{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MCBYWFJEB2GC7OUJA6ZCECQUTF","short_pith_number":"pith:MCBYWFJE","canonical_record":{"source":{"id":"2402.16893","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T18:35:15Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"7cb71b87cdf8ac54cd69decaf22b63a950cf0c23408ad0851c2269271da9eb36","abstract_canon_sha256":"e57d4f5884c2da0758afc9a706243255a75c698a37a823f12e4022e7ada451d9"},"schema_version":"1.0"},"canonical_sha256":"60838b15240e8c2fba8907b2220a149973f355e4dd2ffba81b97081855a61514","source":{"kind":"arxiv","id":"2402.16893","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16893","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16893v1","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16893","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"pith_short_12","alias_value":"MCBYWFJEB2GC","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"pith_short_16","alias_value":"MCBYWFJEB2GC7OUJ","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"pith_short_8","alias_value":"MCBYWFJE","created_at":"2026-07-05T07:50:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MCBYWFJEB2GC7OUJA6ZCECQUTF","target":"record","payload":{"canonical_record":{"source":{"id":"2402.16893","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T18:35:15Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"7cb71b87cdf8ac54cd69decaf22b63a950cf0c23408ad0851c2269271da9eb36","abstract_canon_sha256":"e57d4f5884c2da0758afc9a706243255a75c698a37a823f12e4022e7ada451d9"},"schema_version":"1.0"},"canonical_sha256":"60838b15240e8c2fba8907b2220a149973f355e4dd2ffba81b97081855a61514","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:50:46.184645Z","signature_b64":"QDT+cNOaJgZUHNJVt1VMwoggcI7XamXaJlhL1LSU/BI7mkiqdkH9Q7U/CyWuI/qvArbu+v+FBO6i9RSB6n1gAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"60838b15240e8c2fba8907b2220a149973f355e4dd2ffba81b97081855a61514","last_reissued_at":"2026-07-05T07:50:46.184176Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:50:46.184176Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.16893","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DvBmTFINszDWvJylHYSAjaOLvsec5/AYgoZZrvKWHIXYcawPwbxQzwcG8BO7tCcdK7tj2d+Aym1GeEr1ugMQCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T23:53:00.128362Z"},"content_sha256":"47024b4daa3dca2e20b6068812c4034047023f781e0b98c91972f15d833f1595","schema_version":"1.0","event_id":"sha256:47024b4daa3dca2e20b6068812c4034047023f781e0b98c91972f15d833f1595"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MCBYWFJEB2GC7OUJA6ZCECQUTF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Dawei Yin, Han Xu, Jiankun Zhang, Jie Ren, Jiliang Tang, Pengfei He, Shenglai Zeng, Shuaiqiang Wang, Yi Chang, Yiding Liu, Yue Xing","submitted_at":"2024-02-23T18:35:15Z","abstract_excerpt":"Retrieval-augmented generation (RAG) is a powerful technique to facilitate language model with proprietary and private data, where data privacy is a pivotal concern. Whereas extensive research has demonstrated the privacy risks of large language models (LLMs), the RAG technique could potentially reshape the inherent behaviors of LLM generation, posing new privacy issues that are currently under-explored. In this work, we conduct extensive empirical studies with novel attack methods, which demonstrate the vulnerability of RAG systems on leaking the private retrieval database. Despite the new ri"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16893","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.16893/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gB4xPwzzfgURHlUvGEgoohssQ+QUp5GBMkJAEVzHkfswWT+Ot0amybdT5vNz8QFHnS6Zw5zBYiVD0hQp3DPRDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T23:53:00.128849Z"},"content_sha256":"70dd26b89d044a7e52269f1c91c148ce6cd7265182dbf89fb152cd70f4791f4c","schema_version":"1.0","event_id":"sha256:70dd26b89d044a7e52269f1c91c148ce6cd7265182dbf89fb152cd70f4791f4c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MCBYWFJEB2GC7OUJA6ZCECQUTF/bundle.json","state_url":"https://pith.science/pith/MCBYWFJEB2GC7OUJA6ZCECQUTF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MCBYWFJEB2GC7OUJA6ZCECQUTF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T23:53:00Z","links":{"resolver":"https://pith.science/pith/MCBYWFJEB2GC7OUJA6ZCECQUTF","bundle":"https://pith.science/pith/MCBYWFJEB2GC7OUJA6ZCECQUTF/bundle.json","state":"https://pith.science/pith/MCBYWFJEB2GC7OUJA6ZCECQUTF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MCBYWFJEB2GC7OUJA6ZCECQUTF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MCBYWFJEB2GC7OUJA6ZCECQUTF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e57d4f5884c2da0758afc9a706243255a75c698a37a823f12e4022e7ada451d9","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T18:35:15Z","title_canon_sha256":"7cb71b87cdf8ac54cd69decaf22b63a950cf0c23408ad0851c2269271da9eb36"},"schema_version":"1.0","source":{"id":"2402.16893","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16893","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16893v1","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16893","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"pith_short_12","alias_value":"MCBYWFJEB2GC","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"pith_short_16","alias_value":"MCBYWFJEB2GC7OUJ","created_at":"2026-07-05T07:50:46Z"},{"alias_kind":"pith_short_8","alias_value":"MCBYWFJE","created_at":"2026-07-05T07:50:46Z"}],"graph_snapshots":[{"event_id":"sha256:70dd26b89d044a7e52269f1c91c148ce6cd7265182dbf89fb152cd70f4791f4c","target":"graph","created_at":"2026-07-05T07:50:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.16893/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-augmented generation (RAG) is a powerful technique to facilitate language model with proprietary and private data, where data privacy is a pivotal concern. Whereas extensive research has demonstrated the privacy risks of large language models (LLMs), the RAG technique could potentially reshape the inherent behaviors of LLM generation, posing new privacy issues that are currently under-explored. In this work, we conduct extensive empirical studies with novel attack methods, which demonstrate the vulnerability of RAG systems on leaking the private retrieval database. Despite the new ri","authors_text":"Dawei Yin, Han Xu, Jiankun Zhang, Jie Ren, Jiliang Tang, Pengfei He, Shenglai Zeng, Shuaiqiang Wang, Yi Chang, Yiding Liu, Yue Xing","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T18:35:15Z","title":"The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16893","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:47024b4daa3dca2e20b6068812c4034047023f781e0b98c91972f15d833f1595","target":"record","created_at":"2026-07-05T07:50:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e57d4f5884c2da0758afc9a706243255a75c698a37a823f12e4022e7ada451d9","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T18:35:15Z","title_canon_sha256":"7cb71b87cdf8ac54cd69decaf22b63a950cf0c23408ad0851c2269271da9eb36"},"schema_version":"1.0","source":{"id":"2402.16893","kind":"arxiv","version":1}},"canonical_sha256":"60838b15240e8c2fba8907b2220a149973f355e4dd2ffba81b97081855a61514","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"60838b15240e8c2fba8907b2220a149973f355e4dd2ffba81b97081855a61514","first_computed_at":"2026-07-05T07:50:46.184176Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:50:46.184176Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QDT+cNOaJgZUHNJVt1VMwoggcI7XamXaJlhL1LSU/BI7mkiqdkH9Q7U/CyWuI/qvArbu+v+FBO6i9RSB6n1gAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:50:46.184645Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.16893","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:47024b4daa3dca2e20b6068812c4034047023f781e0b98c91972f15d833f1595","sha256:70dd26b89d044a7e52269f1c91c148ce6cd7265182dbf89fb152cd70f4791f4c"],"state_sha256":"ee5e16eb0d87ede8690945014c605d2d8c5dd4339c4b1525c0ad6b76598ffd90"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wtUNHncpDhN/Eh3hDrUyZnUCfBDfyDJK0v84sBXNTyJwqLd1X8XBWHQZ59wLkUynILA1wQf//zF7BeKcpu7kAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T23:53:00.132745Z","bundle_sha256":"3ff4b9ffa6c34f5c1198a9aad680d06892c2bd48d45bfeb4604739f5b1bde30e"}}