{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:VSI6E2YM24WGLLJ2INOOJMW67K","short_pith_number":"pith:VSI6E2YM","canonical_record":{"source":{"id":"2405.15586","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T14:14:24Z","cross_cats_sorted":["cs.DC"],"title_canon_sha256":"6e89501d704cfa6274d8c867353f1d812cf1b3e723b61b47f3b9376ab8029cdd","abstract_canon_sha256":"acbe384e8d7a8e57d00e289154783459fa835b22c2bcc82610f28e3404a82731"},"schema_version":"1.0"},"canonical_sha256":"ac91e26b0cd72c65ad3a435ce4b2defa8cc71b28ac68c1981997cc4721099898","source":{"kind":"arxiv","id":"2405.15586","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.15586","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"arxiv_version","alias_value":"2405.15586v2","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.15586","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"pith_short_12","alias_value":"VSI6E2YM24WG","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"pith_short_16","alias_value":"VSI6E2YM24WGLLJ2","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"pith_short_8","alias_value":"VSI6E2YM","created_at":"2026-07-05T09:34:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:VSI6E2YM24WGLLJ2INOOJMW67K","target":"record","payload":{"canonical_record":{"source":{"id":"2405.15586","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T14:14:24Z","cross_cats_sorted":["cs.DC"],"title_canon_sha256":"6e89501d704cfa6274d8c867353f1d812cf1b3e723b61b47f3b9376ab8029cdd","abstract_canon_sha256":"acbe384e8d7a8e57d00e289154783459fa835b22c2bcc82610f28e3404a82731"},"schema_version":"1.0"},"canonical_sha256":"ac91e26b0cd72c65ad3a435ce4b2defa8cc71b28ac68c1981997cc4721099898","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:34:35.974410Z","signature_b64":"tE1q6rof/R5Bn/GGd4GktxWjzqAf8k8z9lbuBFv/D2xk1JwiLR95JLWFYGtLwKs07Sc9QRyFkSK8WVkz4uU1DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ac91e26b0cd72c65ad3a435ce4b2defa8cc71b28ac68c1981997cc4721099898","last_reissued_at":"2026-07-05T09:34:35.973908Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:34:35.973908Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.15586","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:34:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r6rJ2KyIdRYKJJYRK26E3Dnb6ZaxCM049mm9TDLPVEyZVi40Xc7M8Gr5tRS0poyA/aYk2J18XHDEOPE0QWktAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:55:41.722904Z"},"content_sha256":"2636a17fcf076187135b26c33b739289b996aa1c61283b6e5d961ec38d4ae56f","schema_version":"1.0","event_id":"sha256:2636a17fcf076187135b26c33b739289b996aa1c61283b6e5d961ec38d4ae56f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:VSI6E2YM24WGLLJ2INOOJMW67K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DAGER: Exact Gradient Inversion for Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.DC"],"primary_cat":"cs.LG","authors_text":"Dimitar I. Dimitrov, Ivo Petrov, Mark Niklas M\\\"uller, Martin Vechev, Maximilian Baader","submitted_at":"2024-05-24T14:14:24Z","abstract_excerpt":"Federated learning works by aggregating locally computed gradients from multiple clients, thus enabling collaborative training without sharing private client data. However, prior work has shown that the data can actually be recovered by the server using so-called gradient inversion attacks. While these attacks perform well when applied on images, they are limited in the text domain and only permit approximate reconstruction of small batches and short input sequences. In this work, we propose DAGER, the first algorithm to recover whole batches of input text exactly. DAGER leverages the low-rank"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.15586","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.15586/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:34:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MVyccaqVMLTM/6jL4jpTmAFbF8mbuBfVmMXob4vkziaOFkgcXt6mHwwxF5/JyMJApjwlvivVAmSx0wN8Hh9MAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:55:41.723272Z"},"content_sha256":"6487167f4e0ea962d1d90e987a22e37fe5dd2015e8d260ef388f0dd97e8036a7","schema_version":"1.0","event_id":"sha256:6487167f4e0ea962d1d90e987a22e37fe5dd2015e8d260ef388f0dd97e8036a7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VSI6E2YM24WGLLJ2INOOJMW67K/bundle.json","state_url":"https://pith.science/pith/VSI6E2YM24WGLLJ2INOOJMW67K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VSI6E2YM24WGLLJ2INOOJMW67K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T20:55:41Z","links":{"resolver":"https://pith.science/pith/VSI6E2YM24WGLLJ2INOOJMW67K","bundle":"https://pith.science/pith/VSI6E2YM24WGLLJ2INOOJMW67K/bundle.json","state":"https://pith.science/pith/VSI6E2YM24WGLLJ2INOOJMW67K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VSI6E2YM24WGLLJ2INOOJMW67K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:VSI6E2YM24WGLLJ2INOOJMW67K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"acbe384e8d7a8e57d00e289154783459fa835b22c2bcc82610f28e3404a82731","cross_cats_sorted":["cs.DC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T14:14:24Z","title_canon_sha256":"6e89501d704cfa6274d8c867353f1d812cf1b3e723b61b47f3b9376ab8029cdd"},"schema_version":"1.0","source":{"id":"2405.15586","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.15586","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"arxiv_version","alias_value":"2405.15586v2","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.15586","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"pith_short_12","alias_value":"VSI6E2YM24WG","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"pith_short_16","alias_value":"VSI6E2YM24WGLLJ2","created_at":"2026-07-05T09:34:35Z"},{"alias_kind":"pith_short_8","alias_value":"VSI6E2YM","created_at":"2026-07-05T09:34:35Z"}],"graph_snapshots":[{"event_id":"sha256:6487167f4e0ea962d1d90e987a22e37fe5dd2015e8d260ef388f0dd97e8036a7","target":"graph","created_at":"2026-07-05T09:34:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.15586/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning works by aggregating locally computed gradients from multiple clients, thus enabling collaborative training without sharing private client data. However, prior work has shown that the data can actually be recovered by the server using so-called gradient inversion attacks. While these attacks perform well when applied on images, they are limited in the text domain and only permit approximate reconstruction of small batches and short input sequences. In this work, we propose DAGER, the first algorithm to recover whole batches of input text exactly. DAGER leverages the low-rank","authors_text":"Dimitar I. Dimitrov, Ivo Petrov, Mark Niklas M\\\"uller, Martin Vechev, Maximilian Baader","cross_cats":["cs.DC"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T14:14:24Z","title":"DAGER: Exact Gradient Inversion for Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.15586","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2636a17fcf076187135b26c33b739289b996aa1c61283b6e5d961ec38d4ae56f","target":"record","created_at":"2026-07-05T09:34:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"acbe384e8d7a8e57d00e289154783459fa835b22c2bcc82610f28e3404a82731","cross_cats_sorted":["cs.DC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T14:14:24Z","title_canon_sha256":"6e89501d704cfa6274d8c867353f1d812cf1b3e723b61b47f3b9376ab8029cdd"},"schema_version":"1.0","source":{"id":"2405.15586","kind":"arxiv","version":2}},"canonical_sha256":"ac91e26b0cd72c65ad3a435ce4b2defa8cc71b28ac68c1981997cc4721099898","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ac91e26b0cd72c65ad3a435ce4b2defa8cc71b28ac68c1981997cc4721099898","first_computed_at":"2026-07-05T09:34:35.973908Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:34:35.973908Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tE1q6rof/R5Bn/GGd4GktxWjzqAf8k8z9lbuBFv/D2xk1JwiLR95JLWFYGtLwKs07Sc9QRyFkSK8WVkz4uU1DA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:34:35.974410Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.15586","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2636a17fcf076187135b26c33b739289b996aa1c61283b6e5d961ec38d4ae56f","sha256:6487167f4e0ea962d1d90e987a22e37fe5dd2015e8d260ef388f0dd97e8036a7"],"state_sha256":"18ffdbd36866f4f02a6d1abbf4deb111ca6d364c7929dca39c2eabe6e397181c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MUrjqO83q5MPWzUHrpF1/Anqh6/6bhxXKZPx2jWqg17g/et3crwW3ya0A9D2Qfxyy3voBCXJkr/Wk4SvPLZiBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T20:55:41.725300Z","bundle_sha256":"a5088c12a8e5f9f4276611fb33316960f0040bb83515827d61e01f1ebc696d5f"}}