{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:WEHPMDJY43QZZKY3Y34ZJFWTYM","short_pith_number":"pith:WEHPMDJY","canonical_record":{"source":{"id":"2406.17975","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-06-25T23:12:07Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"c8d86e68ef3edd5b365601c391937e6a747b53fe154d194737524eb50616f2c9","abstract_canon_sha256":"05ff1dac584fd3b663b93cc6b64cea719308d50af4208bfc15d069cf555e1b7f"},"schema_version":"1.0"},"canonical_sha256":"b10ef60d38e6e19cab1bc6f99496d3c3152227f9b4d934bd02f8f1016c942ffb","source":{"kind":"arxiv","id":"2406.17975","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.17975","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"arxiv_version","alias_value":"2406.17975v3","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.17975","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"pith_short_12","alias_value":"WEHPMDJY43QZ","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"pith_short_16","alias_value":"WEHPMDJY43QZZKY3","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"pith_short_8","alias_value":"WEHPMDJY","created_at":"2026-07-05T10:26:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:WEHPMDJY43QZZKY3Y34ZJFWTYM","target":"record","payload":{"canonical_record":{"source":{"id":"2406.17975","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-06-25T23:12:07Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"c8d86e68ef3edd5b365601c391937e6a747b53fe154d194737524eb50616f2c9","abstract_canon_sha256":"05ff1dac584fd3b663b93cc6b64cea719308d50af4208bfc15d069cf555e1b7f"},"schema_version":"1.0"},"canonical_sha256":"b10ef60d38e6e19cab1bc6f99496d3c3152227f9b4d934bd02f8f1016c942ffb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:26:04.806158Z","signature_b64":"7SxYEPjbFIhe/j4F5BVF+fnU5uLV9imX0uiE/ARN4Md3wP/G0t4FAnkVxViY5JJOehGwipUgumG2WrGx2evBBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b10ef60d38e6e19cab1bc6f99496d3c3152227f9b4d934bd02f8f1016c942ffb","last_reissued_at":"2026-07-05T10:26:04.805520Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:26:04.805520Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.17975","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:26:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hdmSnKVc4vgSialWEmKJ45XCsOaGOUoubEHZbJQWvqxRc6f0cYK0+J/qO40MuPjwfWFwLim7hAgjXc5WSlrUCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T16:26:26.561015Z"},"content_sha256":"5141d255c99323a56cf57c138b8831cc200bf0442f6d75b97f13fb51998ae931","schema_version":"1.0","event_id":"sha256:5141d255c99323a56cf57c138b8831cc200bf0442f6d75b97f13fb51998ae931"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:WEHPMDJY43QZZKY3Y34ZJFWTYM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Igor Shilov, Manuel Faysse, Marek Rei, Matthieu Meeus, Shubham Jain, Yves-Alexandre de Montjoye","submitted_at":"2024-06-25T23:12:07Z","abstract_excerpt":"Whether LLMs memorize their training data and what this means, from measuring privacy leakage to detecting copyright violations, has become a rapidly growing area of research. In the last few months, more than 10 new methods have been proposed to perform Membership Inference Attacks (MIAs) against LLMs. Contrary to traditional MIAs which rely on fixed-but randomized-records or models, these methods are mostly trained and tested on datasets collected post-hoc. Sets of members and non-members, used to evaluate the MIA, are constructed using informed guesses after the release of a model. This lac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.17975","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.17975/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:26:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0vqr4YQ4RovMN6bmFsrx05ipx24gwfxlr3D3ulby8OL0i+bbfUR89gpsc8d6kPODkN1oF0ENHASThyNK8JDZBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T16:26:26.561546Z"},"content_sha256":"d212236745830b37e52ba09949ae8b4e5c75473492d49304b8f504407b5064e0","schema_version":"1.0","event_id":"sha256:d212236745830b37e52ba09949ae8b4e5c75473492d49304b8f504407b5064e0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WEHPMDJY43QZZKY3Y34ZJFWTYM/bundle.json","state_url":"https://pith.science/pith/WEHPMDJY43QZZKY3Y34ZJFWTYM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WEHPMDJY43QZZKY3Y34ZJFWTYM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T16:26:26Z","links":{"resolver":"https://pith.science/pith/WEHPMDJY43QZZKY3Y34ZJFWTYM","bundle":"https://pith.science/pith/WEHPMDJY43QZZKY3Y34ZJFWTYM/bundle.json","state":"https://pith.science/pith/WEHPMDJY43QZZKY3Y34ZJFWTYM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WEHPMDJY43QZZKY3Y34ZJFWTYM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WEHPMDJY43QZZKY3Y34ZJFWTYM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"05ff1dac584fd3b663b93cc6b64cea719308d50af4208bfc15d069cf555e1b7f","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-06-25T23:12:07Z","title_canon_sha256":"c8d86e68ef3edd5b365601c391937e6a747b53fe154d194737524eb50616f2c9"},"schema_version":"1.0","source":{"id":"2406.17975","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.17975","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"arxiv_version","alias_value":"2406.17975v3","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.17975","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"pith_short_12","alias_value":"WEHPMDJY43QZ","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"pith_short_16","alias_value":"WEHPMDJY43QZZKY3","created_at":"2026-07-05T10:26:04Z"},{"alias_kind":"pith_short_8","alias_value":"WEHPMDJY","created_at":"2026-07-05T10:26:04Z"}],"graph_snapshots":[{"event_id":"sha256:d212236745830b37e52ba09949ae8b4e5c75473492d49304b8f504407b5064e0","target":"graph","created_at":"2026-07-05T10:26:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.17975/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Whether LLMs memorize their training data and what this means, from measuring privacy leakage to detecting copyright violations, has become a rapidly growing area of research. In the last few months, more than 10 new methods have been proposed to perform Membership Inference Attacks (MIAs) against LLMs. Contrary to traditional MIAs which rely on fixed-but randomized-records or models, these methods are mostly trained and tested on datasets collected post-hoc. Sets of members and non-members, used to evaluate the MIA, are constructed using informed guesses after the release of a model. This lac","authors_text":"Igor Shilov, Manuel Faysse, Marek Rei, Matthieu Meeus, Shubham Jain, Yves-Alexandre de Montjoye","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-06-25T23:12:07Z","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.17975","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5141d255c99323a56cf57c138b8831cc200bf0442f6d75b97f13fb51998ae931","target":"record","created_at":"2026-07-05T10:26:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"05ff1dac584fd3b663b93cc6b64cea719308d50af4208bfc15d069cf555e1b7f","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-06-25T23:12:07Z","title_canon_sha256":"c8d86e68ef3edd5b365601c391937e6a747b53fe154d194737524eb50616f2c9"},"schema_version":"1.0","source":{"id":"2406.17975","kind":"arxiv","version":3}},"canonical_sha256":"b10ef60d38e6e19cab1bc6f99496d3c3152227f9b4d934bd02f8f1016c942ffb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b10ef60d38e6e19cab1bc6f99496d3c3152227f9b4d934bd02f8f1016c942ffb","first_computed_at":"2026-07-05T10:26:04.805520Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:26:04.805520Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7SxYEPjbFIhe/j4F5BVF+fnU5uLV9imX0uiE/ARN4Md3wP/G0t4FAnkVxViY5JJOehGwipUgumG2WrGx2evBBA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:26:04.806158Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.17975","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5141d255c99323a56cf57c138b8831cc200bf0442f6d75b97f13fb51998ae931","sha256:d212236745830b37e52ba09949ae8b4e5c75473492d49304b8f504407b5064e0"],"state_sha256":"41e6d25480818fcb87f05e088fc568005185fbeaf554dbdc9c44cfc7f72dc2ae"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i2yvugwLyWUxBLSMhul2iWLt1Eh4JIcqq1aqG7KPWxIASLDPNihHMsQJw4l/BRjBt7hP3FYdQVZu/0WCAtCfCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T16:26:26.566428Z","bundle_sha256":"fa3bd1a04fe6b1bdeaa5a954ba3b2e43bbc3781ea4133fd766ecd9e5103af6a0"}}