{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ZQ64VWY36MA5P3YL7QFCLJ5RWL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"188282e44d73a329186c00a0307a73e31b435c4a6a86dd3809ec577be89024d7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T06:40:57Z","title_canon_sha256":"ab4d57f7e4d4b9f04caa462662dfe1dd64014196c4205ed5e51c7706425722b3"},"schema_version":"1.0","source":{"id":"2509.03058","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.03058","created_at":"2026-07-05T12:04:02Z"},{"alias_kind":"arxiv_version","alias_value":"2509.03058v1","created_at":"2026-07-05T12:04:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.03058","created_at":"2026-07-05T12:04:02Z"},{"alias_kind":"pith_short_12","alias_value":"ZQ64VWY36MA5","created_at":"2026-07-05T12:04:02Z"},{"alias_kind":"pith_short_16","alias_value":"ZQ64VWY36MA5P3YL","created_at":"2026-07-05T12:04:02Z"},{"alias_kind":"pith_short_8","alias_value":"ZQ64VWY3","created_at":"2026-07-05T12:04:02Z"}],"graph_snapshots":[{"event_id":"sha256:ea0bcce3e7e77a4d0a62c7030703cfd319c40da09635ca18339002057b8039a4","target":"graph","created_at":"2026-07-05T12:04:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.03058/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The proliferation of large language models (LLMs) has intensified concerns over model theft and license violations, necessitating robust and stealthy ownership verification. Existing fingerprinting methods either require impractical white-box access or introduce detectable statistical anomalies. We propose EverTracer, a novel gray-box fingerprinting framework that ensures stealthy and robust model provenance tracing. EverTracer is the first to repurpose Membership Inference Attacks (MIAs) for defensive use, embedding ownership signals via memorization instead of artificial trigger-output overf","authors_text":"Meng Han, Wenpeng Xing, Zhenhua Xu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T06:40:57Z","title":"EverTracer: Hunting Stolen Large Language Models via Stealthy and Robust Probabilistic Fingerprint"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.03058","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2b27eb52cd2ac44ec1e8d8b7327a2b3dc499fbd1ada718aa3374e626ad8b1663","target":"record","created_at":"2026-07-05T12:04:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"188282e44d73a329186c00a0307a73e31b435c4a6a86dd3809ec577be89024d7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T06:40:57Z","title_canon_sha256":"ab4d57f7e4d4b9f04caa462662dfe1dd64014196c4205ed5e51c7706425722b3"},"schema_version":"1.0","source":{"id":"2509.03058","kind":"arxiv","version":1}},"canonical_sha256":"cc3dcadb1bf301d7ef0bfc0a25a7b1b2fd280775cfc6975fbc089e4739f8b9c0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cc3dcadb1bf301d7ef0bfc0a25a7b1b2fd280775cfc6975fbc089e4739f8b9c0","first_computed_at":"2026-07-05T12:04:02.995626Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:04:02.995626Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"moOJLP/SqC1FXz6eCKrgkNpScql1G7Wj7ceXSjnxBzoFGqFa43MNUqmvk+IZR3AYUY1OgMdKNm93xbvCxlBtBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:04:02.996109Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.03058","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2b27eb52cd2ac44ec1e8d8b7327a2b3dc499fbd1ada718aa3374e626ad8b1663","sha256:ea0bcce3e7e77a4d0a62c7030703cfd319c40da09635ca18339002057b8039a4"],"state_sha256":"ba65af1b2cbb82cbfe11fccf4a3c97aaf5b676ccec2b7de5d33537b62daf72b1"}