{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:ZE7WW4KYSJ4LHFBARCFBB2VFNM","short_pith_number":"pith:ZE7WW4KY","canonical_record":{"source":{"id":"2205.10228","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-04-26T09:36:18Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"b92d66fb87ceec0107d53b71691448b315e6b36e6d1b5acfbc1d1f52ff9b4aa4","abstract_canon_sha256":"422a780da375b1f11a6e817e330f269749637341ccb09612f8aa1a6849737c4c"},"schema_version":"1.0"},"canonical_sha256":"c93f6b71589278b39420888a10eaa56b22200f05f82ea3315a3de109f26e204f","source":{"kind":"arxiv","id":"2205.10228","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.10228","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"arxiv_version","alias_value":"2205.10228v1","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.10228","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"pith_short_12","alias_value":"ZE7WW4KYSJ4L","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"pith_short_16","alias_value":"ZE7WW4KYSJ4LHFBA","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"pith_short_8","alias_value":"ZE7WW4KY","created_at":"2026-07-05T04:25:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:ZE7WW4KYSJ4LHFBARCFBB2VFNM","target":"record","payload":{"canonical_record":{"source":{"id":"2205.10228","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-04-26T09:36:18Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"b92d66fb87ceec0107d53b71691448b315e6b36e6d1b5acfbc1d1f52ff9b4aa4","abstract_canon_sha256":"422a780da375b1f11a6e817e330f269749637341ccb09612f8aa1a6849737c4c"},"schema_version":"1.0"},"canonical_sha256":"c93f6b71589278b39420888a10eaa56b22200f05f82ea3315a3de109f26e204f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:25:04.937500Z","signature_b64":"i2HSqM7jbTOkBTK8tgDGcD5cgu4iKr0zKNhKuSiEK5rjuTelYbWzYQVWF1563iNqHUnOKG3imcW8zfdPlDOoCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c93f6b71589278b39420888a10eaa56b22200f05f82ea3315a3de109f26e204f","last_reissued_at":"2026-07-05T04:25:04.936976Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:25:04.936976Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.10228","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:25:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OuxyGWZkJm7J6H1I4BHigHzy9DV/jAufpn4msgFb/Ld4CTo05/M0Lob7JpCqZ6/y0RGNpRskyRgvR8V0emJiDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T18:40:17.499974Z"},"content_sha256":"eb8e33be1d28bd781ce1aca662623f1b085418f5785faeb096381d2139bcd4bb","schema_version":"1.0","event_id":"sha256:eb8e33be1d28bd781ce1aca662623f1b085418f5785faeb096381d2139bcd4bb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:ZE7WW4KYSJ4LHFBARCFBB2VFNM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"You Don't Know My Favorite Color: Preventing Dialogue Representations from Revealing Speakers' Private Personas","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Haoran Li, Lixin Fan, Yangqiu Song","submitted_at":"2022-04-26T09:36:18Z","abstract_excerpt":"Social chatbots, also known as chit-chat chatbots, evolve rapidly with large pretrained language models. Despite the huge progress, privacy concerns have arisen recently: training data of large language models can be extracted via model inversion attacks. On the other hand, the datasets used for training chatbots contain many private conversations between two individuals. In this work, we further investigate the privacy leakage of the hidden states of chatbots trained by language modeling which has not been well studied yet. We show that speakers' personas can be inferred through a simple neur"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.10228","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.10228/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:25:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V5G/oUgS/UYrALTsaj3o/G/QI7SmpYE075B2bQfTM61LLwDSOJw5ccmXhEbd5V88qoHL0N0s8PZgn7Z4xIrFCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T18:40:17.500322Z"},"content_sha256":"d9620e450d012829f06acc73739f54b033474c15a656e293e5ca950086a0a4bd","schema_version":"1.0","event_id":"sha256:d9620e450d012829f06acc73739f54b033474c15a656e293e5ca950086a0a4bd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZE7WW4KYSJ4LHFBARCFBB2VFNM/bundle.json","state_url":"https://pith.science/pith/ZE7WW4KYSJ4LHFBARCFBB2VFNM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZE7WW4KYSJ4LHFBARCFBB2VFNM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T18:40:17Z","links":{"resolver":"https://pith.science/pith/ZE7WW4KYSJ4LHFBARCFBB2VFNM","bundle":"https://pith.science/pith/ZE7WW4KYSJ4LHFBARCFBB2VFNM/bundle.json","state":"https://pith.science/pith/ZE7WW4KYSJ4LHFBARCFBB2VFNM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZE7WW4KYSJ4LHFBARCFBB2VFNM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:ZE7WW4KYSJ4LHFBARCFBB2VFNM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"422a780da375b1f11a6e817e330f269749637341ccb09612f8aa1a6849737c4c","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-04-26T09:36:18Z","title_canon_sha256":"b92d66fb87ceec0107d53b71691448b315e6b36e6d1b5acfbc1d1f52ff9b4aa4"},"schema_version":"1.0","source":{"id":"2205.10228","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.10228","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"arxiv_version","alias_value":"2205.10228v1","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.10228","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"pith_short_12","alias_value":"ZE7WW4KYSJ4L","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"pith_short_16","alias_value":"ZE7WW4KYSJ4LHFBA","created_at":"2026-07-05T04:25:04Z"},{"alias_kind":"pith_short_8","alias_value":"ZE7WW4KY","created_at":"2026-07-05T04:25:04Z"}],"graph_snapshots":[{"event_id":"sha256:d9620e450d012829f06acc73739f54b033474c15a656e293e5ca950086a0a4bd","target":"graph","created_at":"2026-07-05T04:25:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.10228/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Social chatbots, also known as chit-chat chatbots, evolve rapidly with large pretrained language models. Despite the huge progress, privacy concerns have arisen recently: training data of large language models can be extracted via model inversion attacks. On the other hand, the datasets used for training chatbots contain many private conversations between two individuals. In this work, we further investigate the privacy leakage of the hidden states of chatbots trained by language modeling which has not been well studied yet. We show that speakers' personas can be inferred through a simple neur","authors_text":"Haoran Li, Lixin Fan, Yangqiu Song","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-04-26T09:36:18Z","title":"You Don't Know My Favorite Color: Preventing Dialogue Representations from Revealing Speakers' Private Personas"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.10228","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eb8e33be1d28bd781ce1aca662623f1b085418f5785faeb096381d2139bcd4bb","target":"record","created_at":"2026-07-05T04:25:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"422a780da375b1f11a6e817e330f269749637341ccb09612f8aa1a6849737c4c","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-04-26T09:36:18Z","title_canon_sha256":"b92d66fb87ceec0107d53b71691448b315e6b36e6d1b5acfbc1d1f52ff9b4aa4"},"schema_version":"1.0","source":{"id":"2205.10228","kind":"arxiv","version":1}},"canonical_sha256":"c93f6b71589278b39420888a10eaa56b22200f05f82ea3315a3de109f26e204f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c93f6b71589278b39420888a10eaa56b22200f05f82ea3315a3de109f26e204f","first_computed_at":"2026-07-05T04:25:04.936976Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:25:04.936976Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"i2HSqM7jbTOkBTK8tgDGcD5cgu4iKr0zKNhKuSiEK5rjuTelYbWzYQVWF1563iNqHUnOKG3imcW8zfdPlDOoCw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:25:04.937500Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.10228","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eb8e33be1d28bd781ce1aca662623f1b085418f5785faeb096381d2139bcd4bb","sha256:d9620e450d012829f06acc73739f54b033474c15a656e293e5ca950086a0a4bd"],"state_sha256":"a943b30ca4bca7d1c5c1452e1fa6c240deb0ff157c041679c08c3270b7975861"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Nz8IrxgEJkrCuGAZCHhlrdd35WlyUilT1NQZpw3XjS2fLLPcY6CgxSmuvOKaKr7ToV1Tw4egl5wZsc4u1QsLCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T18:40:17.504168Z","bundle_sha256":"6379b90e1360151643be312a5f89cefcf22b1daa86f76953aa02d01e09e2eb18"}}