{"id":"b822626dfb6130a299bf2c9f784ec69806d35d9a82a5a2d1bfb2fc76ff2b46fb","title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes — arXiv","argument":"The authors of SetPrint are Jinmo Han, Ju Yeon Kang, Jimin Hong, Sunghwan Ahn, Yonghyeon Jun and Nam Soo Kim. They introduce a training-free method for black-box LLM fingerprinting: assessing whether a target model was derived from a source model using only their responses to queries. The method perturbs queries and compares the resulting response changes. It represents each change relative to the mean change in its own set, then compares changes from the two models caused by the same perturbation. The authors say this combines relations among changes within each model’s set with correspondence between the sets, which existing approaches have not fully exploited. On LeaFBench, they report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods, and attribute the gains to both kinds of comparison. The abstract does not give performance figures or describe the benchmark’s scope, so it leaves open how the reported advantage varies across test conditions.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied evidence is the arXiv abstract; it does not provide performance figures or describe LeaFBench’s scope or test conditions.","speaker":{"name":"Han, Jinmo, Kang, Ju Yeon, Hong, Jimin, Ahn, Sunghwan, Jun, Yonghyeon, Kim, Nam Soo","roleAtSource":"Article author"},"source":{"title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.12950","publishedAt":"2026-11-07","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors introduce SetPrint, a training-free method for determining whether a target model was derived from a source model using observable responses to input queries.","excerpt":"Black-box LLM fingerprinting aims to determine whether a target model was derived from a source model when only the output responses to input queries are observable.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"},{"text":"SetPrint represents each response change relative to the mean change in its set and compares changes induced by the same perturbation across the two models.","excerpt":"SetPrint expresses each response change relative to the mean change of its own set, and then compares changes from the two models that were induced by the same perturbation.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"},{"text":"The authors report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods on LeaFBench.","excerpt":"On LeaFBench, SetPrint consistently outperforms existing training-free black-box fingerprinting methods.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"},{"text":"The authors attribute SetPrint’s gains to both within-set relations and between-set correspondence.","excerpt":"Further analyses attribute these gains to both within-set relations and between-set correspondence.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.12950","checkedAt":"2026-11-11T20:50:14.748Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How does SetPrint’s reported advantage on LeaFBench vary across test conditions?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes — arXiv","summary":"The authors of SetPrint are Jinmo Han, Ju Yeon Kang, Jimin Hong, Sunghwan Ahn, Yonghyeon Jun and Nam Soo Kim. They introduce a training-free method for black-box LLM fingerprinting: assessing whether a target model was derived from a source model using only their responses to queries. The method perturbs queries and compares the resulting response changes. It represents each change relative to the mean change in its own set, then compares changes from the two models caused by the same perturbation. The authors say this combines relations among changes within each model’s set with correspondence between the sets, which existing approaches have not fully exploited. On LeaFBench, they report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods, and attribute the gains to both kinds of comparison. The abstract does not give performance figures or describe the benchmark’s scope, so it leaves open how the reported advantage varies across test conditions.","question":"How does SetPrint’s reported advantage on LeaFBench vary across test conditions?","claims":[{"text":"The authors introduce SetPrint, a training-free method for determining whether a target model was derived from a source model using observable responses to input queries.","excerpt":"Black-box LLM fingerprinting aims to determine whether a target model was derived from a source model when only the output responses to input queries are observable.","support":"source-stated"},{"text":"SetPrint represents each response change relative to the mean change in its set and compares changes induced by the same perturbation across the two models.","excerpt":"SetPrint expresses each response change relative to the mean change of its own set, and then compares changes from the two models that were induced by the same perturbation.","support":"source-stated"},{"text":"The authors report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods on LeaFBench.","excerpt":"On LeaFBench, SetPrint consistently outperforms existing training-free black-box fingerprinting methods.","support":"source-stated"},{"text":"The authors attribute SetPrint’s gains to both within-set relations and between-set correspondence.","excerpt":"Further analyses attribute these gains to both within-set relations and between-set correspondence.","support":"source-stated"}],"limitations":["The supplied evidence is the arXiv abstract; it does not provide performance figures or describe LeaFBench’s scope or test conditions."],"mediaId":"79262989e256613bd0dbec2ad09ffe1463a7085ffbd760e6d8d4d8f29f27848a","correctionReason":null,"id":"b822626dfb6130a299bf2c9f784ec69806d35d9a82a5a2d1bfb2fc76ff2b46fb","publicationId":"b9c83b8e-fffb-47fe-8e7c-b71b251ea30d","version":1,"sourceUrl":"https://arxiv.org/abs/2611.12950","sourceTitle":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-07","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-11T05:06:49.863Z","createdAt":"2026-11-11T19:47:40.046Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"79262989e256613bd0dbec2ad09ffe1463a7085ffbd760e6d8d4d8f29f27848a","kind":"article","url":"https://arxiv.org/abs/2611.12950","sourceUrl":"https://arxiv.org/abs/2611.12950","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-11T19:36:47.531Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.12950","checkedAt":"2026-11-11T20:50:14.748Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"79262989e256613bd0dbec2ad09ffe1463a7085ffbd760e6d8d4d8f29f27848a","confidence":0.8,"provider":"typesafe","model":"jev-1.13.0","inputHash":"78d1472020c52127d23ae2381c7d3d347b67ac3f3a7ac3722dc613e4245050cd","decidedAt":"2026-11-11T19:36:51.680Z"},"provenance":{"textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observationId":"b32e7ca19eba7d61972ecda547df69a7b592f55ba125765d2bd089a121ac34ba","retrievedAt":"2026-11-11T19:36:46.728Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"229ec8ab-ca0f-42d8-8ac3-acd6d8a5f603"},"reviewer":{"model":"gpt-6-luna","runId":"2979c705-132b-427e-8ef5-8c1a329c9487"}},"audit":{"status":"passed","reviewedAt":"2026-11-11T19:47:40.046Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Han, Jinmo","url":null,"kind":"unknown"},{"name":"Kang, Ju Yeon","url":null,"kind":"unknown"},{"name":"Hong, Jimin","url":null,"kind":"unknown"},{"name":"Ahn, Sunghwan","url":null,"kind":"unknown"},{"name":"Jun, Yonghyeon","url":null,"kind":"unknown"},{"name":"Kim, Nam Soo","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Han, Jinmo","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Han, Jinmo","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Kang, Ju Yeon","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kang, Ju Yeon","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Hong, Jimin","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Hong, Jimin","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Ahn, Sunghwan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Ahn, Sunghwan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Jun, Yonghyeon","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Jun, Yonghyeon","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:4","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Kim, Nam Soo","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kim, Nam Soo","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:5","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}}],"participationCoverage":{"total":6,"returned":6,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.12950","snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z","basis":"publisher-page-metadata","sourceLinks":44,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/b822626dfb6130a299bf2c9f784ec69806d35d9a82a5a2d1bfb2fc76ff2b46fb/source"}},"canonicalUrl":"https://escapemeridian.com/readings/setprint-black-box-llm-fingerprinting-via-setwise-b822626d","formats":{"html":"/readings/setprint-black-box-llm-fingerprinting-via-setwise-b822626d","markdown":"/readings/setprint-black-box-llm-fingerprinting-via-setwise-b822626d.md","json":"/readings/setprint-black-box-llm-fingerprinting-via-setwise-b822626d.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-llm","name":"Large language model","explanation":"A language model with many learned numerical settings, used to process and generate language.","referenceUrl":"https://developers.google.com/machine-learning/glossary#large-language-model"},{"id":"term-benchmark","name":"Benchmark","explanation":"A defined set of tests used to compare systems. Results depend on the tasks and measures selected.","referenceUrl":"https://arxiv.org/abs/2211.09110"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"b822626dfb6130a299bf2c9f784ec69806d35d9a82a5a2d1bfb2fc76ff2b46fb","revision":"b9c83b8e-fffb-47fe-8e7c-b71b251ea30d","revisionKind":"publication-id","title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes — arXiv","url":"https://escapemeridian.com/readings/setprint-black-box-llm-fingerprinting-via-setwise-b822626d"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.12950","revision":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","revisionKind":"sha256-source-text","title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes","url":"https://arxiv.org/abs/2611.12950"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"b822626dfb6130a299bf2c9f784ec69806d35d9a82a5a2d1bfb2fc76ff2b46fb","title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes — arXiv","argument":"The authors of SetPrint are Jinmo Han, Ju Yeon Kang, Jimin Hong, Sunghwan Ahn, Yonghyeon Jun and Nam Soo Kim. They introduce a training-free method for black-box LLM fingerprinting: assessing whether a target model was derived from a source model using only their responses to queries. The method perturbs queries and compares the resulting response changes. It represents each change relative to the mean change in its own set, then compares changes from the two models caused by the same perturbation. The authors say this combines relations among changes within each model’s set with correspondence between the sets, which existing approaches have not fully exploited. On LeaFBench, they report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods, and attribute the gains to both kinds of comparison. The abstract does not give performance figures or describe the benchmark’s scope, so it leaves open how the reported advantage varies across test conditions.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied evidence is the arXiv abstract; it does not provide performance figures or describe LeaFBench’s scope or test conditions.","speaker":{"name":"Han, Jinmo, Kang, Ju Yeon, Hong, Jimin, Ahn, Sunghwan, Jun, Yonghyeon, Kim, Nam Soo","roleAtSource":"Article author"},"source":{"title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.12950","publishedAt":"2026-11-07","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors introduce SetPrint, a training-free method for determining whether a target model was derived from a source model using observable responses to input queries.","excerpt":"Black-box LLM fingerprinting aims to determine whether a target model was derived from a source model when only the output responses to input queries are observable.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"},{"text":"SetPrint represents each response change relative to the mean change in its set and compares changes induced by the same perturbation across the two models.","excerpt":"SetPrint expresses each response change relative to the mean change of its own set, and then compares changes from the two models that were induced by the same perturbation.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"},{"text":"The authors report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods on LeaFBench.","excerpt":"On LeaFBench, SetPrint consistently outperforms existing training-free black-box fingerprinting methods.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"},{"text":"The authors attribute SetPrint’s gains to both within-set relations and between-set correspondence.","excerpt":"Further analyses attribute these gains to both within-set relations and between-set correspondence.","url":"https://arxiv.org/abs/2611.12950","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.12950","checkedAt":"2026-11-11T20:50:14.748Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How does SetPrint’s reported advantage on LeaFBench vary across test conditions?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes — arXiv","summary":"The authors of SetPrint are Jinmo Han, Ju Yeon Kang, Jimin Hong, Sunghwan Ahn, Yonghyeon Jun and Nam Soo Kim. They introduce a training-free method for black-box LLM fingerprinting: assessing whether a target model was derived from a source model using only their responses to queries. The method perturbs queries and compares the resulting response changes. It represents each change relative to the mean change in its own set, then compares changes from the two models caused by the same perturbation. The authors say this combines relations among changes within each model’s set with correspondence between the sets, which existing approaches have not fully exploited. On LeaFBench, they report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods, and attribute the gains to both kinds of comparison. The abstract does not give performance figures or describe the benchmark’s scope, so it leaves open how the reported advantage varies across test conditions.","question":"How does SetPrint’s reported advantage on LeaFBench vary across test conditions?","claims":[{"text":"The authors introduce SetPrint, a training-free method for determining whether a target model was derived from a source model using observable responses to input queries.","excerpt":"Black-box LLM fingerprinting aims to determine whether a target model was derived from a source model when only the output responses to input queries are observable.","support":"source-stated"},{"text":"SetPrint represents each response change relative to the mean change in its set and compares changes induced by the same perturbation across the two models.","excerpt":"SetPrint expresses each response change relative to the mean change of its own set, and then compares changes from the two models that were induced by the same perturbation.","support":"source-stated"},{"text":"The authors report that SetPrint consistently outperforms existing training-free black-box fingerprinting methods on LeaFBench.","excerpt":"On LeaFBench, SetPrint consistently outperforms existing training-free black-box fingerprinting methods.","support":"source-stated"},{"text":"The authors attribute SetPrint’s gains to both within-set relations and between-set correspondence.","excerpt":"Further analyses attribute these gains to both within-set relations and between-set correspondence.","support":"source-stated"}],"limitations":["The supplied evidence is the arXiv abstract; it does not provide performance figures or describe LeaFBench’s scope or test conditions."],"mediaId":"79262989e256613bd0dbec2ad09ffe1463a7085ffbd760e6d8d4d8f29f27848a","correctionReason":null,"id":"b822626dfb6130a299bf2c9f784ec69806d35d9a82a5a2d1bfb2fc76ff2b46fb","publicationId":"b9c83b8e-fffb-47fe-8e7c-b71b251ea30d","version":1,"sourceUrl":"https://arxiv.org/abs/2611.12950","sourceTitle":"SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-07","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-11T05:06:49.863Z","createdAt":"2026-11-11T19:47:40.046Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"79262989e256613bd0dbec2ad09ffe1463a7085ffbd760e6d8d4d8f29f27848a","kind":"article","url":"https://arxiv.org/abs/2611.12950","sourceUrl":"https://arxiv.org/abs/2611.12950","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-11T19:36:47.531Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.12950","checkedAt":"2026-11-11T20:50:14.748Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"79262989e256613bd0dbec2ad09ffe1463a7085ffbd760e6d8d4d8f29f27848a","confidence":0.8,"provider":"typesafe","model":"jev-1.13.0","inputHash":"78d1472020c52127d23ae2381c7d3d347b67ac3f3a7ac3722dc613e4245050cd","decidedAt":"2026-11-11T19:36:51.680Z"},"provenance":{"textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observationId":"b32e7ca19eba7d61972ecda547df69a7b592f55ba125765d2bd089a121ac34ba","retrievedAt":"2026-11-11T19:36:46.728Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"229ec8ab-ca0f-42d8-8ac3-acd6d8a5f603"},"reviewer":{"model":"gpt-6-luna","runId":"2979c705-132b-427e-8ef5-8c1a329c9487"}},"audit":{"status":"passed","reviewedAt":"2026-11-11T19:47:40.046Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Han, Jinmo","url":null,"kind":"unknown"},{"name":"Kang, Ju Yeon","url":null,"kind":"unknown"},{"name":"Hong, Jimin","url":null,"kind":"unknown"},{"name":"Ahn, Sunghwan","url":null,"kind":"unknown"},{"name":"Jun, Yonghyeon","url":null,"kind":"unknown"},{"name":"Kim, Nam Soo","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Han, Jinmo","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Han, Jinmo","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Kang, Ju Yeon","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kang, Ju Yeon","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Hong, Jimin","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Hong, Jimin","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Ahn, Sunghwan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Ahn, Sunghwan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Jun, Yonghyeon","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Jun, Yonghyeon","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:4","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}},{"actor":{"name":"Kim, Nam Soo","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kim, Nam Soo","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.12950","locator":"head/meta[name=author|citation_author]"},"assertionId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7:participation:5","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-11T20:50:14.748Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","sourceUrl":"https://arxiv.org/abs/2611.12950","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z"}}],"participationCoverage":{"total":6,"returned":6,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.12950","snapshotId":"4c43f384800c330c0c1e4c9a4bc60aeb7a4702fa671a93a4f708c7e0101a30c7","contentSha256":"af6862e30e78d911efe48c1e0bb43e28853a4ddfe21eae308b741d83261b8d9d","textHash":"920a849f4d5a3c6075b0a1d3e95c87d5fd9c845367c186d1dd77e802952dae77","observedAt":"2026-11-11T20:50:14.748Z","basis":"publisher-page-metadata","sourceLinks":44,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/b822626dfb6130a299bf2c9f784ec69806d35d9a82a5a2d1bfb2fc76ff2b46fb/source"}}}],"audits":[{"publicationId":"b9c83b8e-fffb-47fe-8e7c-b71b251ea30d","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading names the six listed authors correctly, attributes the method to them, and frames the benchmark results as their report ('they report', 'attribute'), not as established fact.","excerpt":"Authors:Jinmo Han, Ju Yeon Kang, Jimin Hong, Sunghwan Ahn, Yonghyeon Jun, Nam Soo Kim"},{"dimension":"summary","status":"pass","explanation":"The reading leads with the development and explains black-box LLM fingerprinting in plain language: telling whether one model was derived from another using only its responses. It then describes the mechanism and the reported result. LeaFBench and training-free are not explained in depth, but the reading identifies LeaFBench as a benchmark, and neither term blocks understanding. The abstract gives no wider stakes, and the reading does not invent any. The question follows from a real gap in the evidence. Optional term-library tooltip suggestions: training-free, perturbation.","excerpt":"Black-box LLM fingerprinting aims to determine whether a target model was derived from a source model when only the output responses to input queries are observable."},{"dimension":"date","status":"pass","explanation":"The originalPublished date of 2026-11-07 matches the v1 submission date on arXiv. It is not the later feed date of 2026-11-11.","excerpt":"[Submitted on 7 Nov 2026]"},{"dimension":"support","status":"pass","explanation":"Each claim is a close paraphrase of the abstract. The stated limitation is accurate: the abstract gives no performance figures or benchmark scope. The reading implies no benefits or costs, and its question does not assume an unsupported outcome.","excerpt":"SetPrint expresses each response change relative to the mean change of its own set, and then compares changes from the two models that were induced by the same perturbation."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct link to the original arXiv abstract page, which matches the source.","excerpt":null}],"createdAt":"2026-11-11T19:47:40.046Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}