{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:WSYXKACKAMZ554Q4DZ63CSSNTY","short_pith_number":"pith:WSYXKACK","canonical_record":{"source":{"id":"2606.06286","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-06-04T15:25:24Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"1541308ab731dc5c3228b34e6be5e98954dd27ea3bbaff64ac5eb5f4741fcb4c","abstract_canon_sha256":"e4ee217d28ba62573776051440ab1fa2f9d13c4cc6b97c1875e3992e5f7d713e"},"schema_version":"1.0"},"canonical_sha256":"b4b175004a0333def21c1e7db14a4d9e2f93dea519d9945ee092a4c209cc25ed","source":{"kind":"arxiv","id":"2606.06286","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.06286","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"arxiv_version","alias_value":"2606.06286v1","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.06286","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"pith_short_12","alias_value":"WSYXKACKAMZ5","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"pith_short_16","alias_value":"WSYXKACKAMZ554Q4","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"pith_short_8","alias_value":"WSYXKACK","created_at":"2026-06-05T01:15:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:WSYXKACKAMZ554Q4DZ63CSSNTY","target":"record","payload":{"canonical_record":{"source":{"id":"2606.06286","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-06-04T15:25:24Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"1541308ab731dc5c3228b34e6be5e98954dd27ea3bbaff64ac5eb5f4741fcb4c","abstract_canon_sha256":"e4ee217d28ba62573776051440ab1fa2f9d13c4cc6b97c1875e3992e5f7d713e"},"schema_version":"1.0"},"canonical_sha256":"b4b175004a0333def21c1e7db14a4d9e2f93dea519d9945ee092a4c209cc25ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-05T01:15:40.571443Z","signature_b64":"+9pFau1hfusz53iWYGtSPrV+c9SZ8NFNbxsIjp0U4aHeTntSgLq+dKRMftwcNc0JZH3U0yLjylO/F3+bjMf0DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b4b175004a0333def21c1e7db14a4d9e2f93dea519d9945ee092a4c209cc25ed","last_reissued_at":"2026-06-05T01:15:40.571092Z","signature_status":"signed_v1","first_computed_at":"2026-06-05T01:15:40.571092Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.06286","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-05T01:15:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4MiIEOC2Y8kgc3w2dvta7Jpo2Xln/6F5fKETlhmDzMQqqi2Lx39q5o7DIYH+OIZBOLRQWIn5YG0OyopK5lwQAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-24T00:12:47.261714Z"},"content_sha256":"577d06dbe3d27efe8b8a99da0d1ee2180cf64d3a26864ba4f958146681e9678f","schema_version":"1.0","event_id":"sha256:577d06dbe3d27efe8b8a99da0d1ee2180cf64d3a26864ba4f958146681e9678f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:WSYXKACKAMZ554Q4DZ63CSSNTY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLMs Can Leak Training Data But Do They Want To? A Propensity-Aware Evaluation of Memorization in LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Gianluca Barmina, Lukas Galke Poech, Peter Schneider-Kamp","submitted_at":"2026-06-04T15:25:24Z","abstract_excerpt":"Large language models can reproduce training data, but existing memorization evaluations mostly measure whether models can be forced to do so, rather than whether they do so under ordinary use. We introduce PropMe, a propensity-aware framework for memorization evaluation that contrasts prefix-based capability attacks with non-adversarial evaluations. We propose a metric transformation that, applied to existing functions, allows to create propensity metrics. We further introduce SimpleTrace, a lightweight tracing pipeline built on infini-gram that deterministically attributes model generations "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.06286","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.06286/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-05T01:15:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1BB04B/7Jv+mIoKwqYLZ/sqV2We7qDyMvsHOndgYkcfetKDX2vrcUQjXXwaKeVhfTwjLZJ+cUOgJZ1CTBM1iCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-24T00:12:47.262091Z"},"content_sha256":"21f8254ec4c4b1670543b60cf892c2a6fd4716051641e3904812587a960eee97","schema_version":"1.0","event_id":"sha256:21f8254ec4c4b1670543b60cf892c2a6fd4716051641e3904812587a960eee97"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WSYXKACKAMZ554Q4DZ63CSSNTY/bundle.json","state_url":"https://pith.science/pith/WSYXKACKAMZ554Q4DZ63CSSNTY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WSYXKACKAMZ554Q4DZ63CSSNTY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-24T00:12:47Z","links":{"resolver":"https://pith.science/pith/WSYXKACKAMZ554Q4DZ63CSSNTY","bundle":"https://pith.science/pith/WSYXKACKAMZ554Q4DZ63CSSNTY/bundle.json","state":"https://pith.science/pith/WSYXKACKAMZ554Q4DZ63CSSNTY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WSYXKACKAMZ554Q4DZ63CSSNTY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:WSYXKACKAMZ554Q4DZ63CSSNTY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4ee217d28ba62573776051440ab1fa2f9d13c4cc6b97c1875e3992e5f7d713e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-06-04T15:25:24Z","title_canon_sha256":"1541308ab731dc5c3228b34e6be5e98954dd27ea3bbaff64ac5eb5f4741fcb4c"},"schema_version":"1.0","source":{"id":"2606.06286","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.06286","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"arxiv_version","alias_value":"2606.06286v1","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.06286","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"pith_short_12","alias_value":"WSYXKACKAMZ5","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"pith_short_16","alias_value":"WSYXKACKAMZ554Q4","created_at":"2026-06-05T01:15:40Z"},{"alias_kind":"pith_short_8","alias_value":"WSYXKACK","created_at":"2026-06-05T01:15:40Z"}],"graph_snapshots":[{"event_id":"sha256:21f8254ec4c4b1670543b60cf892c2a6fd4716051641e3904812587a960eee97","target":"graph","created_at":"2026-06-05T01:15:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.06286/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models can reproduce training data, but existing memorization evaluations mostly measure whether models can be forced to do so, rather than whether they do so under ordinary use. We introduce PropMe, a propensity-aware framework for memorization evaluation that contrasts prefix-based capability attacks with non-adversarial evaluations. We propose a metric transformation that, applied to existing functions, allows to create propensity metrics. We further introduce SimpleTrace, a lightweight tracing pipeline built on infini-gram that deterministically attributes model generations ","authors_text":"Gianluca Barmina, Lukas Galke Poech, Peter Schneider-Kamp","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-06-04T15:25:24Z","title":"LLMs Can Leak Training Data But Do They Want To? A Propensity-Aware Evaluation of Memorization in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.06286","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:577d06dbe3d27efe8b8a99da0d1ee2180cf64d3a26864ba4f958146681e9678f","target":"record","created_at":"2026-06-05T01:15:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4ee217d28ba62573776051440ab1fa2f9d13c4cc6b97c1875e3992e5f7d713e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-06-04T15:25:24Z","title_canon_sha256":"1541308ab731dc5c3228b34e6be5e98954dd27ea3bbaff64ac5eb5f4741fcb4c"},"schema_version":"1.0","source":{"id":"2606.06286","kind":"arxiv","version":1}},"canonical_sha256":"b4b175004a0333def21c1e7db14a4d9e2f93dea519d9945ee092a4c209cc25ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b4b175004a0333def21c1e7db14a4d9e2f93dea519d9945ee092a4c209cc25ed","first_computed_at":"2026-06-05T01:15:40.571092Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-05T01:15:40.571092Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+9pFau1hfusz53iWYGtSPrV+c9SZ8NFNbxsIjp0U4aHeTntSgLq+dKRMftwcNc0JZH3U0yLjylO/F3+bjMf0DA==","signature_status":"signed_v1","signed_at":"2026-06-05T01:15:40.571443Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.06286","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:577d06dbe3d27efe8b8a99da0d1ee2180cf64d3a26864ba4f958146681e9678f","sha256:21f8254ec4c4b1670543b60cf892c2a6fd4716051641e3904812587a960eee97"],"state_sha256":"cae6f6c858b3071fc983fed06f49ef1816c05f6efbfe9ad4c84f65c0d2d388d7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cAExoDkV+ucjPiCETJAcn4mOIBlWAi8xLb67Tb0GApFGppE5Iy5AQ5O+SQIOABxhDvvu++L6dkkYWj8UV/0eDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-24T00:12:47.264163Z","bundle_sha256":"78cc673ef207dc7b4be071af09aea493bcb090cb3bc290a65fb07646e92ceaa2"}}