{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:R54R5QGSWRWA5A3BCKX3NLD23D","short_pith_number":"pith:R54R5QGS","canonical_record":{"source":{"id":"2504.21036","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-28T05:34:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"d5c3e8aff4a94c2632ad5921c6d9382f5ae613fd462dc73e31f23f43cf8e4696","abstract_canon_sha256":"f1584f0b028b58e5c4b19812be425e8b4d7239dd68ec562b764d1ffba6d28c0e"},"schema_version":"1.0"},"canonical_sha256":"8f791ec0d2b46c0e836112afb6ac7ad8d14b81d52041fd4662e3b0917fc8a9a9","source":{"kind":"arxiv","id":"2504.21036","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.21036","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"arxiv_version","alias_value":"2504.21036v2","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.21036","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"pith_short_12","alias_value":"R54R5QGSWRWA","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"pith_short_16","alias_value":"R54R5QGSWRWA5A3B","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"pith_short_8","alias_value":"R54R5QGS","created_at":"2026-07-05T10:56:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:R54R5QGSWRWA5A3BCKX3NLD23D","target":"record","payload":{"canonical_record":{"source":{"id":"2504.21036","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-28T05:34:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"d5c3e8aff4a94c2632ad5921c6d9382f5ae613fd462dc73e31f23f43cf8e4696","abstract_canon_sha256":"f1584f0b028b58e5c4b19812be425e8b4d7239dd68ec562b764d1ffba6d28c0e"},"schema_version":"1.0"},"canonical_sha256":"8f791ec0d2b46c0e836112afb6ac7ad8d14b81d52041fd4662e3b0917fc8a9a9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:56:39.924964Z","signature_b64":"2BscB5YuUzJrJNj7pon0sgDQhgFDsywfpudNcDXsXOneKizcRmJTVr4I658v9VMcEORCaOzPTbUdJkSbr6u+Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8f791ec0d2b46c0e836112afb6ac7ad8d14b81d52041fd4662e3b0917fc8a9a9","last_reissued_at":"2026-07-05T10:56:39.924514Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:56:39.924514Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.21036","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:56:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qmuWPekiKJuyEOzIDuAfPEkDvAhEgufEyzkZOSHAd1fDOHqsILX7iAvtw+W/SF98Cgy1qteXKIc9mHp5SqypBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T20:45:03.680127Z"},"content_sha256":"d376825d35b4fc5b5b79d9f51427637dae503a70772c87814d820b2b38e6d02b","schema_version":"1.0","event_id":"sha256:d376825d35b4fc5b5b79d9f51427637dae503a70772c87814d820b2b38e6d02b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:R54R5QGSWRWA5A3BCKX3NLD23D","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can Differentially Private Fine-tuning LLMs Protect Against Privacy Attacks?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Hao Du, Shang Liu, Yang Cao","submitted_at":"2025-04-28T05:34:53Z","abstract_excerpt":"Fine-tuning large language models (LLMs) has become an essential strategy for adapting them to specialized tasks; however, this process introduces significant privacy challenges, as sensitive training data may be inadvertently memorized and exposed. Although differential privacy (DP) offers strong theoretical guarantees against such leakage, its empirical privacy effectiveness on LLMs remains unclear, especially under different fine-tuning methods. In this paper, we systematically investigate the impact of DP across fine-tuning methods and privacy budgets, using both data extraction and member"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.21036","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.21036/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:56:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lRD+T4+FCH4JiNuhOHQJESGjx5AYTU8OIJtvD1NafR4eSMWPv8c/SRAyJB/ZA6C7SXO2mUqd0Wca/LeQ1wpOCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T20:45:03.685513Z"},"content_sha256":"fa178b03cb71a41b91781d038bd64f558a5008301b3c50f3ac113d5c57397d4d","schema_version":"1.0","event_id":"sha256:fa178b03cb71a41b91781d038bd64f558a5008301b3c50f3ac113d5c57397d4d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R54R5QGSWRWA5A3BCKX3NLD23D/bundle.json","state_url":"https://pith.science/pith/R54R5QGSWRWA5A3BCKX3NLD23D/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R54R5QGSWRWA5A3BCKX3NLD23D/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T20:45:03Z","links":{"resolver":"https://pith.science/pith/R54R5QGSWRWA5A3BCKX3NLD23D","bundle":"https://pith.science/pith/R54R5QGSWRWA5A3BCKX3NLD23D/bundle.json","state":"https://pith.science/pith/R54R5QGSWRWA5A3BCKX3NLD23D/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R54R5QGSWRWA5A3BCKX3NLD23D/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:R54R5QGSWRWA5A3BCKX3NLD23D","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f1584f0b028b58e5c4b19812be425e8b4d7239dd68ec562b764d1ffba6d28c0e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-28T05:34:53Z","title_canon_sha256":"d5c3e8aff4a94c2632ad5921c6d9382f5ae613fd462dc73e31f23f43cf8e4696"},"schema_version":"1.0","source":{"id":"2504.21036","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.21036","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"arxiv_version","alias_value":"2504.21036v2","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.21036","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"pith_short_12","alias_value":"R54R5QGSWRWA","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"pith_short_16","alias_value":"R54R5QGSWRWA5A3B","created_at":"2026-07-05T10:56:39Z"},{"alias_kind":"pith_short_8","alias_value":"R54R5QGS","created_at":"2026-07-05T10:56:39Z"}],"graph_snapshots":[{"event_id":"sha256:fa178b03cb71a41b91781d038bd64f558a5008301b3c50f3ac113d5c57397d4d","target":"graph","created_at":"2026-07-05T10:56:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.21036/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Fine-tuning large language models (LLMs) has become an essential strategy for adapting them to specialized tasks; however, this process introduces significant privacy challenges, as sensitive training data may be inadvertently memorized and exposed. Although differential privacy (DP) offers strong theoretical guarantees against such leakage, its empirical privacy effectiveness on LLMs remains unclear, especially under different fine-tuning methods. In this paper, we systematically investigate the impact of DP across fine-tuning methods and privacy budgets, using both data extraction and member","authors_text":"Hao Du, Shang Liu, Yang Cao","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-28T05:34:53Z","title":"Can Differentially Private Fine-tuning LLMs Protect Against Privacy Attacks?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.21036","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d376825d35b4fc5b5b79d9f51427637dae503a70772c87814d820b2b38e6d02b","target":"record","created_at":"2026-07-05T10:56:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f1584f0b028b58e5c4b19812be425e8b4d7239dd68ec562b764d1ffba6d28c0e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-28T05:34:53Z","title_canon_sha256":"d5c3e8aff4a94c2632ad5921c6d9382f5ae613fd462dc73e31f23f43cf8e4696"},"schema_version":"1.0","source":{"id":"2504.21036","kind":"arxiv","version":2}},"canonical_sha256":"8f791ec0d2b46c0e836112afb6ac7ad8d14b81d52041fd4662e3b0917fc8a9a9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8f791ec0d2b46c0e836112afb6ac7ad8d14b81d52041fd4662e3b0917fc8a9a9","first_computed_at":"2026-07-05T10:56:39.924514Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:56:39.924514Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2BscB5YuUzJrJNj7pon0sgDQhgFDsywfpudNcDXsXOneKizcRmJTVr4I658v9VMcEORCaOzPTbUdJkSbr6u+Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:56:39.924964Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.21036","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d376825d35b4fc5b5b79d9f51427637dae503a70772c87814d820b2b38e6d02b","sha256:fa178b03cb71a41b91781d038bd64f558a5008301b3c50f3ac113d5c57397d4d"],"state_sha256":"ebd22e60e4977e56f4dc28bc6cf1badf822bb4b09faa6609af9a020c34aafad5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/so5ZqEooEtDGiU0Vmcy6kVLuMZ7uty/uRyjU2Hsdmm/VNNe/wf09yUhyQNU4bp8F/heE6JiX54qCUPQzU03BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T20:45:03.763952Z","bundle_sha256":"27fff1e8b70ceeb08f01785677de6d845982a856478389d5497df9ba9c6cfbf7"}}