{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Z7757TQJUU53MTJ3ME7DBEXAVO","short_pith_number":"pith:Z7757TQJ","canonical_record":{"source":{"id":"2407.02943","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-03T09:20:04Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"df040905c3357783766e10c3a3c9139d1ae2570ab7469e03a82c42c4c4e22020","abstract_canon_sha256":"5283b816c5923a487a10dfb1dcca35e80b5552076fe33efadda9aa72d1c6386b"},"schema_version":"1.0"},"canonical_sha256":"cfffdfce09a53bb64d3b613e3092e0ab99ec753485ea0c1e7e64c4f35443eed3","source":{"kind":"arxiv","id":"2407.02943","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.02943","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"arxiv_version","alias_value":"2407.02943v2","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.02943","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"pith_short_12","alias_value":"Z7757TQJUU53","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"pith_short_16","alias_value":"Z7757TQJUU53MTJ3","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"pith_short_8","alias_value":"Z7757TQJ","created_at":"2026-07-05T11:57:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Z7757TQJUU53MTJ3ME7DBEXAVO","target":"record","payload":{"canonical_record":{"source":{"id":"2407.02943","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-03T09:20:04Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"df040905c3357783766e10c3a3c9139d1ae2570ab7469e03a82c42c4c4e22020","abstract_canon_sha256":"5283b816c5923a487a10dfb1dcca35e80b5552076fe33efadda9aa72d1c6386b"},"schema_version":"1.0"},"canonical_sha256":"cfffdfce09a53bb64d3b613e3092e0ab99ec753485ea0c1e7e64c4f35443eed3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:57:52.975284Z","signature_b64":"TU+sGiG67GUcbb+9MnmT9ItxCV5xl0Hlqrt/dLtocZuz7w23/6WZSkdg3AqjO/GbJGVd79Ze7sJ8czOaZd4rBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cfffdfce09a53bb64d3b613e3092e0ab99ec753485ea0c1e7e64c4f35443eed3","last_reissued_at":"2026-07-05T11:57:52.974787Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:57:52.974787Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.02943","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:57:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JQ2TzMu5Egb5uc9GwvqS5AP/n7ySbgYJQL1UwphnJ4VCfdG37lgm9E5d3hQJz6aYUb3aQXxkawAWu9EFReZqDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T06:55:01.209306Z"},"content_sha256":"504ca50a50df859c298ee19e8ba7248c5b688cdf2968e453b6a93290acdb137c","schema_version":"1.0","event_id":"sha256:504ca50a50df859c298ee19e8ba7248c5b688cdf2968e453b6a93290acdb137c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Z7757TQJUU53MTJ3ME7DBEXAVO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PII-Compass: Guiding LLM training data extraction prompts towards the target PII via grounding","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmed Frikha, Krishna Kanth Nakka, Ricardo Mendes, Xuebing Zhou, Xue Jiang","submitted_at":"2024-07-03T09:20:04Z","abstract_excerpt":"The latest and most impactful advances in large models stem from their increased size. Unfortunately, this translates into an improved memorization capacity, raising data privacy concerns. Specifically, it has been shown that models can output personal identifiable information (PII) contained in their training data. However, reported PIII extraction performance varies widely, and there is no consensus on the optimal methodology to evaluate this risk, resulting in underestimating realistic adversaries. In this work, we empirically demonstrate that it is possible to improve the extractability of"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.02943","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.02943/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:57:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RVaP0jGXLx9KCe7iilZlAfJwU0h8+IXAmgJ3I5dzvcBT8Na9NOVj7rScEepk319sNQ1x5FqhHK8L47QvE0nVCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T06:55:01.209699Z"},"content_sha256":"949c7006f91c41ff611670b4ce33470163890c4fe22c906a536c9ba57f749db2","schema_version":"1.0","event_id":"sha256:949c7006f91c41ff611670b4ce33470163890c4fe22c906a536c9ba57f749db2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z7757TQJUU53MTJ3ME7DBEXAVO/bundle.json","state_url":"https://pith.science/pith/Z7757TQJUU53MTJ3ME7DBEXAVO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z7757TQJUU53MTJ3ME7DBEXAVO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T06:55:01Z","links":{"resolver":"https://pith.science/pith/Z7757TQJUU53MTJ3ME7DBEXAVO","bundle":"https://pith.science/pith/Z7757TQJUU53MTJ3ME7DBEXAVO/bundle.json","state":"https://pith.science/pith/Z7757TQJUU53MTJ3ME7DBEXAVO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z7757TQJUU53MTJ3ME7DBEXAVO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Z7757TQJUU53MTJ3ME7DBEXAVO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5283b816c5923a487a10dfb1dcca35e80b5552076fe33efadda9aa72d1c6386b","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-03T09:20:04Z","title_canon_sha256":"df040905c3357783766e10c3a3c9139d1ae2570ab7469e03a82c42c4c4e22020"},"schema_version":"1.0","source":{"id":"2407.02943","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.02943","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"arxiv_version","alias_value":"2407.02943v2","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.02943","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"pith_short_12","alias_value":"Z7757TQJUU53","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"pith_short_16","alias_value":"Z7757TQJUU53MTJ3","created_at":"2026-07-05T11:57:52Z"},{"alias_kind":"pith_short_8","alias_value":"Z7757TQJ","created_at":"2026-07-05T11:57:52Z"}],"graph_snapshots":[{"event_id":"sha256:949c7006f91c41ff611670b4ce33470163890c4fe22c906a536c9ba57f749db2","target":"graph","created_at":"2026-07-05T11:57:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.02943/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The latest and most impactful advances in large models stem from their increased size. Unfortunately, this translates into an improved memorization capacity, raising data privacy concerns. Specifically, it has been shown that models can output personal identifiable information (PII) contained in their training data. However, reported PIII extraction performance varies widely, and there is no consensus on the optimal methodology to evaluate this risk, resulting in underestimating realistic adversaries. In this work, we empirically demonstrate that it is possible to improve the extractability of","authors_text":"Ahmed Frikha, Krishna Kanth Nakka, Ricardo Mendes, Xuebing Zhou, Xue Jiang","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-03T09:20:04Z","title":"PII-Compass: Guiding LLM training data extraction prompts towards the target PII via grounding"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.02943","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:504ca50a50df859c298ee19e8ba7248c5b688cdf2968e453b6a93290acdb137c","target":"record","created_at":"2026-07-05T11:57:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5283b816c5923a487a10dfb1dcca35e80b5552076fe33efadda9aa72d1c6386b","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-03T09:20:04Z","title_canon_sha256":"df040905c3357783766e10c3a3c9139d1ae2570ab7469e03a82c42c4c4e22020"},"schema_version":"1.0","source":{"id":"2407.02943","kind":"arxiv","version":2}},"canonical_sha256":"cfffdfce09a53bb64d3b613e3092e0ab99ec753485ea0c1e7e64c4f35443eed3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cfffdfce09a53bb64d3b613e3092e0ab99ec753485ea0c1e7e64c4f35443eed3","first_computed_at":"2026-07-05T11:57:52.974787Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:57:52.974787Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TU+sGiG67GUcbb+9MnmT9ItxCV5xl0Hlqrt/dLtocZuz7w23/6WZSkdg3AqjO/GbJGVd79Ze7sJ8czOaZd4rBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:57:52.975284Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.02943","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:504ca50a50df859c298ee19e8ba7248c5b688cdf2968e453b6a93290acdb137c","sha256:949c7006f91c41ff611670b4ce33470163890c4fe22c906a536c9ba57f749db2"],"state_sha256":"1b8148c365a27e8555e7bd10ae3982a3b61bbd619da0f5a8e9b4543a8db2695d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zQD3E/tfLCewee307XBa3j601vXtmCMsPAnkqHi0q0BLmn0gOev3494V5LQdr9LNPtedo2RBhQ5NeNSnWBfHAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T06:55:01.211635Z","bundle_sha256":"fd26c62030af959a9cb02600b9a626024fe34a084bb65eb3359a53924d4181f7"}}