{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:NZYTRDWHSN7YFJ3EXKRGUERP45","short_pith_number":"pith:NZYTRDWH","canonical_record":{"source":{"id":"2405.14517","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-23T12:54:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"09942f707eceda537f98dd7c498dfe350c001f14a7c113ec8256e9176ae1c3ef","abstract_canon_sha256":"46276b11bf77736684ca6767b1c8f085f8a1d8b3d1e6387529acc32567fe87db"},"schema_version":"1.0"},"canonical_sha256":"6e71388ec7937f82a764baa26a122fe746ee8622974c2b2ff7df233a50ba37de","source":{"kind":"arxiv","id":"2405.14517","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.14517","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"arxiv_version","alias_value":"2405.14517v2","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.14517","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"pith_short_12","alias_value":"NZYTRDWHSN7Y","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"pith_short_16","alias_value":"NZYTRDWHSN7YFJ3E","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"pith_short_8","alias_value":"NZYTRDWH","created_at":"2026-07-05T10:38:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:NZYTRDWHSN7YFJ3EXKRGUERP45","target":"record","payload":{"canonical_record":{"source":{"id":"2405.14517","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-23T12:54:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"09942f707eceda537f98dd7c498dfe350c001f14a7c113ec8256e9176ae1c3ef","abstract_canon_sha256":"46276b11bf77736684ca6767b1c8f085f8a1d8b3d1e6387529acc32567fe87db"},"schema_version":"1.0"},"canonical_sha256":"6e71388ec7937f82a764baa26a122fe746ee8622974c2b2ff7df233a50ba37de","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:38:33.451696Z","signature_b64":"RJctmid+ImuJliyITje99FD7Utx8Rpphdivcd9ji8sBcfYfriqEKqwuOVPk5A4Kmmu80hNPjdtwHi2+YAtTBDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6e71388ec7937f82a764baa26a122fe746ee8622974c2b2ff7df233a50ba37de","last_reissued_at":"2026-07-05T10:38:33.451285Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:38:33.451285Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.14517","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:38:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7ln7ieAOnA5VqtlEFV7gqd31SoA7vG5D+J7o7vQxROdFahwkq4ODsxi+PPB9p7dFgg9q6OaC9fCKzBYBgUvpBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T21:08:14.987560Z"},"content_sha256":"c7775037f069e3918084e9a69edc4388f5316f56243439209ac2a251cb3f677e","schema_version":"1.0","event_id":"sha256:c7775037f069e3918084e9a69edc4388f5316f56243439209ac2a251cb3f677e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:NZYTRDWHSN7YFJ3EXKRGUERP45","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TUNI: A Textual Unimodal Detector for Identity Inference in CLIP Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Ruoxi Cheng, Songze Li, Xiaojun Jia","submitted_at":"2024-05-23T12:54:25Z","abstract_excerpt":"The widespread usage of large-scale multimodal models like CLIP has heightened concerns about the leakage of PII. Existing methods for identity inference in CLIP models require querying the model with full PII, including textual descriptions of the person and corresponding images (e.g., the name and the face photo of the person). However, applying images may risk exposing personal information to target models, as the image might not have been previously encountered by the target model. Additionally, previous MIAs train shadow models to mimic the behaviors of the target model, which incurs high"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.14517","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.14517/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:38:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ESVMZ7UJKvFrHBk5QdaHeLP7OYvc8TCDogL+B8LHGcoLWjVHpZUvBe6pTM2Gypmt6ggspsaU6sspbuSO8LzkCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T21:08:14.988031Z"},"content_sha256":"742aa30df2d0ee00e442a43fe0a26a82441b791e896606e0a9dfc738961e4b80","schema_version":"1.0","event_id":"sha256:742aa30df2d0ee00e442a43fe0a26a82441b791e896606e0a9dfc738961e4b80"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NZYTRDWHSN7YFJ3EXKRGUERP45/bundle.json","state_url":"https://pith.science/pith/NZYTRDWHSN7YFJ3EXKRGUERP45/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NZYTRDWHSN7YFJ3EXKRGUERP45/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T21:08:14Z","links":{"resolver":"https://pith.science/pith/NZYTRDWHSN7YFJ3EXKRGUERP45","bundle":"https://pith.science/pith/NZYTRDWHSN7YFJ3EXKRGUERP45/bundle.json","state":"https://pith.science/pith/NZYTRDWHSN7YFJ3EXKRGUERP45/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NZYTRDWHSN7YFJ3EXKRGUERP45/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:NZYTRDWHSN7YFJ3EXKRGUERP45","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"46276b11bf77736684ca6767b1c8f085f8a1d8b3d1e6387529acc32567fe87db","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-23T12:54:25Z","title_canon_sha256":"09942f707eceda537f98dd7c498dfe350c001f14a7c113ec8256e9176ae1c3ef"},"schema_version":"1.0","source":{"id":"2405.14517","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.14517","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"arxiv_version","alias_value":"2405.14517v2","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.14517","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"pith_short_12","alias_value":"NZYTRDWHSN7Y","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"pith_short_16","alias_value":"NZYTRDWHSN7YFJ3E","created_at":"2026-07-05T10:38:33Z"},{"alias_kind":"pith_short_8","alias_value":"NZYTRDWH","created_at":"2026-07-05T10:38:33Z"}],"graph_snapshots":[{"event_id":"sha256:742aa30df2d0ee00e442a43fe0a26a82441b791e896606e0a9dfc738961e4b80","target":"graph","created_at":"2026-07-05T10:38:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.14517/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread usage of large-scale multimodal models like CLIP has heightened concerns about the leakage of PII. Existing methods for identity inference in CLIP models require querying the model with full PII, including textual descriptions of the person and corresponding images (e.g., the name and the face photo of the person). However, applying images may risk exposing personal information to target models, as the image might not have been previously encountered by the target model. Additionally, previous MIAs train shadow models to mimic the behaviors of the target model, which incurs high","authors_text":"Ruoxi Cheng, Songze Li, Xiaojun Jia","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-23T12:54:25Z","title":"TUNI: A Textual Unimodal Detector for Identity Inference in CLIP Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.14517","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c7775037f069e3918084e9a69edc4388f5316f56243439209ac2a251cb3f677e","target":"record","created_at":"2026-07-05T10:38:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"46276b11bf77736684ca6767b1c8f085f8a1d8b3d1e6387529acc32567fe87db","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-23T12:54:25Z","title_canon_sha256":"09942f707eceda537f98dd7c498dfe350c001f14a7c113ec8256e9176ae1c3ef"},"schema_version":"1.0","source":{"id":"2405.14517","kind":"arxiv","version":2}},"canonical_sha256":"6e71388ec7937f82a764baa26a122fe746ee8622974c2b2ff7df233a50ba37de","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6e71388ec7937f82a764baa26a122fe746ee8622974c2b2ff7df233a50ba37de","first_computed_at":"2026-07-05T10:38:33.451285Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:38:33.451285Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RJctmid+ImuJliyITje99FD7Utx8Rpphdivcd9ji8sBcfYfriqEKqwuOVPk5A4Kmmu80hNPjdtwHi2+YAtTBDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:38:33.451696Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.14517","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c7775037f069e3918084e9a69edc4388f5316f56243439209ac2a251cb3f677e","sha256:742aa30df2d0ee00e442a43fe0a26a82441b791e896606e0a9dfc738961e4b80"],"state_sha256":"4fcac80558487e5f7bad42ea3c2d220969dc4130737ba39a2e3825ad48b81672"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q6qRhmjUp/pamfnGR8lZhM+vYUQPxdXV72KrpAtJHjBhowTPS8JlSmNz6uzKmnJAOL5i9pQ2J+Ux9jFoabPTCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T21:08:14.990696Z","bundle_sha256":"3a8c132b7041f8a8100bea0890e1b9e77a1ee330535396f9a9749051bf47bf64"}}