{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QV5KEGVOZCLF6BQGDGCGDBE7PT","short_pith_number":"pith:QV5KEGVO","canonical_record":{"source":{"id":"2411.01604","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T15:20:21Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"297fe56a81785def7fa6870a6a8e433c1960f78646d46b2ec5663cc5d72f5a31","abstract_canon_sha256":"ebd53ed058eb3de65561430c2d8e80a69a6fc8976a170617dcddd3874e5af51d"},"schema_version":"1.0"},"canonical_sha256":"857aa21aaec8965f0606198461849f7ce4ee4c7b94ad7a8f54f9e42c5d139a4e","source":{"kind":"arxiv","id":"2411.01604","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.01604","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"arxiv_version","alias_value":"2411.01604v1","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.01604","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"pith_short_12","alias_value":"QV5KEGVOZCLF","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"pith_short_16","alias_value":"QV5KEGVOZCLF6BQG","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"pith_short_8","alias_value":"QV5KEGVO","created_at":"2026-07-05T09:30:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QV5KEGVOZCLF6BQGDGCGDBE7PT","target":"record","payload":{"canonical_record":{"source":{"id":"2411.01604","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T15:20:21Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"297fe56a81785def7fa6870a6a8e433c1960f78646d46b2ec5663cc5d72f5a31","abstract_canon_sha256":"ebd53ed058eb3de65561430c2d8e80a69a6fc8976a170617dcddd3874e5af51d"},"schema_version":"1.0"},"canonical_sha256":"857aa21aaec8965f0606198461849f7ce4ee4c7b94ad7a8f54f9e42c5d139a4e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:30:32.997263Z","signature_b64":"JDaWQdhNXcbcApdrh3y1bdJyTMTkhkBjNAR2CreEhoI5C+8VJ/v9rPJofHc718d6Ce3cit4WMubUaM5Sb8EeDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"857aa21aaec8965f0606198461849f7ce4ee4c7b94ad7a8f54f9e42c5d139a4e","last_reissued_at":"2026-07-05T09:30:32.996826Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:30:32.996826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.01604","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:30:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"afH5LZix0L/BqZR9BWo1qAMRNmUTSsPW9aZogf5dx2JZI3u16aPkMS0nu1og4A9Uz2BwyHi+Ug9sRcwsY2sNDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:06:23.984257Z"},"content_sha256":"cee1f60842b32c6a9e82afd03ebbea30b06e2cc8ebe04d2fd57ad9f170c93ef4","schema_version":"1.0","event_id":"sha256:cee1f60842b32c6a9e82afd03ebbea30b06e2cc8ebe04d2fd57ad9f170c93ef4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QV5KEGVOZCLF6BQGDGCGDBE7PT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Large Language Model Supply Chain: Open Problems From the Security Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.SE"],"primary_cat":"cs.CR","authors_text":"Lei Ma, Qiang Hu, Sen Chen, Xiaofei Xie","submitted_at":"2024-11-03T15:20:21Z","abstract_excerpt":"Large Language Model (LLM) is changing the software development paradigm and has gained huge attention from both academia and industry. Researchers and developers collaboratively explore how to leverage the powerful problem-solving ability of LLMs for specific domain tasks. Due to the wide usage of LLM-based applications, e.g., ChatGPT, multiple works have been proposed to ensure the security of LLM systems. However, a comprehensive understanding of the entire processes of LLM system construction (the LLM supply chain) is crucial but relevant works are limited. More importantly, the security i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.01604","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.01604/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:30:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6MoxRyQdVNKza1i9HQUtyVdMTYGSK8zbpu3jXjmBCrmobWx2PwNU3obi4ITfw2Frt7IYIBxbvI43/RTgInrdAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:06:23.985196Z"},"content_sha256":"afe4b75dce13ca7ebc9b23dfa7013044b3341c0774629a5908fd98f91256d1b1","schema_version":"1.0","event_id":"sha256:afe4b75dce13ca7ebc9b23dfa7013044b3341c0774629a5908fd98f91256d1b1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QV5KEGVOZCLF6BQGDGCGDBE7PT/bundle.json","state_url":"https://pith.science/pith/QV5KEGVOZCLF6BQGDGCGDBE7PT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QV5KEGVOZCLF6BQGDGCGDBE7PT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T17:06:23Z","links":{"resolver":"https://pith.science/pith/QV5KEGVOZCLF6BQGDGCGDBE7PT","bundle":"https://pith.science/pith/QV5KEGVOZCLF6BQGDGCGDBE7PT/bundle.json","state":"https://pith.science/pith/QV5KEGVOZCLF6BQGDGCGDBE7PT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QV5KEGVOZCLF6BQGDGCGDBE7PT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QV5KEGVOZCLF6BQGDGCGDBE7PT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ebd53ed058eb3de65561430c2d8e80a69a6fc8976a170617dcddd3874e5af51d","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T15:20:21Z","title_canon_sha256":"297fe56a81785def7fa6870a6a8e433c1960f78646d46b2ec5663cc5d72f5a31"},"schema_version":"1.0","source":{"id":"2411.01604","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.01604","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"arxiv_version","alias_value":"2411.01604v1","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.01604","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"pith_short_12","alias_value":"QV5KEGVOZCLF","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"pith_short_16","alias_value":"QV5KEGVOZCLF6BQG","created_at":"2026-07-05T09:30:32Z"},{"alias_kind":"pith_short_8","alias_value":"QV5KEGVO","created_at":"2026-07-05T09:30:32Z"}],"graph_snapshots":[{"event_id":"sha256:afe4b75dce13ca7ebc9b23dfa7013044b3341c0774629a5908fd98f91256d1b1","target":"graph","created_at":"2026-07-05T09:30:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.01604/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model (LLM) is changing the software development paradigm and has gained huge attention from both academia and industry. Researchers and developers collaboratively explore how to leverage the powerful problem-solving ability of LLMs for specific domain tasks. Due to the wide usage of LLM-based applications, e.g., ChatGPT, multiple works have been proposed to ensure the security of LLM systems. However, a comprehensive understanding of the entire processes of LLM system construction (the LLM supply chain) is crucial but relevant works are limited. More importantly, the security i","authors_text":"Lei Ma, Qiang Hu, Sen Chen, Xiaofei Xie","cross_cats":["cs.AI","cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T15:20:21Z","title":"Large Language Model Supply Chain: Open Problems From the Security Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.01604","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cee1f60842b32c6a9e82afd03ebbea30b06e2cc8ebe04d2fd57ad9f170c93ef4","target":"record","created_at":"2026-07-05T09:30:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ebd53ed058eb3de65561430c2d8e80a69a6fc8976a170617dcddd3874e5af51d","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T15:20:21Z","title_canon_sha256":"297fe56a81785def7fa6870a6a8e433c1960f78646d46b2ec5663cc5d72f5a31"},"schema_version":"1.0","source":{"id":"2411.01604","kind":"arxiv","version":1}},"canonical_sha256":"857aa21aaec8965f0606198461849f7ce4ee4c7b94ad7a8f54f9e42c5d139a4e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"857aa21aaec8965f0606198461849f7ce4ee4c7b94ad7a8f54f9e42c5d139a4e","first_computed_at":"2026-07-05T09:30:32.996826Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:30:32.996826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JDaWQdhNXcbcApdrh3y1bdJyTMTkhkBjNAR2CreEhoI5C+8VJ/v9rPJofHc718d6Ce3cit4WMubUaM5Sb8EeDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:30:32.997263Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.01604","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cee1f60842b32c6a9e82afd03ebbea30b06e2cc8ebe04d2fd57ad9f170c93ef4","sha256:afe4b75dce13ca7ebc9b23dfa7013044b3341c0774629a5908fd98f91256d1b1"],"state_sha256":"da15452cd85faa6bd3a6c6c616883860ec4e0f7f4c09ff51c0780e88e4b92bf3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qCpSK2rW7AVPEWdVGlw1BV70ikBR1jygI9bjTAKUWbPdTUKUobAmZx/MeDp6f78EXI7NnEnMsiSnBfq484S7Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T17:06:23.993064Z","bundle_sha256":"3d17f7f271f19c7cf633ff60091770f2e6135e3feeb9eabbb97cd3b728303b7e"}}