{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:7H5J6IZCMSOBVZV35JOVO7FYL6","short_pith_number":"pith:7H5J6IZC","canonical_record":{"source":{"id":"2504.09910","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-04-14T06:10:31Z","cross_cats_sorted":[],"title_canon_sha256":"6d17c8c69b186b2872fb7b83da61453c83dc1573cb968787041a7e5afafd871f","abstract_canon_sha256":"ac8e457090135a199610cbf9c450e423006873af9f151716505aae81f355aed6"},"schema_version":"1.0"},"canonical_sha256":"f9fa9f2322649c1ae6bbea5d577cb85f8db3b3ade7bc2823780f50fc0aa43f7f","source":{"kind":"arxiv","id":"2504.09910","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.09910","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"arxiv_version","alias_value":"2504.09910v2","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.09910","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"pith_short_12","alias_value":"7H5J6IZCMSOB","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"pith_short_16","alias_value":"7H5J6IZCMSOBVZV3","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"pith_short_8","alias_value":"7H5J6IZC","created_at":"2026-06-25T01:17:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:7H5J6IZCMSOBVZV35JOVO7FYL6","target":"record","payload":{"canonical_record":{"source":{"id":"2504.09910","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-04-14T06:10:31Z","cross_cats_sorted":[],"title_canon_sha256":"6d17c8c69b186b2872fb7b83da61453c83dc1573cb968787041a7e5afafd871f","abstract_canon_sha256":"ac8e457090135a199610cbf9c450e423006873af9f151716505aae81f355aed6"},"schema_version":"1.0"},"canonical_sha256":"f9fa9f2322649c1ae6bbea5d577cb85f8db3b3ade7bc2823780f50fc0aa43f7f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-25T01:17:44.347006Z","signature_b64":"xqUiEHG6dUYzBKX3Q585a/iqS3nC58PMVQMgCdMcuVwf0AVDA6JXKOsZSIvRkj71xPbJ90Ugq0MJkpI5ZlDlCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f9fa9f2322649c1ae6bbea5d577cb85f8db3b3ade7bc2823780f50fc0aa43f7f","last_reissued_at":"2026-06-25T01:17:44.346495Z","signature_status":"signed_v1","first_computed_at":"2026-06-25T01:17:44.346495Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.09910","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:17:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AASQRJEvhMHIMu/ALVXoUYFZd4Yl3YDk1pwMOX8YbzhmE+zGUR2jL/2m0GLTkUTY1qa+qu+Fa2VmtMYZEtbzBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T20:09:21.501241Z"},"content_sha256":"09856d24c8b485b4336d7b1d076f4a46a6190932f22a4b2c37000a46ef3ef11b","schema_version":"1.0","event_id":"sha256:09856d24c8b485b4336d7b1d076f4a46a6190932f22a4b2c37000a46ef3ef11b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:7H5J6IZCMSOBVZV35JOVO7FYL6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learning to Erase Private Knowledge from Multi-Documents for Retrieval-Augmented Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Binghui Guo, Hainan Zhang, Hongwei Zheng, Jinwen Chen, Liang Pang, Yongxin Tong, Yujing Wang, Zhiming Zheng","submitted_at":"2025-04-14T06:10:31Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) is a promising technique for applying LLMs to proprietary domains. However, retrieved documents may contain sensitive knowledge, posing risks of privacy leakage in generative results. Thus, effectively erasing private information from retrieved documents is a key challenge for RAG. Unlike traditional text anonymization, RAG should consider: (1) the inherent multi-document reasoning may face de-anonymization attacks; (2) private knowledge varies by scenarios, so users should be allowed to customize which information to erase; (3) preserving sufficient public"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.09910","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.09910/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:17:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o5QpPFVaZvvTgbO+ttqup79x4D575E2oW1adIfQKmC/0TECNvlKtMzxX+S/OrgKngLeZjYsw9/DcmashYzhvDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T20:09:21.501628Z"},"content_sha256":"eaab47ac0ca3f1a26903e733f735e751b6f36d7ca6bbe04f9d42a9b8a75039f5","schema_version":"1.0","event_id":"sha256:eaab47ac0ca3f1a26903e733f735e751b6f36d7ca6bbe04f9d42a9b8a75039f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7H5J6IZCMSOBVZV35JOVO7FYL6/bundle.json","state_url":"https://pith.science/pith/7H5J6IZCMSOBVZV35JOVO7FYL6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7H5J6IZCMSOBVZV35JOVO7FYL6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-28T20:09:21Z","links":{"resolver":"https://pith.science/pith/7H5J6IZCMSOBVZV35JOVO7FYL6","bundle":"https://pith.science/pith/7H5J6IZCMSOBVZV35JOVO7FYL6/bundle.json","state":"https://pith.science/pith/7H5J6IZCMSOBVZV35JOVO7FYL6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7H5J6IZCMSOBVZV35JOVO7FYL6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:7H5J6IZCMSOBVZV35JOVO7FYL6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ac8e457090135a199610cbf9c450e423006873af9f151716505aae81f355aed6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-04-14T06:10:31Z","title_canon_sha256":"6d17c8c69b186b2872fb7b83da61453c83dc1573cb968787041a7e5afafd871f"},"schema_version":"1.0","source":{"id":"2504.09910","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.09910","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"arxiv_version","alias_value":"2504.09910v2","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.09910","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"pith_short_12","alias_value":"7H5J6IZCMSOB","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"pith_short_16","alias_value":"7H5J6IZCMSOBVZV3","created_at":"2026-06-25T01:17:44Z"},{"alias_kind":"pith_short_8","alias_value":"7H5J6IZC","created_at":"2026-06-25T01:17:44Z"}],"graph_snapshots":[{"event_id":"sha256:eaab47ac0ca3f1a26903e733f735e751b6f36d7ca6bbe04f9d42a9b8a75039f5","target":"graph","created_at":"2026-06-25T01:17:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.09910/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) is a promising technique for applying LLMs to proprietary domains. However, retrieved documents may contain sensitive knowledge, posing risks of privacy leakage in generative results. Thus, effectively erasing private information from retrieved documents is a key challenge for RAG. Unlike traditional text anonymization, RAG should consider: (1) the inherent multi-document reasoning may face de-anonymization attacks; (2) private knowledge varies by scenarios, so users should be allowed to customize which information to erase; (3) preserving sufficient public","authors_text":"Binghui Guo, Hainan Zhang, Hongwei Zheng, Jinwen Chen, Liang Pang, Yongxin Tong, Yujing Wang, Zhiming Zheng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-04-14T06:10:31Z","title":"Learning to Erase Private Knowledge from Multi-Documents for Retrieval-Augmented Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.09910","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:09856d24c8b485b4336d7b1d076f4a46a6190932f22a4b2c37000a46ef3ef11b","target":"record","created_at":"2026-06-25T01:17:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ac8e457090135a199610cbf9c450e423006873af9f151716505aae81f355aed6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-04-14T06:10:31Z","title_canon_sha256":"6d17c8c69b186b2872fb7b83da61453c83dc1573cb968787041a7e5afafd871f"},"schema_version":"1.0","source":{"id":"2504.09910","kind":"arxiv","version":2}},"canonical_sha256":"f9fa9f2322649c1ae6bbea5d577cb85f8db3b3ade7bc2823780f50fc0aa43f7f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f9fa9f2322649c1ae6bbea5d577cb85f8db3b3ade7bc2823780f50fc0aa43f7f","first_computed_at":"2026-06-25T01:17:44.346495Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-25T01:17:44.346495Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xqUiEHG6dUYzBKX3Q585a/iqS3nC58PMVQMgCdMcuVwf0AVDA6JXKOsZSIvRkj71xPbJ90Ugq0MJkpI5ZlDlCw==","signature_status":"signed_v1","signed_at":"2026-06-25T01:17:44.347006Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.09910","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:09856d24c8b485b4336d7b1d076f4a46a6190932f22a4b2c37000a46ef3ef11b","sha256:eaab47ac0ca3f1a26903e733f735e751b6f36d7ca6bbe04f9d42a9b8a75039f5"],"state_sha256":"c1e1f8e90a34db4ca1d50daa63ad631fd85d6d9facf5527475ed46b9eeb88a7b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tpNbCnKbtC+Dkzm+M3agtCKnxm57h88LHirYUWyxM4apVVK4NDma7kdKZwEalDdMWAuReNDHjnAA7N3/6T/6Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-28T20:09:21.503597Z","bundle_sha256":"75d3e15ccf9eb738249b853e57b5222a6e689c22027765b36f7b8106ecd1f026"}}