{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:QHBRCIDKGCHI6MVL3NTW3QTDIS","short_pith_number":"pith:QHBRCIDK","canonical_record":{"source":{"id":"2608.02154","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T12:35:51Z","cross_cats_sorted":[],"title_canon_sha256":"097c038738c404fff2fd0753ae49cb49b15763ec035367a65da0fd0623beb381","abstract_canon_sha256":"b9bded754e4c9dc0a98f1ba4d2eaec67ec5077bf8baee10af506e442afab32ce"},"schema_version":"1.0"},"canonical_sha256":"81c311206a308e8f32abdb676dc26344bb7c24ad2b7f6bb80b8bbbd9348532e6","source":{"kind":"arxiv","id":"2608.02154","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.02154","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"arxiv_version","alias_value":"2608.02154v1","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.02154","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"pith_short_12","alias_value":"QHBRCIDKGCHI","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"pith_short_16","alias_value":"QHBRCIDKGCHI6MVL","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"pith_short_8","alias_value":"QHBRCIDK","created_at":"2026-08-04T02:11:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:QHBRCIDKGCHI6MVL3NTW3QTDIS","target":"record","payload":{"canonical_record":{"source":{"id":"2608.02154","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T12:35:51Z","cross_cats_sorted":[],"title_canon_sha256":"097c038738c404fff2fd0753ae49cb49b15763ec035367a65da0fd0623beb381","abstract_canon_sha256":"b9bded754e4c9dc0a98f1ba4d2eaec67ec5077bf8baee10af506e442afab32ce"},"schema_version":"1.0"},"canonical_sha256":"81c311206a308e8f32abdb676dc26344bb7c24ad2b7f6bb80b8bbbd9348532e6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T02:11:07.389487Z","signature_b64":"PEHMMe7MmRTAWAqSgkqF6vS2apuugKcxBpT4dE+lBZk/eIglyfjq+Xix8PM1IO/wQp8iudlDtI8oGRIJriGKAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"81c311206a308e8f32abdb676dc26344bb7c24ad2b7f6bb80b8bbbd9348532e6","last_reissued_at":"2026-08-04T02:11:07.387998Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T02:11:07.387998Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.02154","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:11:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ugm4TljDl/JyAj0gA1zn0myADOIed6C1vFuzNb44SNromu71THfaOuerRj3uHNjCnfgQlrnLtVzwDjBm6SCIBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:39:15.954824Z"},"content_sha256":"17ed67f2e38f512dd545a2ad089d521203e9a6e6fa6a6c1c37b12a801637c59d","schema_version":"1.0","event_id":"sha256:17ed67f2e38f512dd545a2ad089d521203e9a6e6fa6a6c1c37b12a801637c59d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:QHBRCIDKGCHI6MVL3NTW3QTDIS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Auditing Data Provenance in LLM Fine-tuning via Intrinsic Distributional Fingerprints","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Sheng Zhong, Tingting Wu, Wei Tong, Xin Ge, Yunlong Mao, Zirui Huang","submitted_at":"2026-08-03T12:35:51Z","abstract_excerpt":"The proliferation of customized Large Language Models (LLMs) poses critical risks of Data Intellectual Property (Data IP) infringement via unauthorized fine-tuning on proprietary data. Existing audit techniques are limited, as they require intervention during data preparation or training and remain fragile under malicious obfuscations such as data paraphrasing and knowledge distillation.\n  We propose \\textit{Distribution Provenance Audit (DPA)}, a post-hoc framework for auditing data IP infringement in LLM fine-tuning under black-box and malicious settings. DPA is grounded in a critical insigh"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.02154","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.02154/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:11:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ze2ZYzOUDDNdHXiFoa1HYTvQ07kUkvJBAxzxBNwl7VEDHJKz2dWDXQmHu8N4CylI3yfFJra3UJp1khLq93slBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:39:15.955708Z"},"content_sha256":"cd570143c49e40dcaf6738e759dd270549afd03af9a446eb333dae6d84ec60f1","schema_version":"1.0","event_id":"sha256:cd570143c49e40dcaf6738e759dd270549afd03af9a446eb333dae6d84ec60f1"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:QHBRCIDKGCHI6MVL3NTW3QTDIS","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2023.acl-long.754) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Yizhong Wang, Yeganeh Kordi, Swaroop Mishra, Alisa Liu, Noah A. Smith, Daniel Khashabi, and Hannaneh Hajishirzi. 2023. Self-Instruct: Aligning Language Mod- els with Self-Generated Instructions. InProceedings of the 61st Annual Meeting of t","arxiv_id":"2608.02154","detector":"doi_compliance","evidence":{"ref_index":49,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/2023.acl-","reconstructed_doi":"10.18653/v1/2023.acl-long.754"},"severity":"advisory","ref_index":49,"audited_at":"2026-08-04T13:48:33.006728Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2023.acl-long.754","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"ba878b7a015f4fd4becfc8de8df68cc24210e6c88959e0870e035048d556e9f2","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":17881,"payload_sha256":"1ee28503506f92de59de7d5d6df2c68a1e1fbb4487aa49af2eb6c40082c5e16b","signature_b64":"GJbHpj/NOye090isnotxOaPNbHHY5dCSih9SsEQJNtn/GErTILqPHqFCv+GZXBc3W5mEdlxj+3Gyky2CNRlLDg==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T13:53:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D4pD7fWrNml0qzAT+9u7WgS9VIDofKCwfnnN3isHE5DE1veNjSR+bMGkHW5GWC8et4qC9nhW/VZoO6SWaLNoAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:39:15.977977Z"},"content_sha256":"83a066625c54c38f2d007288b8afb49b16b1599a2b8d1ea19f33126a59b3bf10","schema_version":"1.0","event_id":"sha256:83a066625c54c38f2d007288b8afb49b16b1599a2b8d1ea19f33126a59b3bf10"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QHBRCIDKGCHI6MVL3NTW3QTDIS/bundle.json","state_url":"https://pith.science/pith/QHBRCIDKGCHI6MVL3NTW3QTDIS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QHBRCIDKGCHI6MVL3NTW3QTDIS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T09:39:15Z","links":{"resolver":"https://pith.science/pith/QHBRCIDKGCHI6MVL3NTW3QTDIS","bundle":"https://pith.science/pith/QHBRCIDKGCHI6MVL3NTW3QTDIS/bundle.json","state":"https://pith.science/pith/QHBRCIDKGCHI6MVL3NTW3QTDIS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QHBRCIDKGCHI6MVL3NTW3QTDIS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:QHBRCIDKGCHI6MVL3NTW3QTDIS","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b9bded754e4c9dc0a98f1ba4d2eaec67ec5077bf8baee10af506e442afab32ce","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T12:35:51Z","title_canon_sha256":"097c038738c404fff2fd0753ae49cb49b15763ec035367a65da0fd0623beb381"},"schema_version":"1.0","source":{"id":"2608.02154","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.02154","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"arxiv_version","alias_value":"2608.02154v1","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.02154","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"pith_short_12","alias_value":"QHBRCIDKGCHI","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"pith_short_16","alias_value":"QHBRCIDKGCHI6MVL","created_at":"2026-08-04T02:11:07Z"},{"alias_kind":"pith_short_8","alias_value":"QHBRCIDK","created_at":"2026-08-04T02:11:07Z"}],"graph_snapshots":[{"event_id":"sha256:cd570143c49e40dcaf6738e759dd270549afd03af9a446eb333dae6d84ec60f1","target":"graph","created_at":"2026-08-04T02:11:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.02154/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The proliferation of customized Large Language Models (LLMs) poses critical risks of Data Intellectual Property (Data IP) infringement via unauthorized fine-tuning on proprietary data. Existing audit techniques are limited, as they require intervention during data preparation or training and remain fragile under malicious obfuscations such as data paraphrasing and knowledge distillation.\n  We propose \\textit{Distribution Provenance Audit (DPA)}, a post-hoc framework for auditing data IP infringement in LLM fine-tuning under black-box and malicious settings. DPA is grounded in a critical insigh","authors_text":"Sheng Zhong, Tingting Wu, Wei Tong, Xin Ge, Yunlong Mao, Zirui Huang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T12:35:51Z","title":"Auditing Data Provenance in LLM Fine-tuning via Intrinsic Distributional Fingerprints"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.02154","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:17ed67f2e38f512dd545a2ad089d521203e9a6e6fa6a6c1c37b12a801637c59d","target":"record","created_at":"2026-08-04T02:11:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b9bded754e4c9dc0a98f1ba4d2eaec67ec5077bf8baee10af506e442afab32ce","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T12:35:51Z","title_canon_sha256":"097c038738c404fff2fd0753ae49cb49b15763ec035367a65da0fd0623beb381"},"schema_version":"1.0","source":{"id":"2608.02154","kind":"arxiv","version":1}},"canonical_sha256":"81c311206a308e8f32abdb676dc26344bb7c24ad2b7f6bb80b8bbbd9348532e6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"81c311206a308e8f32abdb676dc26344bb7c24ad2b7f6bb80b8bbbd9348532e6","first_computed_at":"2026-08-04T02:11:07.387998Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T02:11:07.387998Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PEHMMe7MmRTAWAqSgkqF6vS2apuugKcxBpT4dE+lBZk/eIglyfjq+Xix8PM1IO/wQp8iudlDtI8oGRIJriGKAg==","signature_status":"signed_v1","signed_at":"2026-08-04T02:11:07.389487Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.02154","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:17ed67f2e38f512dd545a2ad089d521203e9a6e6fa6a6c1c37b12a801637c59d","sha256:cd570143c49e40dcaf6738e759dd270549afd03af9a446eb333dae6d84ec60f1","sha256:83a066625c54c38f2d007288b8afb49b16b1599a2b8d1ea19f33126a59b3bf10"],"state_sha256":"278e8ab7b6cb3cda3421de8aede1890a3c75c76f21cde4c3246031683cc39ee1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0MeDXc17b5EmmbUtfyAmullcdSmkQvcYrHCpCIEaCWgxKfZP3AQXfCvIt8f8aSdebrt0VeMvqfoiu8a2Uf9uBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T09:39:15.988870Z","bundle_sha256":"cf46e1c0ad4457a3f84a19ecf1a5b5fb83cf274df53aa3d1be8dd3c6733710c8"}}