{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SVKVLO6GUV5HYFZ6MHSXAF2FAB","short_pith_number":"pith:SVKVLO6G","canonical_record":{"source":{"id":"2506.06003","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-06T11:48:56Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b2a6ab62b44f1b35eafe3696821563857a983088268e81938ce4cb41dd107f5e","abstract_canon_sha256":"78fff286cc5f6088f151cf9bb5a6e432a146f64dc59bb1a8fb0ce8d02cf10c62"},"schema_version":"1.0"},"canonical_sha256":"955555bbc6a57a7c173e61e5701745006beda6665768a2a29abc00e1347fb6bc","source":{"kind":"arxiv","id":"2506.06003","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.06003","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"arxiv_version","alias_value":"2506.06003v1","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.06003","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"pith_short_12","alias_value":"SVKVLO6GUV5H","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"pith_short_16","alias_value":"SVKVLO6GUV5HYFZ6","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"pith_short_8","alias_value":"SVKVLO6G","created_at":"2026-07-05T11:17:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SVKVLO6GUV5HYFZ6MHSXAF2FAB","target":"record","payload":{"canonical_record":{"source":{"id":"2506.06003","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-06T11:48:56Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b2a6ab62b44f1b35eafe3696821563857a983088268e81938ce4cb41dd107f5e","abstract_canon_sha256":"78fff286cc5f6088f151cf9bb5a6e432a146f64dc59bb1a8fb0ce8d02cf10c62"},"schema_version":"1.0"},"canonical_sha256":"955555bbc6a57a7c173e61e5701745006beda6665768a2a29abc00e1347fb6bc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:17:14.427667Z","signature_b64":"WkO6Xx1YSx+7zKWt5CTwR/19BdgO/tN5ZdWAQ1hatmHG+iFQIruJZy72Z8fmSovC4oPkMpX1ktYVlNe5T81qAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"955555bbc6a57a7c173e61e5701745006beda6665768a2a29abc00e1347fb6bc","last_reissued_at":"2026-07-05T11:17:14.427174Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:17:14.427174Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.06003","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rtw6aNDeWQ/nyAph4v2h17LRHofauyfJw2RJPPnWGz8X1RbVkBLT6zh7soeGhO8yU3/xG1NzOC9zsy66OTNFAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T12:34:05.209422Z"},"content_sha256":"d5678fa939a7679cb40d0b53ecece527d54b6c1992eabff25c3f22287c776075","schema_version":"1.0","event_id":"sha256:d5678fa939a7679cb40d0b53ecece527d54b6c1992eabff25c3f22287c776075"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SVKVLO6GUV5HYFZ6MHSXAF2FAB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"What Really is a Member? Discrediting Membership Inference via Poisoning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Amrita Roy Chowdhury, Ashish Hooda, Atul Prakash, Bradley A. Malin, Kassem Fawaz, Neal Mangaokar, Somesh Jha, Zhuohang Li","submitted_at":"2025-06-06T11:48:56Z","abstract_excerpt":"Membership inference tests aim to determine whether a particular data point was included in a language model's training set. However, recent works have shown that such tests often fail under the strict definition of membership based on exact matching, and have suggested relaxing this definition to include semantic neighbors as members as well. In this work, we show that membership inference tests are still unreliable under this relaxation - it is possible to poison the training dataset in a way that causes the test to produce incorrect predictions for a target point. We theoretically reveal a "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.06003","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.06003/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ACjASi4SgxiV2ugJWUBAYLdgRnMwE+ys4QwNFi4y+dTgO6gKo8X5bLyOzAkWtAng1+eIgXNDE99SKlEEwigpDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T12:34:05.211039Z"},"content_sha256":"39ca006efe0a6b5c8c532dea503f4309fc6abe617744a98e3f5212f445ef2533","schema_version":"1.0","event_id":"sha256:39ca006efe0a6b5c8c532dea503f4309fc6abe617744a98e3f5212f445ef2533"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SVKVLO6GUV5HYFZ6MHSXAF2FAB/bundle.json","state_url":"https://pith.science/pith/SVKVLO6GUV5HYFZ6MHSXAF2FAB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SVKVLO6GUV5HYFZ6MHSXAF2FAB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T12:34:05Z","links":{"resolver":"https://pith.science/pith/SVKVLO6GUV5HYFZ6MHSXAF2FAB","bundle":"https://pith.science/pith/SVKVLO6GUV5HYFZ6MHSXAF2FAB/bundle.json","state":"https://pith.science/pith/SVKVLO6GUV5HYFZ6MHSXAF2FAB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SVKVLO6GUV5HYFZ6MHSXAF2FAB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SVKVLO6GUV5HYFZ6MHSXAF2FAB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78fff286cc5f6088f151cf9bb5a6e432a146f64dc59bb1a8fb0ce8d02cf10c62","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-06T11:48:56Z","title_canon_sha256":"b2a6ab62b44f1b35eafe3696821563857a983088268e81938ce4cb41dd107f5e"},"schema_version":"1.0","source":{"id":"2506.06003","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.06003","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"arxiv_version","alias_value":"2506.06003v1","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.06003","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"pith_short_12","alias_value":"SVKVLO6GUV5H","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"pith_short_16","alias_value":"SVKVLO6GUV5HYFZ6","created_at":"2026-07-05T11:17:14Z"},{"alias_kind":"pith_short_8","alias_value":"SVKVLO6G","created_at":"2026-07-05T11:17:14Z"}],"graph_snapshots":[{"event_id":"sha256:39ca006efe0a6b5c8c532dea503f4309fc6abe617744a98e3f5212f445ef2533","target":"graph","created_at":"2026-07-05T11:17:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.06003/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference tests aim to determine whether a particular data point was included in a language model's training set. However, recent works have shown that such tests often fail under the strict definition of membership based on exact matching, and have suggested relaxing this definition to include semantic neighbors as members as well. In this work, we show that membership inference tests are still unreliable under this relaxation - it is possible to poison the training dataset in a way that causes the test to produce incorrect predictions for a target point. We theoretically reveal a ","authors_text":"Amrita Roy Chowdhury, Ashish Hooda, Atul Prakash, Bradley A. Malin, Kassem Fawaz, Neal Mangaokar, Somesh Jha, Zhuohang Li","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-06T11:48:56Z","title":"What Really is a Member? Discrediting Membership Inference via Poisoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.06003","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d5678fa939a7679cb40d0b53ecece527d54b6c1992eabff25c3f22287c776075","target":"record","created_at":"2026-07-05T11:17:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78fff286cc5f6088f151cf9bb5a6e432a146f64dc59bb1a8fb0ce8d02cf10c62","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-06T11:48:56Z","title_canon_sha256":"b2a6ab62b44f1b35eafe3696821563857a983088268e81938ce4cb41dd107f5e"},"schema_version":"1.0","source":{"id":"2506.06003","kind":"arxiv","version":1}},"canonical_sha256":"955555bbc6a57a7c173e61e5701745006beda6665768a2a29abc00e1347fb6bc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"955555bbc6a57a7c173e61e5701745006beda6665768a2a29abc00e1347fb6bc","first_computed_at":"2026-07-05T11:17:14.427174Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:17:14.427174Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WkO6Xx1YSx+7zKWt5CTwR/19BdgO/tN5ZdWAQ1hatmHG+iFQIruJZy72Z8fmSovC4oPkMpX1ktYVlNe5T81qAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:17:14.427667Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.06003","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d5678fa939a7679cb40d0b53ecece527d54b6c1992eabff25c3f22287c776075","sha256:39ca006efe0a6b5c8c532dea503f4309fc6abe617744a98e3f5212f445ef2533"],"state_sha256":"68a319aa3a6abe1bb74b6f0fcc2880f0d0a0bc4dd1fec5ff702b73e98ebf05d2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yfBQ+CBmOSZ6s7x/+ZhDG7oNRq0HIJ7+N7aZ2IVh21DeSTRmC5PCuwXA8MHKscjGCen8VpTaqL5tsD93ik5pAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T12:34:05.217930Z","bundle_sha256":"cc41c11498b7d8569be215ff303a6e7e10f3d75c0587687995dbe584611cdc5f"}}