{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:TG7VU5W327COZKGILPLTXAJHC4","short_pith_number":"pith:TG7VU5W3","canonical_record":{"source":{"id":"2607.01313","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T17:53:10Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"66585692f159d771475ec5300d1b354af02fdf682908b994f90a289151f55b09","abstract_canon_sha256":"9f54d60818885127b1f35cda20dea4ecf15616cdb1686c80680aaa000328b011"},"schema_version":"1.0"},"canonical_sha256":"99bf5a76dbd7c4eca8c85bd73b81271738ea337c99f149be5bf986ec54bc9bf4","source":{"kind":"arxiv","id":"2607.01313","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.01313","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"arxiv_version","alias_value":"2607.01313v1","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.01313","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"pith_short_12","alias_value":"TG7VU5W327CO","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"pith_short_16","alias_value":"TG7VU5W327COZKGI","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"pith_short_8","alias_value":"TG7VU5W3","created_at":"2026-07-03T00:16:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:TG7VU5W327COZKGILPLTXAJHC4","target":"record","payload":{"canonical_record":{"source":{"id":"2607.01313","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T17:53:10Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"66585692f159d771475ec5300d1b354af02fdf682908b994f90a289151f55b09","abstract_canon_sha256":"9f54d60818885127b1f35cda20dea4ecf15616cdb1686c80680aaa000328b011"},"schema_version":"1.0"},"canonical_sha256":"99bf5a76dbd7c4eca8c85bd73b81271738ea337c99f149be5bf986ec54bc9bf4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-03T00:16:57.088860Z","signature_b64":"Bu91OkgDV6RBCAap5s0/wWLf7MflKYyC7jaUftlULzyJkQjxMayx7OMBP/paZSRdvR4U8C44GOrUMg7M9oaQCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"99bf5a76dbd7c4eca8c85bd73b81271738ea337c99f149be5bf986ec54bc9bf4","last_reissued_at":"2026-07-03T00:16:57.088455Z","signature_status":"signed_v1","first_computed_at":"2026-07-03T00:16:57.088455Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.01313","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-03T00:16:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9Qqzm/F6runB//vD8ch2IFm3s+W+1g2GjxXBxb/3Bz8WGcHWowx9ZkkH/7C5WcajdgB0yyGxpUlZw3NRmebxBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-04T22:47:22.029542Z"},"content_sha256":"6be7129000da44a628f3e328cf1e8f4ddd10390f2cc90827cddcdde9f957ca8a","schema_version":"1.0","event_id":"sha256:6be7129000da44a628f3e328cf1e8f4ddd10390f2cc90827cddcdde9f957ca8a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:TG7VU5W327COZKGILPLTXAJHC4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-Box Inference of LLM Architectural Properties with Restrictive API Access","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Christopher Ellis, Giulia Fanti, Jos\\'e M. F. Moura, Leighton Barnes, Mei-Yu Wang, Shreyas Chaudhari","submitted_at":"2026-07-01T17:53:10Z","abstract_excerpt":"In practice, most commercial LLM providers do not publicly release details of underlying LLM architectures. However, prior work has shown that given limited API access to an LLM (namely, top-$k$ logits and/or a logit bias function), one can recover certain architectural details of an LLM, such as the hidden dimension of the feed-forward network. Perhaps in response to these results, most commercial LLM providers have restricted their APIs to expose only the single logit for each decoded token, and they no longer give users the ability to bias logits. We show that even under current restrictive"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.01313","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.01313/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-03T00:16:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bPTi55HDx/pdVYPUmIHJuruYpCYJqdho5Y47rl8EMkFs/qpWvN0G5jRtoxGzCRU31245Qn3pnxg8/0wzJyLYBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-04T22:47:22.029910Z"},"content_sha256":"a5771e6147f130f610ceb52ef12a01f7ff4667883e7bb03764a3e1fed3302224","schema_version":"1.0","event_id":"sha256:a5771e6147f130f610ceb52ef12a01f7ff4667883e7bb03764a3e1fed3302224"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TG7VU5W327COZKGILPLTXAJHC4/bundle.json","state_url":"https://pith.science/pith/TG7VU5W327COZKGILPLTXAJHC4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TG7VU5W327COZKGILPLTXAJHC4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-04T22:47:22Z","links":{"resolver":"https://pith.science/pith/TG7VU5W327COZKGILPLTXAJHC4","bundle":"https://pith.science/pith/TG7VU5W327COZKGILPLTXAJHC4/bundle.json","state":"https://pith.science/pith/TG7VU5W327COZKGILPLTXAJHC4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TG7VU5W327COZKGILPLTXAJHC4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:TG7VU5W327COZKGILPLTXAJHC4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9f54d60818885127b1f35cda20dea4ecf15616cdb1686c80680aaa000328b011","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T17:53:10Z","title_canon_sha256":"66585692f159d771475ec5300d1b354af02fdf682908b994f90a289151f55b09"},"schema_version":"1.0","source":{"id":"2607.01313","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.01313","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"arxiv_version","alias_value":"2607.01313v1","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.01313","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"pith_short_12","alias_value":"TG7VU5W327CO","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"pith_short_16","alias_value":"TG7VU5W327COZKGI","created_at":"2026-07-03T00:16:57Z"},{"alias_kind":"pith_short_8","alias_value":"TG7VU5W3","created_at":"2026-07-03T00:16:57Z"}],"graph_snapshots":[{"event_id":"sha256:a5771e6147f130f610ceb52ef12a01f7ff4667883e7bb03764a3e1fed3302224","target":"graph","created_at":"2026-07-03T00:16:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.01313/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In practice, most commercial LLM providers do not publicly release details of underlying LLM architectures. However, prior work has shown that given limited API access to an LLM (namely, top-$k$ logits and/or a logit bias function), one can recover certain architectural details of an LLM, such as the hidden dimension of the feed-forward network. Perhaps in response to these results, most commercial LLM providers have restricted their APIs to expose only the single logit for each decoded token, and they no longer give users the ability to bias logits. We show that even under current restrictive","authors_text":"Christopher Ellis, Giulia Fanti, Jos\\'e M. F. Moura, Leighton Barnes, Mei-Yu Wang, Shreyas Chaudhari","cross_cats":["cs.AI","cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T17:53:10Z","title":"Black-Box Inference of LLM Architectural Properties with Restrictive API Access"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.01313","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6be7129000da44a628f3e328cf1e8f4ddd10390f2cc90827cddcdde9f957ca8a","target":"record","created_at":"2026-07-03T00:16:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9f54d60818885127b1f35cda20dea4ecf15616cdb1686c80680aaa000328b011","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T17:53:10Z","title_canon_sha256":"66585692f159d771475ec5300d1b354af02fdf682908b994f90a289151f55b09"},"schema_version":"1.0","source":{"id":"2607.01313","kind":"arxiv","version":1}},"canonical_sha256":"99bf5a76dbd7c4eca8c85bd73b81271738ea337c99f149be5bf986ec54bc9bf4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"99bf5a76dbd7c4eca8c85bd73b81271738ea337c99f149be5bf986ec54bc9bf4","first_computed_at":"2026-07-03T00:16:57.088455Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-03T00:16:57.088455Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Bu91OkgDV6RBCAap5s0/wWLf7MflKYyC7jaUftlULzyJkQjxMayx7OMBP/paZSRdvR4U8C44GOrUMg7M9oaQCQ==","signature_status":"signed_v1","signed_at":"2026-07-03T00:16:57.088860Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.01313","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6be7129000da44a628f3e328cf1e8f4ddd10390f2cc90827cddcdde9f957ca8a","sha256:a5771e6147f130f610ceb52ef12a01f7ff4667883e7bb03764a3e1fed3302224"],"state_sha256":"d6ed2d87f0fc49d9d919563be9e345f4bc459c0ac9d8a7403926f3789437e196"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Xwm+VMfMIqhEa51exGLwa3NWJUUoDglBTXbFAAkGqGxV1e094N5Jy3sGX+9vJp/Q30DbowDqoBwk8tYUsHf1BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-04T22:47:22.032062Z","bundle_sha256":"021ae7f147d444b41a33f5127660a1cab2e0efffa727d5d50917aef061a847e5"}}