{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:H5QF55QRFUXW6QB55H5UPQ3DUO","short_pith_number":"pith:H5QF55QR","canonical_record":{"source":{"id":"2309.11765","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-21T03:59:00Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2f1524960c2e6f73631653be294afc9b8427b70cee256bdced8be4f3519cb578","abstract_canon_sha256":"d9ad834b2410eb26cf526948cd531588a2fde94cf8e4ef1a44c5cccecd0c3613"},"schema_version":"1.0"},"canonical_sha256":"3f605ef6112d2f6f403de9fb47c363a3968a57f5785dabefa3f5d4c913252957","source":{"kind":"arxiv","id":"2309.11765","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.11765","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"arxiv_version","alias_value":"2309.11765v2","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.11765","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"pith_short_12","alias_value":"H5QF55QRFUXW","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"pith_short_16","alias_value":"H5QF55QRFUXW6QB5","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"pith_short_8","alias_value":"H5QF55QR","created_at":"2026-07-05T07:38:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:H5QF55QRFUXW6QB55H5UPQ3DUO","target":"record","payload":{"canonical_record":{"source":{"id":"2309.11765","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-21T03:59:00Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2f1524960c2e6f73631653be294afc9b8427b70cee256bdced8be4f3519cb578","abstract_canon_sha256":"d9ad834b2410eb26cf526948cd531588a2fde94cf8e4ef1a44c5cccecd0c3613"},"schema_version":"1.0"},"canonical_sha256":"3f605ef6112d2f6f403de9fb47c363a3968a57f5785dabefa3f5d4c913252957","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:38:30.779757Z","signature_b64":"szSWZ45bUMOPWmw069qblueEQsJhB1GrEFdSPX23d6Vf2S9BOUvCCLrmlsjcZhpoLH2+qwF5Z00ZPdToPZjHAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3f605ef6112d2f6f403de9fb47c363a3968a57f5785dabefa3f5d4c913252957","last_reissued_at":"2026-07-05T07:38:30.779171Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:38:30.779171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.11765","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:38:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0RTFLVZZsme6b82RZtnDpXpDN7y6ccxz9U57GHDu9Fk2ElEAeX3twdD8O5d7H9wEANqHnp7Cfebpso+8dCA1BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T18:40:32.160796Z"},"content_sha256":"81c01b97a198d07f1f9d0719e1efe47111d52fb54587042373c362f788f3c9e6","schema_version":"1.0","event_id":"sha256:81c01b97a198d07f1f9d0719e1efe47111d52fb54587042373c362f788f3c9e6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:H5QF55QRFUXW6QB55H5UPQ3DUO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Andre Manoel, FatemehSadat Mireshghallah, Huseyin A. Inan, Janardhan Kulkarni, Richard Shin, Robert Sim, Sivakanth Gopi, Xinyu Tang, Zinan Lin","submitted_at":"2023-09-21T03:59:00Z","abstract_excerpt":"We study the problem of in-context learning (ICL) with large language models (LLMs) on private datasets. This scenario poses privacy risks, as LLMs may leak or regurgitate the private examples demonstrated in the prompt. We propose a novel algorithm that generates synthetic few-shot demonstrations from the private dataset with formal differential privacy (DP) guarantees, and show empirically that it can achieve effective ICL. We conduct extensive experiments on standard benchmarks and compare our algorithm with non-private ICL and zero-shot solutions. Our results demonstrate that our algorithm"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.11765","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.11765/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:38:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9h42sI1V//ne5+zbk5UZn/iQGwDr1fy6UboP+ZBKiEYJyf4zXR4sVo21J5/E9uMuwNo2Opx2rwz6iBYU0xYEAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T18:40:32.161768Z"},"content_sha256":"f54ab8f8e36061f6a4ab0e6865743b4c32f16254a4c26a10efc0aa8760681cb2","schema_version":"1.0","event_id":"sha256:f54ab8f8e36061f6a4ab0e6865743b4c32f16254a4c26a10efc0aa8760681cb2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H5QF55QRFUXW6QB55H5UPQ3DUO/bundle.json","state_url":"https://pith.science/pith/H5QF55QRFUXW6QB55H5UPQ3DUO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H5QF55QRFUXW6QB55H5UPQ3DUO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T18:40:32Z","links":{"resolver":"https://pith.science/pith/H5QF55QRFUXW6QB55H5UPQ3DUO","bundle":"https://pith.science/pith/H5QF55QRFUXW6QB55H5UPQ3DUO/bundle.json","state":"https://pith.science/pith/H5QF55QRFUXW6QB55H5UPQ3DUO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H5QF55QRFUXW6QB55H5UPQ3DUO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:H5QF55QRFUXW6QB55H5UPQ3DUO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d9ad834b2410eb26cf526948cd531588a2fde94cf8e4ef1a44c5cccecd0c3613","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-21T03:59:00Z","title_canon_sha256":"2f1524960c2e6f73631653be294afc9b8427b70cee256bdced8be4f3519cb578"},"schema_version":"1.0","source":{"id":"2309.11765","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.11765","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"arxiv_version","alias_value":"2309.11765v2","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.11765","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"pith_short_12","alias_value":"H5QF55QRFUXW","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"pith_short_16","alias_value":"H5QF55QRFUXW6QB5","created_at":"2026-07-05T07:38:30Z"},{"alias_kind":"pith_short_8","alias_value":"H5QF55QR","created_at":"2026-07-05T07:38:30Z"}],"graph_snapshots":[{"event_id":"sha256:f54ab8f8e36061f6a4ab0e6865743b4c32f16254a4c26a10efc0aa8760681cb2","target":"graph","created_at":"2026-07-05T07:38:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.11765/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study the problem of in-context learning (ICL) with large language models (LLMs) on private datasets. This scenario poses privacy risks, as LLMs may leak or regurgitate the private examples demonstrated in the prompt. We propose a novel algorithm that generates synthetic few-shot demonstrations from the private dataset with formal differential privacy (DP) guarantees, and show empirically that it can achieve effective ICL. We conduct extensive experiments on standard benchmarks and compare our algorithm with non-private ICL and zero-shot solutions. Our results demonstrate that our algorithm","authors_text":"Andre Manoel, FatemehSadat Mireshghallah, Huseyin A. Inan, Janardhan Kulkarni, Richard Shin, Robert Sim, Sivakanth Gopi, Xinyu Tang, Zinan Lin","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-21T03:59:00Z","title":"Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.11765","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:81c01b97a198d07f1f9d0719e1efe47111d52fb54587042373c362f788f3c9e6","target":"record","created_at":"2026-07-05T07:38:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d9ad834b2410eb26cf526948cd531588a2fde94cf8e4ef1a44c5cccecd0c3613","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-21T03:59:00Z","title_canon_sha256":"2f1524960c2e6f73631653be294afc9b8427b70cee256bdced8be4f3519cb578"},"schema_version":"1.0","source":{"id":"2309.11765","kind":"arxiv","version":2}},"canonical_sha256":"3f605ef6112d2f6f403de9fb47c363a3968a57f5785dabefa3f5d4c913252957","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3f605ef6112d2f6f403de9fb47c363a3968a57f5785dabefa3f5d4c913252957","first_computed_at":"2026-07-05T07:38:30.779171Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:38:30.779171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"szSWZ45bUMOPWmw069qblueEQsJhB1GrEFdSPX23d6Vf2S9BOUvCCLrmlsjcZhpoLH2+qwF5Z00ZPdToPZjHAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:38:30.779757Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.11765","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:81c01b97a198d07f1f9d0719e1efe47111d52fb54587042373c362f788f3c9e6","sha256:f54ab8f8e36061f6a4ab0e6865743b4c32f16254a4c26a10efc0aa8760681cb2"],"state_sha256":"37fdf239bb552c856caa2e717b9a023842d79cf16a99e2f720cf13c51d0be24d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GPQkTQBZFpxxqkvV3pq+vXuGWqT+G0IM6Z7qRbWCAF9PWZZL42EpVGS8KPDSBQ1gZ5tZEvJNpgPmA5yazGf8BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T18:40:32.169239Z","bundle_sha256":"5fbdb50707a5788a411a81857fcefc0a746efc53915eceaafc5e66a2969bba5f"}}