{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LBC6N3OXIETTWFUYK2QPHD2I7G","short_pith_number":"pith:LBC6N3OX","canonical_record":{"source":{"id":"2508.03703","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-20T05:03:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dfbfa7274ccb63fbcd72d1e87826bfb1a553ae2a1097e3727585eae6d9aea4d0","abstract_canon_sha256":"125c4f83292f417c7f3344c7de856b3a156c7b07f5e0a84fe70827fb27a271db"},"schema_version":"1.0"},"canonical_sha256":"5845e6edd741273b169856a0f38f48f99b8b874f99e10d00d71ee57aba6c88d5","source":{"kind":"arxiv","id":"2508.03703","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.03703","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"arxiv_version","alias_value":"2508.03703v2","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.03703","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"pith_short_12","alias_value":"LBC6N3OXIETT","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"pith_short_16","alias_value":"LBC6N3OXIETTWFUY","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"pith_short_8","alias_value":"LBC6N3OX","created_at":"2026-07-05T12:09:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LBC6N3OXIETTWFUYK2QPHD2I7G","target":"record","payload":{"canonical_record":{"source":{"id":"2508.03703","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-20T05:03:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dfbfa7274ccb63fbcd72d1e87826bfb1a553ae2a1097e3727585eae6d9aea4d0","abstract_canon_sha256":"125c4f83292f417c7f3344c7de856b3a156c7b07f5e0a84fe70827fb27a271db"},"schema_version":"1.0"},"canonical_sha256":"5845e6edd741273b169856a0f38f48f99b8b874f99e10d00d71ee57aba6c88d5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:09:45.678516Z","signature_b64":"Q12mxHjWzDXiLhwbTxhFOjwsSjg6clybWfGFj0vBME964eWsddQxnc2KUfGGcaIPUqrR/MbRhg2hrSuGvznOAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5845e6edd741273b169856a0f38f48f99b8b874f99e10d00d71ee57aba6c88d5","last_reissued_at":"2026-07-05T12:09:45.678025Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:09:45.678025Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.03703","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tuUOUzCsozBmLLyzsvL9aGznFbsTLfkNr/lwFv6SyDnYrpnk5UuGGmgKA/9XiKSaYQ2IQBeTvfbbbKjXhEi3Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:29:36.418890Z"},"content_sha256":"01ef4cc6cf2007446f3f7eda49f4a6d25d3357afda53abfae0a63b2f9561f381","schema_version":"1.0","event_id":"sha256:01ef4cc6cf2007446f3f7eda49f4a6d25d3357afda53abfae0a63b2f9561f381"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LBC6N3OXIETTWFUYK2QPHD2I7G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy Risks of LLM-Empowered Recommender Systems: An Inversion Attack Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.IR","authors_text":"Min Tang, Nuo Shen, Shujie Cui, Weiqing Wang, Yubo Wang","submitted_at":"2025-07-20T05:03:02Z","abstract_excerpt":"The large language model (LLM) powered recommendation paradigm has been proposed to address the limitations of traditional recommender systems, which often struggle to handle cold start users or items with new IDs. Despite its effectiveness, this study uncovers that LLM empowered recommender systems are vulnerable to reconstruction attacks that can expose both system and user privacy. To examine this threat, we present the first systematic study on inversion attacks targeting LLM empowered recommender systems, where adversaries attempt to reconstruct original prompts that contain personal pref"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.03703","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.03703/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7b6BpFsj7O6ueqCcq6H4g26EFUgymbDsPhxIyvPEgxtLZTT3RkEupOa36McsJfxuHBx9F4Egwn4qIvRzOseLCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:29:36.419495Z"},"content_sha256":"044267219249a6b0b8c1688c1e7e23ef33a5ae6d334182794e1afb96f6ac4caa","schema_version":"1.0","event_id":"sha256:044267219249a6b0b8c1688c1e7e23ef33a5ae6d334182794e1afb96f6ac4caa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LBC6N3OXIETTWFUYK2QPHD2I7G/bundle.json","state_url":"https://pith.science/pith/LBC6N3OXIETTWFUYK2QPHD2I7G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LBC6N3OXIETTWFUYK2QPHD2I7G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T05:29:36Z","links":{"resolver":"https://pith.science/pith/LBC6N3OXIETTWFUYK2QPHD2I7G","bundle":"https://pith.science/pith/LBC6N3OXIETTWFUYK2QPHD2I7G/bundle.json","state":"https://pith.science/pith/LBC6N3OXIETTWFUYK2QPHD2I7G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LBC6N3OXIETTWFUYK2QPHD2I7G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LBC6N3OXIETTWFUYK2QPHD2I7G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"125c4f83292f417c7f3344c7de856b3a156c7b07f5e0a84fe70827fb27a271db","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-20T05:03:02Z","title_canon_sha256":"dfbfa7274ccb63fbcd72d1e87826bfb1a553ae2a1097e3727585eae6d9aea4d0"},"schema_version":"1.0","source":{"id":"2508.03703","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.03703","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"arxiv_version","alias_value":"2508.03703v2","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.03703","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"pith_short_12","alias_value":"LBC6N3OXIETT","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"pith_short_16","alias_value":"LBC6N3OXIETTWFUY","created_at":"2026-07-05T12:09:45Z"},{"alias_kind":"pith_short_8","alias_value":"LBC6N3OX","created_at":"2026-07-05T12:09:45Z"}],"graph_snapshots":[{"event_id":"sha256:044267219249a6b0b8c1688c1e7e23ef33a5ae6d334182794e1afb96f6ac4caa","target":"graph","created_at":"2026-07-05T12:09:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.03703/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The large language model (LLM) powered recommendation paradigm has been proposed to address the limitations of traditional recommender systems, which often struggle to handle cold start users or items with new IDs. Despite its effectiveness, this study uncovers that LLM empowered recommender systems are vulnerable to reconstruction attacks that can expose both system and user privacy. To examine this threat, we present the first systematic study on inversion attacks targeting LLM empowered recommender systems, where adversaries attempt to reconstruct original prompts that contain personal pref","authors_text":"Min Tang, Nuo Shen, Shujie Cui, Weiqing Wang, Yubo Wang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-20T05:03:02Z","title":"Privacy Risks of LLM-Empowered Recommender Systems: An Inversion Attack Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.03703","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:01ef4cc6cf2007446f3f7eda49f4a6d25d3357afda53abfae0a63b2f9561f381","target":"record","created_at":"2026-07-05T12:09:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"125c4f83292f417c7f3344c7de856b3a156c7b07f5e0a84fe70827fb27a271db","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-07-20T05:03:02Z","title_canon_sha256":"dfbfa7274ccb63fbcd72d1e87826bfb1a553ae2a1097e3727585eae6d9aea4d0"},"schema_version":"1.0","source":{"id":"2508.03703","kind":"arxiv","version":2}},"canonical_sha256":"5845e6edd741273b169856a0f38f48f99b8b874f99e10d00d71ee57aba6c88d5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5845e6edd741273b169856a0f38f48f99b8b874f99e10d00d71ee57aba6c88d5","first_computed_at":"2026-07-05T12:09:45.678025Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:45.678025Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Q12mxHjWzDXiLhwbTxhFOjwsSjg6clybWfGFj0vBME964eWsddQxnc2KUfGGcaIPUqrR/MbRhg2hrSuGvznOAg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:45.678516Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.03703","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:01ef4cc6cf2007446f3f7eda49f4a6d25d3357afda53abfae0a63b2f9561f381","sha256:044267219249a6b0b8c1688c1e7e23ef33a5ae6d334182794e1afb96f6ac4caa"],"state_sha256":"c25ea5e3bc0d012e2b3fcbbe1d377aa8d4e7e9cc8ec98b6aed9a0656dda072fd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yuOHmKJfL06+FR3yFkGgp5QDZDuWqkNtySE4/kpUlam2lbXiihxisHLDejZeIPxYT97cvLYbhW2V9aoNSQMVBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T05:29:36.424606Z","bundle_sha256":"0c73965190691fbb6c761d52c0a246a1cf515a5eb8e2bf04d37883ce5bc04c39"}}