{"id":"https://openalex.org/W7169507118","doi":"https://doi.org/10.1145/3803437.3805530","title":"Attesting LLM Pipelines: Enforcing Verifiable Training and Release Claims","display_name":"Attesting LLM Pipelines: Enforcing Verifiable Training and Release Claims","publication_year":2026,"publication_date":"2026-07-05","ids":{"openalex":"https://openalex.org/W7169507118","doi":"https://doi.org/10.1145/3803437.3805530"},"language":null,"primary_location":{"id":"doi:10.1145/3803437.3805530","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3805530","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3803437.3805530","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004564211","display_name":"Zhuoran Tan","orcid":"https://orcid.org/0000-0002-0809-0376"},"institutions":[{"id":"https://openalex.org/I7882870","display_name":"University of Glasgow","ror":"https://ror.org/00vtgdb53","country_code":"GB","type":"education","lineage":["https://openalex.org/I7882870"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zhuoran Tan","raw_affiliation_strings":["University of Glasgow, Glasgow, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-0809-0376","affiliations":[{"raw_affiliation_string":"University of Glasgow, Glasgow, United Kingdom","institution_ids":["https://openalex.org/I7882870"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064718447","display_name":"Jeremy Singer","orcid":"https://orcid.org/0000-0001-9462-6802"},"institutions":[{"id":"https://openalex.org/I7882870","display_name":"University of Glasgow","ror":"https://ror.org/00vtgdb53","country_code":"GB","type":"education","lineage":["https://openalex.org/I7882870"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jeremy Singer","raw_affiliation_strings":["University of Glasgow, Glasgow, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0001-9462-6802","affiliations":[{"raw_affiliation_string":"University of Glasgow, Glasgow, United Kingdom","institution_ids":["https://openalex.org/I7882870"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001331936","display_name":"Christos Anagnostopoulos","orcid":"https://orcid.org/0000-0003-1517-6757"},"institutions":[{"id":"https://openalex.org/I7882870","display_name":"University of Glasgow","ror":"https://ror.org/00vtgdb53","country_code":"GB","type":"education","lineage":["https://openalex.org/I7882870"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Christos Anagnostopoulos","raw_affiliation_strings":["University of Glasgow, Glasgow, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-1517-6757","affiliations":[{"raw_affiliation_string":"University of Glasgow, Glasgow, United Kingdom","institution_ids":["https://openalex.org/I7882870"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I7882870"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1553","last_page":"1556"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6348999738693237},{"id":"https://openalex.org/keywords/artifact","display_name":"Artifact (error)","score":0.5877000093460083},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.5218999981880188},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5056999921798706},{"id":"https://openalex.org/keywords/blueprint","display_name":"Blueprint","score":0.5026999711990356},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4754999876022339},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.4726000130176544},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.4505999982357025},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4366999864578247},{"id":"https://openalex.org/keywords/promotion","display_name":"Promotion (chess)","score":0.4153999984264374}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7150999903678894},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6348999738693237},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6225000023841858},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.5877000093460083},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.5218999981880188},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5056999921798706},{"id":"https://openalex.org/C155911762","wikidata":"https://www.wikidata.org/wiki/Q422321","display_name":"Blueprint","level":2,"score":0.5026999711990356},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4754999876022339},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.4726000130176544},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.4505999982357025},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4366999864578247},{"id":"https://openalex.org/C98147612","wikidata":"https://www.wikidata.org/wiki/Q215599","display_name":"Promotion (chess)","level":3,"score":0.4153999984264374},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.400299996137619},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3741999864578247},{"id":"https://openalex.org/C122783720","wikidata":"https://www.wikidata.org/wiki/Q183065","display_name":"Interpreter","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.3508000075817108},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.34950000047683716},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.31779998540878296},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.30079999566078186},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.29919999837875366},{"id":"https://openalex.org/C108087509","wikidata":"https://www.wikidata.org/wiki/Q1207171","display_name":"ATM card","level":3,"score":0.2840000092983246},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.2777000069618225},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.2689000070095062},{"id":"https://openalex.org/C10272871","wikidata":"https://www.wikidata.org/wiki/Q929972","display_name":"Software inspection","level":5,"score":0.26339998841285706},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C171268870","wikidata":"https://www.wikidata.org/wiki/Q1486676","display_name":"GRASP","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C174839445","wikidata":"https://www.wikidata.org/wiki/Q1134386","display_name":"Lock (firearm)","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.258899986743927},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25220000743865967},{"id":"https://openalex.org/C89992363","wikidata":"https://www.wikidata.org/wiki/Q5961558","display_name":"Track (disk drive)","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3803437.3805530","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3805530","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3803437.3805530","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3805530","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W4308463084","https://openalex.org/W4401878108","https://openalex.org/W4403520284","https://openalex.org/W4403536548","https://openalex.org/W4405535287","https://openalex.org/W4408749786","https://openalex.org/W4410776366","https://openalex.org/W4412451743"],"related_works":[],"abstract_inverted_index":{"Modern":[0],"Large":[1],"Language":[2],"Model(LLM)":[3],"systems":[4],"are":[5,61],"assembled":[6],"from":[7],"third-party":[8],"artifacts\u2014pre-trained":[9],"weights,":[10],"fine-tuning":[11],"adapters,":[12],"datasets,":[13],"dependency":[14],"packages,":[15],"and":[16,33,38,47,52,57,75,101,105,139,147,151],"container":[17],"images\u2014fetched":[18],"through":[19],"automated":[20],"pipelines.":[21],"This":[22],"speed":[23],"comes":[24],"with":[25],"supply-chain":[26,145],"risks:":[27],"compromised":[28],"dependencies,":[29],"malicious":[30],"hub":[31],"artifacts":[32,67],"unsafe":[34],"deserialization,":[35],"forged":[36],"provenance,":[37],"backdoored":[39],"models.":[40],"A":[41],"core":[42],"gap":[43],"is":[44,86],"that":[45],"training":[46],"release":[48],"claims":[49],"(e.g.,":[50],"data":[51],"code":[53],"lineage,":[54],"build":[55],"environment,":[56],"security":[58,114],"scanning":[59,103],"results)":[60],"rarely":[62],"cryptographically":[63],"bound":[64],"to":[65,127],"the":[66,94,116],"they":[68],"describe,":[69],"making":[70],"enforcement":[71],"inconsistent":[72],"across":[73],"teams":[74],"stages.":[76],"We":[77,133],"propose":[78],"an":[79,84,140],"attestation-aware":[80],"promotion":[81],"gate:":[82],"before":[83],"artifact":[85],"admitted":[87],"into":[88],"trusted":[89],"environments":[90],"(training,":[91],"fine-tuning,":[92],"deployment),":[93],"gate":[95,118],"verifies":[96],"claim":[97],"evidence,":[98],"enforces":[99],"safe-loading":[100],"static":[102],"policies,":[104],"applies":[106],"secure-by-default":[107],"deployment":[108],"constraints.":[109],"When":[110],"organizations":[111],"operate":[112],"runtime":[113],"tooling,":[115],"same":[117],"can":[119],"optionally":[120],"ingest":[121],"standardized":[122],"dynamic":[123],"signals":[124],"via":[125],"plug-ins":[126],"reduce":[128],"uncertainty":[129],"for":[130],"high-risk":[131],"artifacts.":[132],"outline":[134],"a":[135,154,157],"practical":[136],"claims-to-controls":[137],"mapping":[138],"evaluation":[141],"blueprint":[142],"using":[143],"representative":[144],"scenarios":[146],"operational":[148],"metrics":[149],"(coverage,":[150],"decisions),":[152],"charting":[153],"path":[155],"toward":[156],"full":[158],"research":[159],"paper.":[160]},"counts_by_year":[],"updated_date":"2026-07-18T05:58:53.570196","created_date":"2026-07-18T00:00:00"}