{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XIIX3FPSPJMNNRWSIG3VDHFN45","short_pith_number":"pith:XIIX3FPS","canonical_record":{"source":{"id":"2406.14322","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-20T13:54:32Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"13112a381755f1099d114aeec6210a9fd1f49eedf6e0b1f5995c467ce54d93ef","abstract_canon_sha256":"9c71a84e854ac56f2f773d246bb1778174342db1668b1cf71c0b3ddec05eee71"},"schema_version":"1.0"},"canonical_sha256":"ba117d95f27a58d6c6d241b7519cade74d7df95d056af12ed74c4bf1aa88c2e5","source":{"kind":"arxiv","id":"2406.14322","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.14322","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"arxiv_version","alias_value":"2406.14322v3","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.14322","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"pith_short_12","alias_value":"XIIX3FPSPJMN","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"pith_short_16","alias_value":"XIIX3FPSPJMNNRWS","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"pith_short_8","alias_value":"XIIX3FPS","created_at":"2026-07-05T08:56:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XIIX3FPSPJMNNRWSIG3VDHFN45","target":"record","payload":{"canonical_record":{"source":{"id":"2406.14322","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-20T13:54:32Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"13112a381755f1099d114aeec6210a9fd1f49eedf6e0b1f5995c467ce54d93ef","abstract_canon_sha256":"9c71a84e854ac56f2f773d246bb1778174342db1668b1cf71c0b3ddec05eee71"},"schema_version":"1.0"},"canonical_sha256":"ba117d95f27a58d6c6d241b7519cade74d7df95d056af12ed74c4bf1aa88c2e5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:56:05.389789Z","signature_b64":"Wzy7In/Tsb5rss4Q2Xy/x/Ta4ceSTqKbRpKX8oyknz/gu6pIFw6G/oj9QltZda9VZml8WoRE1C8nYrXCVlTNAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ba117d95f27a58d6c6d241b7519cade74d7df95d056af12ed74c4bf1aa88c2e5","last_reissued_at":"2026-07-05T08:56:05.389282Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:56:05.389282Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.14322","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DqDFGFzHcCC5U49jHbeJYz8RFY+a4rY8j/asUV8nc1AMdMvAwK2JulH1gGRGvyoOQyQ67/DFp9uBFh7Xg/NPCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T12:56:52.935664Z"},"content_sha256":"d1a3c611649cda4a80dbd267a1142f177f841d7cae90ced9fc5e8c524e1c4664","schema_version":"1.0","event_id":"sha256:d1a3c611649cda4a80dbd267a1142f177f841d7cae90ced9fc5e8c524e1c4664"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XIIX3FPSPJMNNRWSIG3VDHFN45","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Amer Sinha, Badih Ghazi, Chiyuan Zhang, Daogao Liu, Lynn Chua, Pasin Manurangsi, Pritish Kamath, Ravi Kumar, Yangsibo Huang","submitted_at":"2024-06-20T13:54:32Z","abstract_excerpt":"Large language models (LLMs) have emerged as powerful tools for tackling complex tasks across diverse domains, but they also raise privacy concerns when fine-tuned on sensitive data due to potential memorization. While differential privacy (DP) offers a promising solution by ensuring models are 'almost indistinguishable' with or without any particular privacy unit, current evaluations on LLMs mostly treat each example (text record) as the privacy unit. This leads to uneven user privacy guarantees when contributions per user vary. We therefore study user-level DP motivated by applications where"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.14322","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.14322/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F8mWOCWcn6liyzDd2SHscHsP7kBpJ12ns0h1juMOj5ltYD32AVMtfcUYXMb3yxwfbMIpICjOw4gr+F1LQSnbDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T12:56:52.936275Z"},"content_sha256":"c417a4d9a5d2d2c249e8056719bb37f872def692eeb19b92736c2c595ea55d9b","schema_version":"1.0","event_id":"sha256:c417a4d9a5d2d2c249e8056719bb37f872def692eeb19b92736c2c595ea55d9b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XIIX3FPSPJMNNRWSIG3VDHFN45/bundle.json","state_url":"https://pith.science/pith/XIIX3FPSPJMNNRWSIG3VDHFN45/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XIIX3FPSPJMNNRWSIG3VDHFN45/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T12:56:52Z","links":{"resolver":"https://pith.science/pith/XIIX3FPSPJMNNRWSIG3VDHFN45","bundle":"https://pith.science/pith/XIIX3FPSPJMNNRWSIG3VDHFN45/bundle.json","state":"https://pith.science/pith/XIIX3FPSPJMNNRWSIG3VDHFN45/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XIIX3FPSPJMNNRWSIG3VDHFN45/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XIIX3FPSPJMNNRWSIG3VDHFN45","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9c71a84e854ac56f2f773d246bb1778174342db1668b1cf71c0b3ddec05eee71","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-20T13:54:32Z","title_canon_sha256":"13112a381755f1099d114aeec6210a9fd1f49eedf6e0b1f5995c467ce54d93ef"},"schema_version":"1.0","source":{"id":"2406.14322","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.14322","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"arxiv_version","alias_value":"2406.14322v3","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.14322","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"pith_short_12","alias_value":"XIIX3FPSPJMN","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"pith_short_16","alias_value":"XIIX3FPSPJMNNRWS","created_at":"2026-07-05T08:56:05Z"},{"alias_kind":"pith_short_8","alias_value":"XIIX3FPS","created_at":"2026-07-05T08:56:05Z"}],"graph_snapshots":[{"event_id":"sha256:c417a4d9a5d2d2c249e8056719bb37f872def692eeb19b92736c2c595ea55d9b","target":"graph","created_at":"2026-07-05T08:56:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.14322/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have emerged as powerful tools for tackling complex tasks across diverse domains, but they also raise privacy concerns when fine-tuned on sensitive data due to potential memorization. While differential privacy (DP) offers a promising solution by ensuring models are 'almost indistinguishable' with or without any particular privacy unit, current evaluations on LLMs mostly treat each example (text record) as the privacy unit. This leads to uneven user privacy guarantees when contributions per user vary. We therefore study user-level DP motivated by applications where","authors_text":"Amer Sinha, Badih Ghazi, Chiyuan Zhang, Daogao Liu, Lynn Chua, Pasin Manurangsi, Pritish Kamath, Ravi Kumar, Yangsibo Huang","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-20T13:54:32Z","title":"Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.14322","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d1a3c611649cda4a80dbd267a1142f177f841d7cae90ced9fc5e8c524e1c4664","target":"record","created_at":"2026-07-05T08:56:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9c71a84e854ac56f2f773d246bb1778174342db1668b1cf71c0b3ddec05eee71","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-20T13:54:32Z","title_canon_sha256":"13112a381755f1099d114aeec6210a9fd1f49eedf6e0b1f5995c467ce54d93ef"},"schema_version":"1.0","source":{"id":"2406.14322","kind":"arxiv","version":3}},"canonical_sha256":"ba117d95f27a58d6c6d241b7519cade74d7df95d056af12ed74c4bf1aa88c2e5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ba117d95f27a58d6c6d241b7519cade74d7df95d056af12ed74c4bf1aa88c2e5","first_computed_at":"2026-07-05T08:56:05.389282Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:56:05.389282Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Wzy7In/Tsb5rss4Q2Xy/x/Ta4ceSTqKbRpKX8oyknz/gu6pIFw6G/oj9QltZda9VZml8WoRE1C8nYrXCVlTNAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:56:05.389789Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.14322","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d1a3c611649cda4a80dbd267a1142f177f841d7cae90ced9fc5e8c524e1c4664","sha256:c417a4d9a5d2d2c249e8056719bb37f872def692eeb19b92736c2c595ea55d9b"],"state_sha256":"b23c9ff9375b77f47dde946009ff0abded3732ab4e8a0cbc3ab6896d01bf0a09"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cyXuMXFXgWUVyY5TQWGn1rk06FOoNMvLwH0iBVDzeA/pOsLKoZyfWYTjNzXh6MJd+bo98hYEwF28EHVa/+T2Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T12:56:52.941161Z","bundle_sha256":"d1d274645a82b4854521e875e09d3771f8e325c3f5e7cd235659d0e9b1c87846"}}