{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MOZIZPBUSEATO74TNB5ZAKNFKF","short_pith_number":"pith:MOZIZPBU","canonical_record":{"source":{"id":"2401.12192","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2024-01-22T18:34:42Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"60ead735aa5c1474a1dc21edf3aeab5f2d72f5381e5e80b996bfb0173d5267ba","abstract_canon_sha256":"a8e787f7a64eb18e5e2a9e188b3e804ded8fd791727869dfc6ed94da189a7eae"},"schema_version":"1.0"},"canonical_sha256":"63b28cbc349101377f93687b9029a55152b94cee21e876dd4f8d1dd508c9f424","source":{"kind":"arxiv","id":"2401.12192","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.12192","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"arxiv_version","alias_value":"2401.12192v4","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.12192","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"pith_short_12","alias_value":"MOZIZPBUSEAT","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"pith_short_16","alias_value":"MOZIZPBUSEATO74T","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"pith_short_8","alias_value":"MOZIZPBU","created_at":"2026-07-05T08:27:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MOZIZPBUSEATO74TNB5ZAKNFKF","target":"record","payload":{"canonical_record":{"source":{"id":"2401.12192","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2024-01-22T18:34:42Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"60ead735aa5c1474a1dc21edf3aeab5f2d72f5381e5e80b996bfb0173d5267ba","abstract_canon_sha256":"a8e787f7a64eb18e5e2a9e188b3e804ded8fd791727869dfc6ed94da189a7eae"},"schema_version":"1.0"},"canonical_sha256":"63b28cbc349101377f93687b9029a55152b94cee21e876dd4f8d1dd508c9f424","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:27:45.578076Z","signature_b64":"/X/tvlo5dGMc0QWGZWmhBA+e1YkUaJSDXBP5r8XHbxk6Nqrf2pLDUpcjG8fyysqqCRI8ygI5gW0GP2M5JCyZCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"63b28cbc349101377f93687b9029a55152b94cee21e876dd4f8d1dd508c9f424","last_reissued_at":"2026-07-05T08:27:45.577547Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:27:45.577547Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.12192","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oexhNdQmVazzwBOwVDj/Ug6s2AIUM93qNBEYKylWp0craYL0xALP3OM85JJuS1gcCl+PMfhHj1elTGBTLDYLBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T05:27:03.740543Z"},"content_sha256":"6edcb404f5897ca88d56bb69f76f03718915cdc8afe89d758f8f286efa3bd2f6","schema_version":"1.0","event_id":"sha256:6edcb404f5897ca88d56bb69f76f03718915cdc8afe89d758f8f286efa3bd2f6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MOZIZPBUSEATO74TNB5ZAKNFKF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Text Embedding Inversion Security for Multilingual Language Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Heather Lent, Johannes Bjerva, Yiyi Chen","submitted_at":"2024-01-22T18:34:42Z","abstract_excerpt":"Textual data is often represented as real-numbered embeddings in NLP, particularly with the popularity of large language models (LLMs) and Embeddings as a Service (EaaS). However, storing sensitive information as embeddings can be susceptible to security breaches, as research shows that text can be reconstructed from embeddings, even without knowledge of the underlying model. While defence mechanisms have been explored, these are exclusively focused on English, leaving other languages potentially exposed to attacks. This work explores LLM security through multilingual embedding inversion. We d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.12192","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.12192/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZkA0DfRVn098ThTNIESdbOJL0IwIfrn7xen/sKCy0h2/O3qAscNoEfuO7eZ48L2lwiXlrEWkMyPdsNK87YNYAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T05:27:03.741772Z"},"content_sha256":"7cf77d1bc3a94956feaf621c0a4889f59b3f2b6f400428650bc552f10456d760","schema_version":"1.0","event_id":"sha256:7cf77d1bc3a94956feaf621c0a4889f59b3f2b6f400428650bc552f10456d760"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MOZIZPBUSEATO74TNB5ZAKNFKF/bundle.json","state_url":"https://pith.science/pith/MOZIZPBUSEATO74TNB5ZAKNFKF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MOZIZPBUSEATO74TNB5ZAKNFKF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T05:27:03Z","links":{"resolver":"https://pith.science/pith/MOZIZPBUSEATO74TNB5ZAKNFKF","bundle":"https://pith.science/pith/MOZIZPBUSEATO74TNB5ZAKNFKF/bundle.json","state":"https://pith.science/pith/MOZIZPBUSEATO74TNB5ZAKNFKF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MOZIZPBUSEATO74TNB5ZAKNFKF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MOZIZPBUSEATO74TNB5ZAKNFKF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a8e787f7a64eb18e5e2a9e188b3e804ded8fd791727869dfc6ed94da189a7eae","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2024-01-22T18:34:42Z","title_canon_sha256":"60ead735aa5c1474a1dc21edf3aeab5f2d72f5381e5e80b996bfb0173d5267ba"},"schema_version":"1.0","source":{"id":"2401.12192","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.12192","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"arxiv_version","alias_value":"2401.12192v4","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.12192","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"pith_short_12","alias_value":"MOZIZPBUSEAT","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"pith_short_16","alias_value":"MOZIZPBUSEATO74T","created_at":"2026-07-05T08:27:45Z"},{"alias_kind":"pith_short_8","alias_value":"MOZIZPBU","created_at":"2026-07-05T08:27:45Z"}],"graph_snapshots":[{"event_id":"sha256:7cf77d1bc3a94956feaf621c0a4889f59b3f2b6f400428650bc552f10456d760","target":"graph","created_at":"2026-07-05T08:27:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.12192/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Textual data is often represented as real-numbered embeddings in NLP, particularly with the popularity of large language models (LLMs) and Embeddings as a Service (EaaS). However, storing sensitive information as embeddings can be susceptible to security breaches, as research shows that text can be reconstructed from embeddings, even without knowledge of the underlying model. While defence mechanisms have been explored, these are exclusively focused on English, leaving other languages potentially exposed to attacks. This work explores LLM security through multilingual embedding inversion. We d","authors_text":"Heather Lent, Johannes Bjerva, Yiyi Chen","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2024-01-22T18:34:42Z","title":"Text Embedding Inversion Security for Multilingual Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.12192","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6edcb404f5897ca88d56bb69f76f03718915cdc8afe89d758f8f286efa3bd2f6","target":"record","created_at":"2026-07-05T08:27:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a8e787f7a64eb18e5e2a9e188b3e804ded8fd791727869dfc6ed94da189a7eae","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2024-01-22T18:34:42Z","title_canon_sha256":"60ead735aa5c1474a1dc21edf3aeab5f2d72f5381e5e80b996bfb0173d5267ba"},"schema_version":"1.0","source":{"id":"2401.12192","kind":"arxiv","version":4}},"canonical_sha256":"63b28cbc349101377f93687b9029a55152b94cee21e876dd4f8d1dd508c9f424","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"63b28cbc349101377f93687b9029a55152b94cee21e876dd4f8d1dd508c9f424","first_computed_at":"2026-07-05T08:27:45.577547Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:27:45.577547Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/X/tvlo5dGMc0QWGZWmhBA+e1YkUaJSDXBP5r8XHbxk6Nqrf2pLDUpcjG8fyysqqCRI8ygI5gW0GP2M5JCyZCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:27:45.578076Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.12192","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6edcb404f5897ca88d56bb69f76f03718915cdc8afe89d758f8f286efa3bd2f6","sha256:7cf77d1bc3a94956feaf621c0a4889f59b3f2b6f400428650bc552f10456d760"],"state_sha256":"b5e60e22c71d2e8e373f8eeec13275ef2254e8873b036763a77cf5699b6f6623"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W3F08+ZxYSVMSY5Hurj7jpyoM3qrJtDT4QTwZRBlDhS7BF3XeeQjEH1Q/gtx9xZ+hApv8HUAadrDZVZD3FY6DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T05:27:03.747385Z","bundle_sha256":"b20229dc1269a109dd64788435ec8c4a94b63ba5a5eaae21fded2d65f5cefb43"}}