{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:SAHD6IQ457TVETG5XX6MDBOYEI","short_pith_number":"pith:SAHD6IQ4","canonical_record":{"source":{"id":"2608.12911","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-08-13T07:53:53Z","cross_cats_sorted":["cs.CR","cs.MM"],"title_canon_sha256":"f87c64674c382d793fbcbf9e4848e2919156492001892eea1661d1f3942f0d7a","abstract_canon_sha256":"a1da03436bc95039492b5317d7d99218a733ff8c6069dfd71a7e34819717b87c"},"schema_version":"1.0"},"canonical_sha256":"900e3f221cefe7524cddbdfcc185d82234a8a71a24a39ecc0eaabccaecfb58dd","source":{"kind":"arxiv","id":"2608.12911","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12911","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12911v1","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12911","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"pith_short_12","alias_value":"SAHD6IQ457TV","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"pith_short_16","alias_value":"SAHD6IQ457TVETG5","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"pith_short_8","alias_value":"SAHD6IQ4","created_at":"2026-08-14T00:58:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:SAHD6IQ457TVETG5XX6MDBOYEI","target":"record","payload":{"canonical_record":{"source":{"id":"2608.12911","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-08-13T07:53:53Z","cross_cats_sorted":["cs.CR","cs.MM"],"title_canon_sha256":"f87c64674c382d793fbcbf9e4848e2919156492001892eea1661d1f3942f0d7a","abstract_canon_sha256":"a1da03436bc95039492b5317d7d99218a733ff8c6069dfd71a7e34819717b87c"},"schema_version":"1.0"},"canonical_sha256":"900e3f221cefe7524cddbdfcc185d82234a8a71a24a39ecc0eaabccaecfb58dd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-14T00:58:54.205594Z","signature_b64":"Pv4C9zYhD0SISo73Uag83/xbeBz4KNQ4BNbgXyA3h61kAA8iUif0PDpyW0+X8/hpLi7N0isbnfVl20FuNNvmCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"900e3f221cefe7524cddbdfcc185d82234a8a71a24a39ecc0eaabccaecfb58dd","last_reissued_at":"2026-08-14T00:58:54.177835Z","signature_status":"signed_v1","first_computed_at":"2026-08-14T00:58:54.177835Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.12911","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T00:58:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"weT4a61ZwhwISd5TrGcJqJhZgMkcEu8hupc1tWHs3X/YfMAnOMjDeZsjIdFuL2QSNPrV3BjZ1RZgfqCr3bgQBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T09:15:44.874556Z"},"content_sha256":"7a7829b021abde9730390c2ffca67abe757b76d4c3caf654bf70b4af03c957f7","schema_version":"1.0","event_id":"sha256:7a7829b021abde9730390c2ffca67abe757b76d4c3caf654bf70b4af03c957f7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:SAHD6IQ457TVETG5XX6MDBOYEI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Beyond Visual Evidence: Revealing and Mitigating Relational Privacy Leakage in Document MLLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.MM"],"primary_cat":"cs.CV","authors_text":"Anirban Chakraborty, Beining Xu, Changsheng Chen, Hairui Wang, Jiaxin Wang","submitted_at":"2026-08-13T07:53:53Z","abstract_excerpt":"While the privacy risks of multimodal large language models (MLLMs) have drawn significant attention, the unique vulnerabilities of domain-specific MLLMs remain largely underexplored. Focusing on document understanding MLLMs for identity document processing, this paper investigates the privacy issues inherent in Key Information Extraction (KIE) tasks. We reveal that when input images lack sufficient visual evidence, these models often rely on memorized field relations from training data to infer missing content, thereby leaking multiple correlated fields containing sensitive personal informati"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12911","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.12911/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T00:58:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FYMKdpOgGeoKgvRuDX8XI50cr8KHp3ClOPH0PF00F8SXFsnRAuwDfrxinrX3rjdKATvBlcUsekBjK0Fou7n+Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T09:15:44.875081Z"},"content_sha256":"810cc0bc698fac786d6659bcdef248764aca5936cc2662b743628a0f1a16e096","schema_version":"1.0","event_id":"sha256:810cc0bc698fac786d6659bcdef248764aca5936cc2662b743628a0f1a16e096"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SAHD6IQ457TVETG5XX6MDBOYEI/bundle.json","state_url":"https://pith.science/pith/SAHD6IQ457TVETG5XX6MDBOYEI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SAHD6IQ457TVETG5XX6MDBOYEI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T09:15:44Z","links":{"resolver":"https://pith.science/pith/SAHD6IQ457TVETG5XX6MDBOYEI","bundle":"https://pith.science/pith/SAHD6IQ457TVETG5XX6MDBOYEI/bundle.json","state":"https://pith.science/pith/SAHD6IQ457TVETG5XX6MDBOYEI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SAHD6IQ457TVETG5XX6MDBOYEI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:SAHD6IQ457TVETG5XX6MDBOYEI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a1da03436bc95039492b5317d7d99218a733ff8c6069dfd71a7e34819717b87c","cross_cats_sorted":["cs.CR","cs.MM"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-08-13T07:53:53Z","title_canon_sha256":"f87c64674c382d793fbcbf9e4848e2919156492001892eea1661d1f3942f0d7a"},"schema_version":"1.0","source":{"id":"2608.12911","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12911","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12911v1","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12911","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"pith_short_12","alias_value":"SAHD6IQ457TV","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"pith_short_16","alias_value":"SAHD6IQ457TVETG5","created_at":"2026-08-14T00:58:54Z"},{"alias_kind":"pith_short_8","alias_value":"SAHD6IQ4","created_at":"2026-08-14T00:58:54Z"}],"graph_snapshots":[{"event_id":"sha256:810cc0bc698fac786d6659bcdef248764aca5936cc2662b743628a0f1a16e096","target":"graph","created_at":"2026-08-14T00:58:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.12911/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While the privacy risks of multimodal large language models (MLLMs) have drawn significant attention, the unique vulnerabilities of domain-specific MLLMs remain largely underexplored. Focusing on document understanding MLLMs for identity document processing, this paper investigates the privacy issues inherent in Key Information Extraction (KIE) tasks. We reveal that when input images lack sufficient visual evidence, these models often rely on memorized field relations from training data to infer missing content, thereby leaking multiple correlated fields containing sensitive personal informati","authors_text":"Anirban Chakraborty, Beining Xu, Changsheng Chen, Hairui Wang, Jiaxin Wang","cross_cats":["cs.CR","cs.MM"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-08-13T07:53:53Z","title":"Beyond Visual Evidence: Revealing and Mitigating Relational Privacy Leakage in Document MLLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12911","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7a7829b021abde9730390c2ffca67abe757b76d4c3caf654bf70b4af03c957f7","target":"record","created_at":"2026-08-14T00:58:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a1da03436bc95039492b5317d7d99218a733ff8c6069dfd71a7e34819717b87c","cross_cats_sorted":["cs.CR","cs.MM"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-08-13T07:53:53Z","title_canon_sha256":"f87c64674c382d793fbcbf9e4848e2919156492001892eea1661d1f3942f0d7a"},"schema_version":"1.0","source":{"id":"2608.12911","kind":"arxiv","version":1}},"canonical_sha256":"900e3f221cefe7524cddbdfcc185d82234a8a71a24a39ecc0eaabccaecfb58dd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"900e3f221cefe7524cddbdfcc185d82234a8a71a24a39ecc0eaabccaecfb58dd","first_computed_at":"2026-08-14T00:58:54.177835Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-14T00:58:54.177835Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Pv4C9zYhD0SISo73Uag83/xbeBz4KNQ4BNbgXyA3h61kAA8iUif0PDpyW0+X8/hpLi7N0isbnfVl20FuNNvmCQ==","signature_status":"signed_v1","signed_at":"2026-08-14T00:58:54.205594Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.12911","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7a7829b021abde9730390c2ffca67abe757b76d4c3caf654bf70b4af03c957f7","sha256:810cc0bc698fac786d6659bcdef248764aca5936cc2662b743628a0f1a16e096"],"state_sha256":"36764dc39088f92a881c7be745741d095d372e8cf348b451c144c2b4b511a158"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fPaGAazGHJwVc5QT9+VCjfIqYMQEJVOYBgR5pXw1gXhBIUbP7dyRRelL4sj3Qcatt7R1AULsxReeHvTbDrsLBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T09:15:44.879763Z","bundle_sha256":"7d711d0d725fa4bf0cdc13aa3e64169732edd325ed45609bb55c7db4809ecf9c"}}