{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UKJLUPEADC2NHQEJGG6AAPA7W4","short_pith_number":"pith:UKJLUPEA","canonical_record":{"source":{"id":"2502.16086","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-22T05:19:20Z","cross_cats_sorted":[],"title_canon_sha256":"a08da4692aa0574b772122327a041794bbee010754d7ffa324cf2675ba971e7d","abstract_canon_sha256":"fb4d793bc3d6f3108e64fb6d885c03ae5928f49f81ac6c40122c3c3658e7c105"},"schema_version":"1.0"},"canonical_sha256":"a292ba3c8018b4d3c08931bc003c1fb716e02c803af97e79b8f92599b7eff04a","source":{"kind":"arxiv","id":"2502.16086","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.16086","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"arxiv_version","alias_value":"2502.16086v1","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.16086","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"pith_short_12","alias_value":"UKJLUPEADC2N","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"pith_short_16","alias_value":"UKJLUPEADC2NHQEJ","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"pith_short_8","alias_value":"UKJLUPEA","created_at":"2026-07-05T10:18:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UKJLUPEADC2NHQEJGG6AAPA7W4","target":"record","payload":{"canonical_record":{"source":{"id":"2502.16086","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-22T05:19:20Z","cross_cats_sorted":[],"title_canon_sha256":"a08da4692aa0574b772122327a041794bbee010754d7ffa324cf2675ba971e7d","abstract_canon_sha256":"fb4d793bc3d6f3108e64fb6d885c03ae5928f49f81ac6c40122c3c3658e7c105"},"schema_version":"1.0"},"canonical_sha256":"a292ba3c8018b4d3c08931bc003c1fb716e02c803af97e79b8f92599b7eff04a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:18:20.799924Z","signature_b64":"AEVmS44qGq/yxXs0GNEdb0lE3jcHJ1f2WVPqqYnYiJ3K4Tr9iTGpWqiZTdWXEb00qvsAZbhOaNYX9YPo9IRoAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a292ba3c8018b4d3c08931bc003c1fb716e02c803af97e79b8f92599b7eff04a","last_reissued_at":"2026-07-05T10:18:20.799444Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:18:20.799444Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.16086","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:18:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uS5Enh3kpcUKIZWk5N8zq0T2ZE/aYeiHLBB6DKg2hBi9nYGYzstusDJG5OFRVJozdM8BpiI2Wu7aOLLaTLpVDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T03:04:09.773097Z"},"content_sha256":"5502d06607e0e5329cd590c98121706fda614fb4cd0b0cf49554fbda4fca15b1","schema_version":"1.0","event_id":"sha256:5502d06607e0e5329cd590c98121706fda614fb4cd0b0cf49554fbda4fca15b1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UKJLUPEADC2NHQEJGG6AAPA7W4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stealing Training Data from Large Language Models in Decentralized Training through Activation Inversion Attack","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chenxi Dai, Lin Lu, Pan Zhou","submitted_at":"2025-02-22T05:19:20Z","abstract_excerpt":"Decentralized training has become a resource-efficient framework to democratize the training of large language models (LLMs). However, the privacy risks associated with this framework, particularly due to the potential inclusion of sensitive data in training datasets, remain unexplored. This paper identifies a novel and realistic attack surface: the privacy leakage from training data in decentralized training, and proposes \\textit{activation inversion attack} (AIA) for the first time. AIA first constructs a shadow dataset comprising text labels and corresponding activations using public datase"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.16086","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.16086/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:18:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VwesJyNEwVMYtWkhQLUtPP23I9QVOiYE1AMQdZJ1Dew6hF572SsNCzGm9wkd0g360R8ITZJdqTv+kdLWcdQtBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T03:04:09.773929Z"},"content_sha256":"21d16752330a638ef48e68578d162e7fdf1941a7f1497079b61e305b44abf899","schema_version":"1.0","event_id":"sha256:21d16752330a638ef48e68578d162e7fdf1941a7f1497079b61e305b44abf899"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UKJLUPEADC2NHQEJGG6AAPA7W4/bundle.json","state_url":"https://pith.science/pith/UKJLUPEADC2NHQEJGG6AAPA7W4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UKJLUPEADC2NHQEJGG6AAPA7W4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T03:04:09Z","links":{"resolver":"https://pith.science/pith/UKJLUPEADC2NHQEJGG6AAPA7W4","bundle":"https://pith.science/pith/UKJLUPEADC2NHQEJGG6AAPA7W4/bundle.json","state":"https://pith.science/pith/UKJLUPEADC2NHQEJGG6AAPA7W4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UKJLUPEADC2NHQEJGG6AAPA7W4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UKJLUPEADC2NHQEJGG6AAPA7W4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fb4d793bc3d6f3108e64fb6d885c03ae5928f49f81ac6c40122c3c3658e7c105","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-22T05:19:20Z","title_canon_sha256":"a08da4692aa0574b772122327a041794bbee010754d7ffa324cf2675ba971e7d"},"schema_version":"1.0","source":{"id":"2502.16086","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.16086","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"arxiv_version","alias_value":"2502.16086v1","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.16086","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"pith_short_12","alias_value":"UKJLUPEADC2N","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"pith_short_16","alias_value":"UKJLUPEADC2NHQEJ","created_at":"2026-07-05T10:18:20Z"},{"alias_kind":"pith_short_8","alias_value":"UKJLUPEA","created_at":"2026-07-05T10:18:20Z"}],"graph_snapshots":[{"event_id":"sha256:21d16752330a638ef48e68578d162e7fdf1941a7f1497079b61e305b44abf899","target":"graph","created_at":"2026-07-05T10:18:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.16086/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Decentralized training has become a resource-efficient framework to democratize the training of large language models (LLMs). However, the privacy risks associated with this framework, particularly due to the potential inclusion of sensitive data in training datasets, remain unexplored. This paper identifies a novel and realistic attack surface: the privacy leakage from training data in decentralized training, and proposes \\textit{activation inversion attack} (AIA) for the first time. AIA first constructs a shadow dataset comprising text labels and corresponding activations using public datase","authors_text":"Chenxi Dai, Lin Lu, Pan Zhou","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-22T05:19:20Z","title":"Stealing Training Data from Large Language Models in Decentralized Training through Activation Inversion Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.16086","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5502d06607e0e5329cd590c98121706fda614fb4cd0b0cf49554fbda4fca15b1","target":"record","created_at":"2026-07-05T10:18:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fb4d793bc3d6f3108e64fb6d885c03ae5928f49f81ac6c40122c3c3658e7c105","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-22T05:19:20Z","title_canon_sha256":"a08da4692aa0574b772122327a041794bbee010754d7ffa324cf2675ba971e7d"},"schema_version":"1.0","source":{"id":"2502.16086","kind":"arxiv","version":1}},"canonical_sha256":"a292ba3c8018b4d3c08931bc003c1fb716e02c803af97e79b8f92599b7eff04a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a292ba3c8018b4d3c08931bc003c1fb716e02c803af97e79b8f92599b7eff04a","first_computed_at":"2026-07-05T10:18:20.799444Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:18:20.799444Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AEVmS44qGq/yxXs0GNEdb0lE3jcHJ1f2WVPqqYnYiJ3K4Tr9iTGpWqiZTdWXEb00qvsAZbhOaNYX9YPo9IRoAw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:18:20.799924Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.16086","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5502d06607e0e5329cd590c98121706fda614fb4cd0b0cf49554fbda4fca15b1","sha256:21d16752330a638ef48e68578d162e7fdf1941a7f1497079b61e305b44abf899"],"state_sha256":"4ed1677be71fc27c51483151e092cc3760a22d603a51f32ab62bfe7f5a8f4ab3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BRfDKkJlB0HmlljygdlsyS7rvM3hNZrROr/8Wl3uhkCyVfD1IL/GDNyJ3h1A/5AIjIxi5FCrW/CNQtCSgT/EAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T03:04:09.778900Z","bundle_sha256":"6f4ae85618d44e3fab96671c3095590b40e837cc7ad15656f975044c9f5c9c3b"}}