{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:P4WS4P2GHCTYJLIOSLVGGYWUDL","short_pith_number":"pith:P4WS4P2G","canonical_record":{"source":{"id":"2402.13659","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-21T09:45:08Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"b18d4b73738ae3cebe31680f84ff231fd5ee79cb068cd6cfdebf0a07f6acd013","abstract_canon_sha256":"fc218b8cd7efa51cc272795c454cfc2f7471366eaa88ff04dcea4bc7e5a31963"},"schema_version":"1.0"},"canonical_sha256":"7f2d2e3f4638a784ad0e92ea6362d41ad267a56d5b7ebb522da43e278e3fecc8","source":{"kind":"arxiv","id":"2402.13659","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.13659","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"arxiv_version","alias_value":"2402.13659v2","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.13659","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"pith_short_12","alias_value":"P4WS4P2GHCTY","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"pith_short_16","alias_value":"P4WS4P2GHCTYJLIO","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"pith_short_8","alias_value":"P4WS4P2G","created_at":"2026-07-05T08:38:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:P4WS4P2GHCTYJLIOSLVGGYWUDL","target":"record","payload":{"canonical_record":{"source":{"id":"2402.13659","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-21T09:45:08Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"b18d4b73738ae3cebe31680f84ff231fd5ee79cb068cd6cfdebf0a07f6acd013","abstract_canon_sha256":"fc218b8cd7efa51cc272795c454cfc2f7471366eaa88ff04dcea4bc7e5a31963"},"schema_version":"1.0"},"canonical_sha256":"7f2d2e3f4638a784ad0e92ea6362d41ad267a56d5b7ebb522da43e278e3fecc8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:38:57.680836Z","signature_b64":"VXqJW5ZzfuO5M6/FHkcKRZKp7wopp+u4Qh/Oqsim7qLw9P+WL+SQvRH19RZ/AWEfZc09M9KSkLDHrL/C8cgoCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7f2d2e3f4638a784ad0e92ea6362d41ad267a56d5b7ebb522da43e278e3fecc8","last_reissued_at":"2026-07-05T08:38:57.680431Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:38:57.680431Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.13659","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:38:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tfqDLxT/PIt4EoTsXzGuaYbNyTqiUbMmeZYCr5j1ABsKQNKfOnLnyjfmk4L+7h958pWS9CKtiOuecxdUh254BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:22:30.558767Z"},"content_sha256":"7ee40e7ce30dfd05fdf8475aaa10cab17980545cc5e87bd6fa22e684c86c3249","schema_version":"1.0","event_id":"sha256:7ee40e7ce30dfd05fdf8475aaa10cab17980545cc5e87bd6fa22e684c86c3249"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:P4WS4P2GHCTYJLIOSLVGGYWUDL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy-Preserving Instructions for Aligning Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Da Yu, Peter Kairouz, Sewoong Oh, Zheng Xu","submitted_at":"2024-02-21T09:45:08Z","abstract_excerpt":"Service providers of large language model (LLM) applications collect user instructions in the wild and use them in further aligning LLMs with users' intentions. These instructions, which potentially contain sensitive information, are annotated by human workers in the process. This poses a new privacy risk not addressed by the typical private optimization. To this end, we propose using synthetic instructions to replace real instructions in data annotation and model fine-tuning. Formal differential privacy is guaranteed by generating those synthetic instructions using privately fine-tuned genera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.13659","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.13659/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:38:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Oig3W+HIjsI1zPN4cQ58MjVnsAmD/DGhFIGpjw6OHrsBX6JqETALnYz9M25uzl6NXfQlQUqme2dyv5Zq0sR+CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:22:30.559425Z"},"content_sha256":"0a8e58ce45f23ed876e4737ea20c43f5d399b5e2fc2d7547137a88c27d31226d","schema_version":"1.0","event_id":"sha256:0a8e58ce45f23ed876e4737ea20c43f5d399b5e2fc2d7547137a88c27d31226d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P4WS4P2GHCTYJLIOSLVGGYWUDL/bundle.json","state_url":"https://pith.science/pith/P4WS4P2GHCTYJLIOSLVGGYWUDL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P4WS4P2GHCTYJLIOSLVGGYWUDL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T12:22:30Z","links":{"resolver":"https://pith.science/pith/P4WS4P2GHCTYJLIOSLVGGYWUDL","bundle":"https://pith.science/pith/P4WS4P2GHCTYJLIOSLVGGYWUDL/bundle.json","state":"https://pith.science/pith/P4WS4P2GHCTYJLIOSLVGGYWUDL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P4WS4P2GHCTYJLIOSLVGGYWUDL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:P4WS4P2GHCTYJLIOSLVGGYWUDL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fc218b8cd7efa51cc272795c454cfc2f7471366eaa88ff04dcea4bc7e5a31963","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-21T09:45:08Z","title_canon_sha256":"b18d4b73738ae3cebe31680f84ff231fd5ee79cb068cd6cfdebf0a07f6acd013"},"schema_version":"1.0","source":{"id":"2402.13659","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.13659","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"arxiv_version","alias_value":"2402.13659v2","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.13659","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"pith_short_12","alias_value":"P4WS4P2GHCTY","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"pith_short_16","alias_value":"P4WS4P2GHCTYJLIO","created_at":"2026-07-05T08:38:57Z"},{"alias_kind":"pith_short_8","alias_value":"P4WS4P2G","created_at":"2026-07-05T08:38:57Z"}],"graph_snapshots":[{"event_id":"sha256:0a8e58ce45f23ed876e4737ea20c43f5d399b5e2fc2d7547137a88c27d31226d","target":"graph","created_at":"2026-07-05T08:38:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.13659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Service providers of large language model (LLM) applications collect user instructions in the wild and use them in further aligning LLMs with users' intentions. These instructions, which potentially contain sensitive information, are annotated by human workers in the process. This poses a new privacy risk not addressed by the typical private optimization. To this end, we propose using synthetic instructions to replace real instructions in data annotation and model fine-tuning. Formal differential privacy is guaranteed by generating those synthetic instructions using privately fine-tuned genera","authors_text":"Da Yu, Peter Kairouz, Sewoong Oh, Zheng Xu","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-21T09:45:08Z","title":"Privacy-Preserving Instructions for Aligning Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.13659","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7ee40e7ce30dfd05fdf8475aaa10cab17980545cc5e87bd6fa22e684c86c3249","target":"record","created_at":"2026-07-05T08:38:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fc218b8cd7efa51cc272795c454cfc2f7471366eaa88ff04dcea4bc7e5a31963","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-21T09:45:08Z","title_canon_sha256":"b18d4b73738ae3cebe31680f84ff231fd5ee79cb068cd6cfdebf0a07f6acd013"},"schema_version":"1.0","source":{"id":"2402.13659","kind":"arxiv","version":2}},"canonical_sha256":"7f2d2e3f4638a784ad0e92ea6362d41ad267a56d5b7ebb522da43e278e3fecc8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7f2d2e3f4638a784ad0e92ea6362d41ad267a56d5b7ebb522da43e278e3fecc8","first_computed_at":"2026-07-05T08:38:57.680431Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:38:57.680431Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VXqJW5ZzfuO5M6/FHkcKRZKp7wopp+u4Qh/Oqsim7qLw9P+WL+SQvRH19RZ/AWEfZc09M9KSkLDHrL/C8cgoCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:38:57.680836Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.13659","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7ee40e7ce30dfd05fdf8475aaa10cab17980545cc5e87bd6fa22e684c86c3249","sha256:0a8e58ce45f23ed876e4737ea20c43f5d399b5e2fc2d7547137a88c27d31226d"],"state_sha256":"888be689e346ef8e57659e5f20f04152f18cb06a5851f104178dff533f73a5ad"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8WrOFfMzmhB0UXWhy4tD+rnLXYeMBGAbOUHdFNr3ZPT5TTI/yPlDBdgnqqmbYXdZwkpQ/+9U0JwXHjn5WNPBDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T12:22:30.563912Z","bundle_sha256":"f05fec3d88cfd7351de91ec1c104f187ebbc3b57dedff5b404d543a888640f21"}}