":15557,"payload_sha256":"a7db5351a3f96c70cb62df9567912545efc37dc3b13a5214d26edce1c8790f6f","signature_b64":"gSCvMcREdSyfmh7Iy+frBmo2RZlrztdp/SFxqD2IrGmvae2bxv98zbA+0jrn8MYOCzhCrbMt5aCejrzIblxOCA==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T09:43:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3j/Wz8S57CIjv1qZdRYCYQJyM3FqA+4dzBGW7fsq6byZVzyoS8B3RNX4fDoF7if7TXHMQINMFvKTpQYh5g6yCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:54:28.566275Z"},"content_sha256":"4ba95d220a4f8f5d706959d7efb790bbcb18622ae67290cb552fafb2f0a79c1a","schema_version":"1.0","event_id":"sha256:4ba95d220a4f8f5d706959d7efb790bbcb18622ae67290cb552fafb2f0a79c1a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L6LQKWGCREV7NQYDMYNUMJF2T6/bundle.json","state_url":"https://pith.science/pith/L6LQKWGCREV7NQYDMYNUMJF2T6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L6LQKWGCREV7NQYDMYNUMJF2T6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:54:28Z","links":{"resolver":"https://pith.science/pith/L6LQKWGCREV7NQYDMYNUMJF2T6","bundle":"https://pith.science/pith/L6LQKWGCREV7NQYDMYNUMJF2T6/bundle.json","state":"https://pith.science/pith/L6LQKWGCREV7NQYDMYNUMJF2T6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L6LQKWGCREV7NQYDMYNUMJF2T6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:L6LQKWGCREV7NQYDMYNUMJF2T6","merge_version":"pith-open-graph-merge-v1","event_count":4,"valid_event_count":4,"invalid_event_count":0,"equivocation_count":1,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"117c56beb5713840b9389d6ae3314bfe529200b13c4b9b1098092f1253a16c32","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T20:51:28Z","title_canon_sha256":"a07d9661022bfac3bd0d06ed0c92314a5044705c63c397a3c83d3933f8c716ff"},"schema_version":"1.0","source":{"id":"2607.20723","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.20723","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"arxiv_version","alias_value":"2607.20723v1","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.20723","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"pith_short_12","alias_value":"L6LQKWGCREV7","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"pith_short_16","alias_value":"L6LQKWGCREV7NQYD","created_at":"2026-07-24T00:23:31Z"},{"alias_kind":"pith_short_8","alias_value":"L6LQKWGC","created_at":"2026-07-24T00:23:31Z"}],"graph_snapshots":[{"event_id":"sha256:dfb3374c3cfdae9073edb670b59ad774d32b3f7ba48b7452cd2768c9a9914e03","target":"graph","created_at":"2026-07-24T00:23:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.20723/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This work presents LeakyLMs, a set of attacks that leak proprietary model, architecture, and deployment information from production language models. LeakyLMs is the first to demonstrate that key model and deployment details can be inferred using only token generation timing, even when interacting through remote APIs. LeakyLMs introduces two core attacks. The first attack targets inference optimizations and deployment strategies. For example, our attack detects whether a provider uses speculative decoding, a widely deployed inference-time optimization, and further identifies the context length ","authors_text":"Kazem Taram, Niloofar Mireshghallah, Sadegh Majidi","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T20:51:28Z","title":"Leaky Language Models: Stealing Architecture and Inference Optimizations via Per-Token Timing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.20723","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1cccb33a95e753a6b643b7ace7922783717af43df17061ec4c3e3b163b451fe6","target":"record","created_at":"2026-07-24T00:23:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"117c56beb5713840b9389d6ae3314bfe529200b13c4b9b1098092f1253a16c32","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T20:51:28Z","title_canon_sha256":"a07d9661022bfac3bd0d06ed0c92314a5044705c63c397a3c83d3933f8c716ff"},"schema_version":"1.0","source":{"id":"2607.20723","kind":"arxiv","version":1}},"canonical_sha256":"5f970558c2892bf6c303661b4624ba9fa318d58f9a20a87c76e8b9aed711d5ba","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5f970558c2892bf6c303661b4624ba9fa318d58f9a20a87c76e8b9aed711d5ba","first_computed_at":"2026-07-24T00:23:31.372126Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-24T00:23:31.372126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UGQr5CI/gJiBGMxeQejMFdZ5z/wBFD/+gpE6GoS2SkZQgcggMpGvl3z0SeDa0ZFQWvMFqteaAzm/PVse7JE9AA==","signature_status":"signed_v1","signed_at":"2026-07-24T00:23:31.372931Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.20723","source_kind":"arxiv","source_version":1}}},"equivocations":[{"signer_id":"pith.science","event_type":"integrity_finding","target":"integrity","event_ids":["sha256:4ba95d220a4f8f5d706959d7efb790bbcb18622ae67290cb552fafb2f0a79c1a","sha256:ec6d3f8c30b303c8ad67aa88a57bf0564b7d8dd525756fa2a6d0d5d00aaafaaa"]}],"invalid_events":[],"applied_event_ids":["sha256:1cccb33a95e753a6b643b7ace7922783717af43df17061ec4c3e3b163b451fe6","sha256:dfb3374c3cfdae9073edb670b59ad774d32b3f7ba48b7452cd2768c9a9914e03"],"state_sha256":"2a444e9b66e35262e753779129db2448e7232830fa4696863fe7a276db760e27"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w9iyBpeGm69OpWuK6vyUhUn7UOEa0Ol8Q57KQP58Bk8UFZlqY8O4WUiAIA14pGAPgh4ltq+/HOwbY8rHCuiJBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:54:28.572673Z","bundle_sha256":"85d478af9c51ef1bd6b82328c83dfe4e2ad2f43d0f64bf61d41df12a65e658ec"}}