{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SWL6C2YJHNOO2FIV4JG7W32XVS","short_pith_number":"pith:SWL6C2YJ","canonical_record":{"source":{"id":"2507.21198","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-28T06:06:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"cc9c107fe658fcd109aca63787cebf29c4621269f993facae91ceee1e74b31b8","abstract_canon_sha256":"d413d3afc22cb91b94a754d48f8513b4695f18eb4d75388637f8e5ed3e361fbb"},"schema_version":"1.0"},"canonical_sha256":"9597e16b093b5ced1515e24dfb6f57aca13d7cb7b4337636d55c4fe770f4ba64","source":{"kind":"arxiv","id":"2507.21198","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.21198","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"arxiv_version","alias_value":"2507.21198v1","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.21198","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"pith_short_12","alias_value":"SWL6C2YJHNOO","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"pith_short_16","alias_value":"SWL6C2YJHNOO2FIV","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"pith_short_8","alias_value":"SWL6C2YJ","created_at":"2026-07-05T11:44:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SWL6C2YJHNOO2FIV4JG7W32XVS","target":"record","payload":{"canonical_record":{"source":{"id":"2507.21198","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-28T06:06:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"cc9c107fe658fcd109aca63787cebf29c4621269f993facae91ceee1e74b31b8","abstract_canon_sha256":"d413d3afc22cb91b94a754d48f8513b4695f18eb4d75388637f8e5ed3e361fbb"},"schema_version":"1.0"},"canonical_sha256":"9597e16b093b5ced1515e24dfb6f57aca13d7cb7b4337636d55c4fe770f4ba64","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:44:54.275916Z","signature_b64":"HuZacVAVuwQBa1F93GtLNj0qxLzZOOAPS8l56gnw9Su0EPvBPO4yMUVh7G/mHUiauNl/Z8FOe06x4MPVkRHNBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9597e16b093b5ced1515e24dfb6f57aca13d7cb7b4337636d55c4fe770f4ba64","last_reissued_at":"2026-07-05T11:44:54.275503Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:44:54.275503Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.21198","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wed2hQ5PJlfqyBSEeUt4fcXCkJ1xcL1TDy0s4DWgqpdc0KEQP2SeL/F1UKt9Yq4OiXngX2G+csZnGue6cTrWAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T17:45:16.375999Z"},"content_sha256":"e04c2091f757674bb881356ba25d6db222a6c533d4db8e57b772000f66bf94c5","schema_version":"1.0","event_id":"sha256:e04c2091f757674bb881356ba25d6db222a6c533d4db8e57b772000f66bf94c5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SWL6C2YJHNOO2FIV4JG7W32XVS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Uncovering Gradient Inversion Risks in Practical Language Model Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Alsharif Abuadbba, Eu Joe Chegne, Guangdong Bai, Mengyao Ma, Xinguo Feng, Zhongkui Ma, Zihan Wang","submitted_at":"2025-07-28T06:06:29Z","abstract_excerpt":"The gradient inversion attack has been demonstrated as a significant privacy threat to federated learning (FL), particularly in continuous domains such as vision models. In contrast, it is often considered less effective or highly dependent on impractical training settings when applied to language models, due to the challenges posed by the discrete nature of tokens in text data. As a result, its potential privacy threats remain largely underestimated, despite FL being an emerging training method for language models. In this work, we propose a domain-specific gradient inversion attack named Gra"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.21198","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.21198/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U2LxXynybEO+Lmmz4HVw45BZUkP7rNDSV7oKoiytjqLPXJq3TgsgmkTGBxaqCHCgzeqmyf6latqyIUUPgj2CBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T17:45:16.376397Z"},"content_sha256":"102c73ea12763b64b9a0f56a4b75698e840b523585f5f666164f1346fdbfaebf","schema_version":"1.0","event_id":"sha256:102c73ea12763b64b9a0f56a4b75698e840b523585f5f666164f1346fdbfaebf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SWL6C2YJHNOO2FIV4JG7W32XVS/bundle.json","state_url":"https://pith.science/pith/SWL6C2YJHNOO2FIV4JG7W32XVS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SWL6C2YJHNOO2FIV4JG7W32XVS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T17:45:16Z","links":{"resolver":"https://pith.science/pith/SWL6C2YJHNOO2FIV4JG7W32XVS","bundle":"https://pith.science/pith/SWL6C2YJHNOO2FIV4JG7W32XVS/bundle.json","state":"https://pith.science/pith/SWL6C2YJHNOO2FIV4JG7W32XVS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SWL6C2YJHNOO2FIV4JG7W32XVS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SWL6C2YJHNOO2FIV4JG7W32XVS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d413d3afc22cb91b94a754d48f8513b4695f18eb4d75388637f8e5ed3e361fbb","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-28T06:06:29Z","title_canon_sha256":"cc9c107fe658fcd109aca63787cebf29c4621269f993facae91ceee1e74b31b8"},"schema_version":"1.0","source":{"id":"2507.21198","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.21198","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"arxiv_version","alias_value":"2507.21198v1","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.21198","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"pith_short_12","alias_value":"SWL6C2YJHNOO","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"pith_short_16","alias_value":"SWL6C2YJHNOO2FIV","created_at":"2026-07-05T11:44:54Z"},{"alias_kind":"pith_short_8","alias_value":"SWL6C2YJ","created_at":"2026-07-05T11:44:54Z"}],"graph_snapshots":[{"event_id":"sha256:102c73ea12763b64b9a0f56a4b75698e840b523585f5f666164f1346fdbfaebf","target":"graph","created_at":"2026-07-05T11:44:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.21198/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The gradient inversion attack has been demonstrated as a significant privacy threat to federated learning (FL), particularly in continuous domains such as vision models. In contrast, it is often considered less effective or highly dependent on impractical training settings when applied to language models, due to the challenges posed by the discrete nature of tokens in text data. As a result, its potential privacy threats remain largely underestimated, despite FL being an emerging training method for language models. In this work, we propose a domain-specific gradient inversion attack named Gra","authors_text":"Alsharif Abuadbba, Eu Joe Chegne, Guangdong Bai, Mengyao Ma, Xinguo Feng, Zhongkui Ma, Zihan Wang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-28T06:06:29Z","title":"Uncovering Gradient Inversion Risks in Practical Language Model Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.21198","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e04c2091f757674bb881356ba25d6db222a6c533d4db8e57b772000f66bf94c5","target":"record","created_at":"2026-07-05T11:44:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d413d3afc22cb91b94a754d48f8513b4695f18eb4d75388637f8e5ed3e361fbb","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-28T06:06:29Z","title_canon_sha256":"cc9c107fe658fcd109aca63787cebf29c4621269f993facae91ceee1e74b31b8"},"schema_version":"1.0","source":{"id":"2507.21198","kind":"arxiv","version":1}},"canonical_sha256":"9597e16b093b5ced1515e24dfb6f57aca13d7cb7b4337636d55c4fe770f4ba64","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9597e16b093b5ced1515e24dfb6f57aca13d7cb7b4337636d55c4fe770f4ba64","first_computed_at":"2026-07-05T11:44:54.275503Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:44:54.275503Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HuZacVAVuwQBa1F93GtLNj0qxLzZOOAPS8l56gnw9Su0EPvBPO4yMUVh7G/mHUiauNl/Z8FOe06x4MPVkRHNBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:44:54.275916Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.21198","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e04c2091f757674bb881356ba25d6db222a6c533d4db8e57b772000f66bf94c5","sha256:102c73ea12763b64b9a0f56a4b75698e840b523585f5f666164f1346fdbfaebf"],"state_sha256":"96a99f9069ddec17213a52ab02dbda13033bf69ca42a26c28e43699a9d3be121"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tOmj8wTYyyVQ+wcQIhAhfrdOkFGD6KxLT0tJYCA9091gvTn2l9UO8Iwrb1SHPktcNHp2ODksXGrZi4fvHbyoDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T17:45:16.378426Z","bundle_sha256":"76aca2dae6e8f1e9c10ba8c1e028a50a38b5287ea4e58059f5abc58a305496d7"}}