{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:VLW4GSPJTXXDNYQUFLLF7C6SXH","short_pith_number":"pith:VLW4GSPJ","canonical_record":{"source":{"id":"2401.09796","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-01-18T08:33:09Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7e95ebdda2947c29cb278ebfe9d07bfc6d3c065dda7342f25b3797d5e0b7eae7","abstract_canon_sha256":"b44e294f1831082ca358cf4ffe08444585c23d0ece553626311f5f4e855c0572"},"schema_version":"1.0"},"canonical_sha256":"aaedc349e99dee36e2142ad65f8bd2b9cdf4c048d38e1ee706d8763f92fc49ef","source":{"kind":"arxiv","id":"2401.09796","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.09796","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"arxiv_version","alias_value":"2401.09796v2","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.09796","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_12","alias_value":"VLW4GSPJTXXD","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_16","alias_value":"VLW4GSPJTXXDNYQU","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_8","alias_value":"VLW4GSPJ","created_at":"2026-07-05T07:35:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:VLW4GSPJTXXDNYQUFLLF7C6SXH","target":"record","payload":{"canonical_record":{"source":{"id":"2401.09796","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-01-18T08:33:09Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7e95ebdda2947c29cb278ebfe9d07bfc6d3c065dda7342f25b3797d5e0b7eae7","abstract_canon_sha256":"b44e294f1831082ca358cf4ffe08444585c23d0ece553626311f5f4e855c0572"},"schema_version":"1.0"},"canonical_sha256":"aaedc349e99dee36e2142ad65f8bd2b9cdf4c048d38e1ee706d8763f92fc49ef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:35:24.683423Z","signature_b64":"PNfnQZ0Bze9oqgh7GLH/mdX+27QAMg1wsYk0xFUzQ/PEug/5glSKO3Z7qq9USduBz77Mg47gnahve151juQLAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"aaedc349e99dee36e2142ad65f8bd2b9cdf4c048d38e1ee706d8763f92fc49ef","last_reissued_at":"2026-07-05T07:35:24.683003Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:35:24.683003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.09796","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UlZmrZiraipZPRxtKmPHP9fRXLgEy/53sFQk5UpkuISKnX1NrBpGeXrOlhraWHksv//iZhO+sBbLeLomAjwRAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:01:02.178770Z"},"content_sha256":"68639cd45f7788edc7800f6fbbca42e73382a1238ba3fe0bea0e731eb249f43e","schema_version":"1.0","event_id":"sha256:68639cd45f7788edc7800f6fbbca42e73382a1238ba3fe0bea0e731eb249f43e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:VLW4GSPJTXXDNYQUFLLF7C6SXH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Fast, Performant, Secure Distributed Training Framework For Large Language Model","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Aihui Zhou, Anda Cheng, Chaofan Yu, Lei Wang, Wei Huang, Yinggui Wang","submitted_at":"2024-01-18T08:33:09Z","abstract_excerpt":"The distributed (federated) LLM is an important method for co-training the domain-specific LLM using siloed data. However, maliciously stealing model parameters and data from the server or client side has become an urgent problem to be solved. In this paper, we propose a secure distributed LLM based on model slicing. In this case, we deploy the Trusted Execution Environment (TEE) on both the client and server side, and put the fine-tuned structure (LoRA or embedding of P-tuning v2) into the TEE. Then, secure communication is executed in the TEE and general environments through lightweight encr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.09796","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.09796/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0yBEq/bQWPKRO+HYwy6kPTsuk6egbx1mfjBUpLeU7dM7waI2vY2FxtWwGXbkezYW+uDIBtfPCI9TtZiW4B/CCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:01:02.179149Z"},"content_sha256":"c17a3588cb7c34a2a751b3feb0b5caa88c32f285e4ee13c96b0dc0d5bcf2d4bf","schema_version":"1.0","event_id":"sha256:c17a3588cb7c34a2a751b3feb0b5caa88c32f285e4ee13c96b0dc0d5bcf2d4bf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VLW4GSPJTXXDNYQUFLLF7C6SXH/bundle.json","state_url":"https://pith.science/pith/VLW4GSPJTXXDNYQUFLLF7C6SXH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VLW4GSPJTXXDNYQUFLLF7C6SXH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T23:01:02Z","links":{"resolver":"https://pith.science/pith/VLW4GSPJTXXDNYQUFLLF7C6SXH","bundle":"https://pith.science/pith/VLW4GSPJTXXDNYQUFLLF7C6SXH/bundle.json","state":"https://pith.science/pith/VLW4GSPJTXXDNYQUFLLF7C6SXH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VLW4GSPJTXXDNYQUFLLF7C6SXH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:VLW4GSPJTXXDNYQUFLLF7C6SXH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b44e294f1831082ca358cf4ffe08444585c23d0ece553626311f5f4e855c0572","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-01-18T08:33:09Z","title_canon_sha256":"7e95ebdda2947c29cb278ebfe9d07bfc6d3c065dda7342f25b3797d5e0b7eae7"},"schema_version":"1.0","source":{"id":"2401.09796","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.09796","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"arxiv_version","alias_value":"2401.09796v2","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.09796","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_12","alias_value":"VLW4GSPJTXXD","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_16","alias_value":"VLW4GSPJTXXDNYQU","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_8","alias_value":"VLW4GSPJ","created_at":"2026-07-05T07:35:24Z"}],"graph_snapshots":[{"event_id":"sha256:c17a3588cb7c34a2a751b3feb0b5caa88c32f285e4ee13c96b0dc0d5bcf2d4bf","target":"graph","created_at":"2026-07-05T07:35:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.09796/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The distributed (federated) LLM is an important method for co-training the domain-specific LLM using siloed data. However, maliciously stealing model parameters and data from the server or client side has become an urgent problem to be solved. In this paper, we propose a secure distributed LLM based on model slicing. In this case, we deploy the Trusted Execution Environment (TEE) on both the client and server side, and put the fine-tuned structure (LoRA or embedding of P-tuning v2) into the TEE. Then, secure communication is executed in the TEE and general environments through lightweight encr","authors_text":"Aihui Zhou, Anda Cheng, Chaofan Yu, Lei Wang, Wei Huang, Yinggui Wang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-01-18T08:33:09Z","title":"A Fast, Performant, Secure Distributed Training Framework For Large Language Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.09796","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:68639cd45f7788edc7800f6fbbca42e73382a1238ba3fe0bea0e731eb249f43e","target":"record","created_at":"2026-07-05T07:35:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b44e294f1831082ca358cf4ffe08444585c23d0ece553626311f5f4e855c0572","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-01-18T08:33:09Z","title_canon_sha256":"7e95ebdda2947c29cb278ebfe9d07bfc6d3c065dda7342f25b3797d5e0b7eae7"},"schema_version":"1.0","source":{"id":"2401.09796","kind":"arxiv","version":2}},"canonical_sha256":"aaedc349e99dee36e2142ad65f8bd2b9cdf4c048d38e1ee706d8763f92fc49ef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aaedc349e99dee36e2142ad65f8bd2b9cdf4c048d38e1ee706d8763f92fc49ef","first_computed_at":"2026-07-05T07:35:24.683003Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:35:24.683003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PNfnQZ0Bze9oqgh7GLH/mdX+27QAMg1wsYk0xFUzQ/PEug/5glSKO3Z7qq9USduBz77Mg47gnahve151juQLAg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:35:24.683423Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.09796","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:68639cd45f7788edc7800f6fbbca42e73382a1238ba3fe0bea0e731eb249f43e","sha256:c17a3588cb7c34a2a751b3feb0b5caa88c32f285e4ee13c96b0dc0d5bcf2d4bf"],"state_sha256":"df34709f523dd0e697a9c570d9eea9426aa074f11e6d756183acfca5ce8316a3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mflxL+wMQoX8KA22HgPI8EbxXgAr2sIBnU3PiNO/rktMQSQE4FU4XDD/UgFBt2QtsPXF1KDKobtNwd3gZjDZAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T23:01:02.182200Z","bundle_sha256":"6fc54de477a5e1041c66da8f9aee4da131d5758210bd1695c5ee52cab824fe3f"}}