{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SXOQ43SAG3KGA5GZURW2ENHDOF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"24b29cce3245dd0f7718fa54692035108dbe9da7b4b779dff71cff082cea201a","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T21:52:34Z","title_canon_sha256":"2c7e55115a6309c39fc3ec608d046ec5698a73a288444ee4350bd6cdb96bdc54"},"schema_version":"1.0","source":{"id":"2405.06823","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06823","created_at":"2026-07-05T11:20:44Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06823v3","created_at":"2026-07-05T11:20:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06823","created_at":"2026-07-05T11:20:44Z"},{"alias_kind":"pith_short_12","alias_value":"SXOQ43SAG3KG","created_at":"2026-07-05T11:20:44Z"},{"alias_kind":"pith_short_16","alias_value":"SXOQ43SAG3KGA5GZ","created_at":"2026-07-05T11:20:44Z"},{"alias_kind":"pith_short_8","alias_value":"SXOQ43SA","created_at":"2026-07-05T11:20:44Z"}],"graph_snapshots":[{"event_id":"sha256:fbd1ff7e7cce8c70ca9da734e9514bb25d039a9488417d65deb0f8b4891b3c01","target":"graph","created_at":"2026-07-05T11:20:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.06823/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) enable a new ecosystem with many downstream applications, called LLM applications, with different natural language processing tasks. The functionality and performance of an LLM application highly depend on its system prompt, which instructs the backend LLM on what task to perform. Therefore, an LLM application developer often keeps a system prompt confidential to protect its intellectual property. As a result, a natural attack, called prompt leaking, is to steal the system prompt from an LLM application, which compromises the developer's intellectual property. Exis","authors_text":"Bo Hui, Haolin Yuan, Neil Gong, Philippe Burlina, Yinzhi Cao","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T21:52:34Z","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06823","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:297335ccbbdb9d4294b7eb0829631dcd6a2bab1b183ccfb8ecda001311d1ea7c","target":"record","created_at":"2026-07-05T11:20:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"24b29cce3245dd0f7718fa54692035108dbe9da7b4b779dff71cff082cea201a","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T21:52:34Z","title_canon_sha256":"2c7e55115a6309c39fc3ec608d046ec5698a73a288444ee4350bd6cdb96bdc54"},"schema_version":"1.0","source":{"id":"2405.06823","kind":"arxiv","version":3}},"canonical_sha256":"95dd0e6e4036d46074d9a46da234e3714cce06e581e9da59103433b743a822cc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"95dd0e6e4036d46074d9a46da234e3714cce06e581e9da59103433b743a822cc","first_computed_at":"2026-07-05T11:20:44.372966Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:20:44.372966Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hPSC0pR98E0ORWEGNWF7qWktVhF4kUWufMQ4r76o2YMqqGMxjota8JJskaY3DnwdtAXpcNbmO5ZlBurCmYBQBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:20:44.373505Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.06823","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:297335ccbbdb9d4294b7eb0829631dcd6a2bab1b183ccfb8ecda001311d1ea7c","sha256:fbd1ff7e7cce8c70ca9da734e9514bb25d039a9488417d65deb0f8b4891b3c01"],"state_sha256":"a86d7ee50fc5c20b1dff69143821feb958c7f94c90649783a58ae37722bf13cd"}