arXiv:2606.22153cs.CRcs.AI2026-06

用圆周率构建不可篡改的检索索引,让大模型访问数据时完全不知内容。

$π$-RAG: Oblivious Retrieval via Semantic Quantization and Transcendental Addressing for Large Language Models

  • 用π的数字作为不可变地址,隔离大模型与敏感数据
  • 通过语义聚类和加密偏移生成确定性检索键
  • 适合金融、医疗等高合规场景,兼具隐私与可审计性

本文提出π-RAG,一种新型无感知检索架构,将大语言模型与敏感数据存储解耦,同时保持语义理解能力。传统RAG易暴露原始向量嵌入,面临逆向攻击和检索不确定性问题。为此,我们利用π的数字作为超越性熵源,构建不可篡改的间接寻址层。该架构引入语义量化层,将用户输入映射至预计算的规范意图中心点流形。检索通过余弦相似度匹配中心点,并以密码学盐值将其映射为确定性偏移量,生成π-键指向实际数据存储的标准负载。通过以π层替代大模型对数据存储的直接访问,π-RAG在数学上保证推理过程对数据完全无知。该架构融合确定性随机性、可审计性与差分隐私,在金融、医疗等高合规领域表现出高效性。

原文摘要 · Abstract (English)

This paper introduces $π$-RAG, a novel architecture for oblivious retrieval that decouples Large Language Models (LLMs) from sensitive data storage without sacrificing semantic understanding. Traditional Retrieval-Augmented Generation (RAG) architectures expose raw vector embeddings to potential inversion attacks and nondeterministic retrieval failures. To address this, we utilize the digits of $π$ as a source of transcendental entropy, creating an immutable indirection layer between the LLM and private records. The value $π$ provides immutability, is uneditable and math governs it. The architecture also introduces a Semantic Quantization Layer. This layer projects user inputs onto a pre-computed manifold of Canonical Intent Centroids. RAG performs vector cosine similarity but here it maps the centroids to deterministic offsets via cryptographic salt. The resulting $π$-key is a pointer to standardized payload from the actual datastore. By replacing direct access to the datastore via LLM with this transcendental layer, $π$-RAG mathematically guarantees that the inference remains oblivious to the data. This architecture unifies deterministic randomness, auditability, and differential privacy, demonstrating high efficacy for high-compliance sectors such as finance and healthcare.

隐私保护检索增强大模型安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。