{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LDQ3GU6HSWQQOU6DHA4LPIMCGU","short_pith_number":"pith:LDQ3GU6H","canonical_record":{"source":{"id":"2502.03692","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-06T00:58:21Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"4cd296367b7b0b9ef9e41330aed93a58d3c9ed79eb91530091434854fa2acfe9","abstract_canon_sha256":"e51866ee9192c4b9ecf0497a35439fc79887beac6fc04be149de52ffb8973c35"},"schema_version":"1.0"},"canonical_sha256":"58e1b353c795a10753c33838b7a1823502d9ede3e637d5150bb2c43d170f4893","source":{"kind":"arxiv","id":"2502.03692","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.03692","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"arxiv_version","alias_value":"2502.03692v1","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.03692","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"pith_short_12","alias_value":"LDQ3GU6HSWQQ","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"pith_short_16","alias_value":"LDQ3GU6HSWQQOU6D","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"pith_short_8","alias_value":"LDQ3GU6H","created_at":"2026-07-05T10:10:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LDQ3GU6HSWQQOU6DHA4LPIMCGU","target":"record","payload":{"canonical_record":{"source":{"id":"2502.03692","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-06T00:58:21Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"4cd296367b7b0b9ef9e41330aed93a58d3c9ed79eb91530091434854fa2acfe9","abstract_canon_sha256":"e51866ee9192c4b9ecf0497a35439fc79887beac6fc04be149de52ffb8973c35"},"schema_version":"1.0"},"canonical_sha256":"58e1b353c795a10753c33838b7a1823502d9ede3e637d5150bb2c43d170f4893","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:10:13.823800Z","signature_b64":"bkmQuPn2JIli28iB8JUp3zzrnMAAWK0PbWnH3JOSXT+3EQEgkemtjIuiqwG+2crJYnAxlcDOiQuhJiz7t07sBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"58e1b353c795a10753c33838b7a1823502d9ede3e637d5150bb2c43d170f4893","last_reissued_at":"2026-07-05T10:10:13.823353Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:10:13.823353Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.03692","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vVds0XCRO53zJPAMCOy7XEAhEP1Efnfewe9ceh9IUE8kTscf4uFZpromFohpd23nmHyUPgjSHzyRpIYd285CAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T18:04:19.948427Z"},"content_sha256":"b42fae095c4c4df2c796ec54d33931746ba8f0ee86deb90937175ac9243afc33","schema_version":"1.0","event_id":"sha256:b42fae095c4c4df2c796ec54d33931746ba8f0ee86deb90937175ac9243afc33"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LDQ3GU6HSWQQOU6DHA4LPIMCGU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DocMIA: Document-Level Membership Inference Attacks against DocVQA Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Dimosthenis Karatzas, Khanh Nguyen, Mario Fritz, Raouf Kerkouche","submitted_at":"2025-02-06T00:58:21Z","abstract_excerpt":"Document Visual Question Answering (DocVQA) has introduced a new paradigm for end-to-end document understanding, and quickly became one of the standard benchmarks for multimodal LLMs. Automating document processing workflows, driven by DocVQA models, presents significant potential for many business sectors. However, documents tend to contain highly sensitive information, raising concerns about privacy risks associated with training such DocVQA models. One significant privacy vulnerability, exploited by the membership inference attack, is the possibility for an adversary to determine if a parti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.03692","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.03692/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i9OWUCVXjRqwftss37Dx2Fgq+/wfAf2vJ1xvzpksFLsOcTBqv/LXWxSkfpU/ZrtBvLF5nkRc84gJmFdXT52sAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T18:04:19.948804Z"},"content_sha256":"6f25b89c1a5ce67f479d36eee4e90d39b4e9fe77ee2171d2d58393df50e28962","schema_version":"1.0","event_id":"sha256:6f25b89c1a5ce67f479d36eee4e90d39b4e9fe77ee2171d2d58393df50e28962"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LDQ3GU6HSWQQOU6DHA4LPIMCGU/bundle.json","state_url":"https://pith.science/pith/LDQ3GU6HSWQQOU6DHA4LPIMCGU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LDQ3GU6HSWQQOU6DHA4LPIMCGU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T18:04:19Z","links":{"resolver":"https://pith.science/pith/LDQ3GU6HSWQQOU6DHA4LPIMCGU","bundle":"https://pith.science/pith/LDQ3GU6HSWQQOU6DHA4LPIMCGU/bundle.json","state":"https://pith.science/pith/LDQ3GU6HSWQQOU6DHA4LPIMCGU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LDQ3GU6HSWQQOU6DHA4LPIMCGU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LDQ3GU6HSWQQOU6DHA4LPIMCGU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e51866ee9192c4b9ecf0497a35439fc79887beac6fc04be149de52ffb8973c35","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-06T00:58:21Z","title_canon_sha256":"4cd296367b7b0b9ef9e41330aed93a58d3c9ed79eb91530091434854fa2acfe9"},"schema_version":"1.0","source":{"id":"2502.03692","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.03692","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"arxiv_version","alias_value":"2502.03692v1","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.03692","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"pith_short_12","alias_value":"LDQ3GU6HSWQQ","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"pith_short_16","alias_value":"LDQ3GU6HSWQQOU6D","created_at":"2026-07-05T10:10:13Z"},{"alias_kind":"pith_short_8","alias_value":"LDQ3GU6H","created_at":"2026-07-05T10:10:13Z"}],"graph_snapshots":[{"event_id":"sha256:6f25b89c1a5ce67f479d36eee4e90d39b4e9fe77ee2171d2d58393df50e28962","target":"graph","created_at":"2026-07-05T10:10:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.03692/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Document Visual Question Answering (DocVQA) has introduced a new paradigm for end-to-end document understanding, and quickly became one of the standard benchmarks for multimodal LLMs. Automating document processing workflows, driven by DocVQA models, presents significant potential for many business sectors. However, documents tend to contain highly sensitive information, raising concerns about privacy risks associated with training such DocVQA models. One significant privacy vulnerability, exploited by the membership inference attack, is the possibility for an adversary to determine if a parti","authors_text":"Dimosthenis Karatzas, Khanh Nguyen, Mario Fritz, Raouf Kerkouche","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-06T00:58:21Z","title":"DocMIA: Document-Level Membership Inference Attacks against DocVQA Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.03692","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b42fae095c4c4df2c796ec54d33931746ba8f0ee86deb90937175ac9243afc33","target":"record","created_at":"2026-07-05T10:10:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e51866ee9192c4b9ecf0497a35439fc79887beac6fc04be149de52ffb8973c35","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-06T00:58:21Z","title_canon_sha256":"4cd296367b7b0b9ef9e41330aed93a58d3c9ed79eb91530091434854fa2acfe9"},"schema_version":"1.0","source":{"id":"2502.03692","kind":"arxiv","version":1}},"canonical_sha256":"58e1b353c795a10753c33838b7a1823502d9ede3e637d5150bb2c43d170f4893","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"58e1b353c795a10753c33838b7a1823502d9ede3e637d5150bb2c43d170f4893","first_computed_at":"2026-07-05T10:10:13.823353Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:10:13.823353Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bkmQuPn2JIli28iB8JUp3zzrnMAAWK0PbWnH3JOSXT+3EQEgkemtjIuiqwG+2crJYnAxlcDOiQuhJiz7t07sBw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:10:13.823800Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.03692","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b42fae095c4c4df2c796ec54d33931746ba8f0ee86deb90937175ac9243afc33","sha256:6f25b89c1a5ce67f479d36eee4e90d39b4e9fe77ee2171d2d58393df50e28962"],"state_sha256":"2c6c7c3b0fadfcb309a3b9ac934442f52b94e979f332e3811490c6f1526c0251"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CSvuNzeTnCuS1FZOO3SW9bSyf7OSie2BWPGsiIWPsiu5tihk6MC2A+mKD3r8ONPfrhU5+Z19sx7aQWIRe1O5DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T18:04:19.950905Z","bundle_sha256":"ff877d37dfd8da60367f7b2139b6c6db0ece95c9304502a07cf329e72a38bb0b"}}