{"as_of":"2026-08-07T11:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:949a476e4c034688152ae897ca04aa1a6c55cf9090b9a827c855a9429fe35258","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T20:29:12.832727Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T09:48:10.362600Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T10:48:03.222941Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"cited_work":{"arxiv_id":"2509.08704","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.08704","snapshot_observed_at":"2026-07-03T10:48:03.222941Z","title":"arXiv preprint arXiv:2509.08704 (2025)","venue":null,"work_id":"00548fcc-17ae-4d13-ade4-ea9e759b6480","year":2025},"citing_paper":{"arxiv_id":"2605.15648","last_updated":"2026-05-15T06:04:00Z","snapshot_observed_at":"2026-07-06T23:26:56.013191Z","submitted_at":"2026-05-15T06:04:00Z","title":"Rethinking the Security of DP-SGD: A Corrected Analysis of Differentially Private Machine Learning","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-20T18:17:06.017591Z"},"links":{"cited_paper":"/paper/2509.08704","citing_paper":"/paper/2605.15648"},"observation_digest":"sha256:c071b06175f753b638bac6069ebeb4e3b525c5b2e96b3004db18f031be87eaa9","observation_id":"6929d25b-5f03-4380-80d4-7d9f27f6e9d8","resolution":{"observed_at":"2026-05-20T18:18:52.485626Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"cited_work":{"arxiv_id":"2509.08704","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.08704","snapshot_observed_at":"2026-07-03T10:48:03.222941Z","title":"arXiv preprint arXiv:2509.08704 (2025)","venue":null,"work_id":"00548fcc-17ae-4d13-ade4-ea9e759b6480","year":2025},"citing_paper":{"arxiv_id":"2606.12733","last_updated":"2026-06-10T22:44:47Z","snapshot_observed_at":"2026-08-06T04:27:40.648833Z","submitted_at":"2026-06-10T22:44:47Z","title":"Let's Ask Gauss: Improved One-Run Privacy Auditing","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-27T09:48:10.362600Z"},"links":{"cited_paper":"/paper/2509.08704","citing_paper":"/paper/2606.12733"},"observation_digest":"sha256:83d0f2a3c298cc1f20c9b6ed682f38f0da76b90f7f0bb4660380bc6ee1f0f6e2","observation_id":"c86c0910-579d-4394-a053-3610048a2485","resolution":{"observed_at":"2026-07-03T10:48:03.224319Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2509.08704/citation-record","integrity":"/paper/2509.08704/integrity","json":"/paper/2509.08704/citation-record.json","paper":"/paper/2509.08704"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.741926Z","title":"Deep learning with differential privacy","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.741926Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:61b8b0cd598ac5e219456085d912332e4da3a8856a08b6835eeac1cf5b1f1aaf","observation_id":"8f618332-d87e-4b7a-8ec0-c22b8322b868","resolution":{"observed_at":"2026-08-04T20:29:12.741926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.745815Z","title":"Deciding differential privacy for programs with finite inputs and outputs","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.745815Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:0ebefff9f42368fa1c1db24c59f9328b0fc72969b643df93708205ed691f976b","observation_id":"e1df5e2e-1743-4bd3-b26d-9138f2330f55","resolution":{"observed_at":"2026-08-04T20:29:12.745815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.748834Z","title":"Dp-finder: Finding differential privacy violations by sampling and optimization","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.748834Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:aef8a423a04ef15de981410f33a038239bb7a34e5feb3f633d8e29c0dd3ab981","observation_id":"db16e484-7958-42e1-a16c-957a67b96f8e","resolution":{"observed_at":"2026-08-04T20:29:12.748834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.751801Z","title":"Dp-sniper: Black-box discovery of differential privacy vi- olations using classifiers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.751801Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:b76375c1a62789280cce0dd3f0f28245d1e8149c71c9ca029af4d8d8e9018616","observation_id":"e01e611c-4705-4da7-9464-2e61046c3d3b","resolution":{"observed_at":"2026-08-04T20:29:12.751801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14457","last_updated":"2025-05-29T07:53:33Z","snapshot_observed_at":"2026-07-06T18:18:34.617427Z","submitted_at":"2024-05-23T11:38:38Z","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14457","snapshot_observed_at":"2026-08-04T20:29:12.754763Z","title":"Tighter privacy auditing of dp-sgd in the hidden state threat model.arXiv preprint arXiv:2405.14457, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.754763Z"},"links":{"cited_paper":"/paper/2405.14457","citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:6785267368b877fd792024fe80e4b97c32273c0c8c2c7048f7575affd82d20e3","observation_id":"c8bc1a1f-2307-4ce1-9c4e-6f9f866ecf00","resolution":{"observed_at":"2026-08-04T20:29:12.754763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1508.07306","last_updated":"2015-08-28T18:42:56Z","snapshot_observed_at":"2026-07-06T04:28:05.117997Z","submitted_at":"2015-08-28T18:42:56Z","title":"On the Privacy Properties of Variants on the Sparse Vector Technique","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1508.07306","snapshot_observed_at":"2026-08-04T20:29:12.757757Z","title":"On the privacy prop- erties of variants on the sparse vector technique.arXiv preprint arXiv:1508.07306, 2015","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.757757Z"},"links":{"cited_paper":"/paper/1508.07306","citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:f1b385dfcdc3768e958f234b2a376b40ea187df9893d552ce551fbaaa459b80b","observation_id":"c82f6b5c-0a5e-4f52-acef-7a1cfdec0788","resolution":{"observed_at":"2026-08-04T20:29:12.757757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.761197Z","title":"The use of confidence or fiducial limits illustrated in the case of the binomial.Biometrika, 26(4):404–413, 1934","venue":null,"work_id":null,"year":1934},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.761197Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:bc009901b1fc74ce3b0dc07e51fcdf89c092756f2fd40930765729fd660db90f","observation_id":"129cd253-7eb4-46d8-bba7-5b643391db67","resolution":{"observed_at":"2026-08-04T20:29:12.761197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.763906Z","title":"Gaussian differential privacy.Journal of the Royal Statistical Society, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.763906Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:a4034851cdd72fb047e61b6b657ddddae7035c3b6cf11dbff618f8805a1c6a2f","observation_id":"4e7ca237-26ba-49dd-a64d-6f6efe507767","resolution":{"observed_at":"2026-08-04T20:29:12.763906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.766445Z","title":"Calibrating noise to sensitivity in private data analysis","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.766445Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:13de0c72e5b0567d1b25ef93044c190ffd2d4bada4f1cfd1040fbfe77686bafe","observation_id":"703f0b22-d3bd-4c67-8248-3ba1580870b3","resolution":{"observed_at":"2026-08-04T20:29:12.766445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.769139Z","title":"On the complexity of differentially private data release: efficient algorithms and hardness results","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.769139Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:6de752ebe63827860d2877fdf6cc65407ed88c4e4f9be1c9bdde2ed97be55996","observation_id":"a2c64922-db95-4f9d-ae4e-06d59a537277","resolution":{"observed_at":"2026-08-04T20:29:12.769139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.771813Z","title":"The algorithmic foundations of differential privacy.Foundations and Trends® in Theoretical Computer Science, 9(3–4):211–407, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.771813Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:b484396fabf2d004402d37decddf27007854250d7abc20c1d3acda5ff9769ea9","observation_id":"8ba018ea-7063-4ba2-bb5b-1c2788a85d57","resolution":{"observed_at":"2026-08-04T20:29:12.771813Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.774701Z","title":"PhD thesis, State University of New York at Buffalo, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.774701Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:ac931f62791b6303daf6acc7e07ae56e1c60627c3af9751027c3c44d085aa891","observation_id":"5580d1a4-c54f-4c17-9815-10a60341f779","resolution":{"observed_at":"2026-08-04T20:29:12.774701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.777135Z","title":"Auditing dif- ferentially private machine learning: How private is private sgd?Ad- vances in Neural Information Processing Systems, 33:22205–22216, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.777135Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:cfd0a0d1df1b563351798b44cc6644cc3ab2bc8f71e2b947fbe1c27226bfaec8","observation_id":"26db283d-1867-482c-921c-0ed325392420","resolution":{"observed_at":"2026-08-04T20:29:12.777135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.779631Z","title":"https://github.com/google/ jax/pull/3646","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.779631Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:7094a2a2852e89d21d2d1f21a7423670f4380d01c9fca0b11633997a776b643e","observation_id":"cd07bc5c-c981-4517-8082-c1c8e6253bac","resolution":{"observed_at":"2026-08-04T20:29:12.779631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.782210Z","title":"A gen- eral framework for auditing differentially private machine learning","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.782210Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:bddcbfdc216b7c656e339181bf4c364ed440a4001bb0ea04a95f943f56cabe38","observation_id":"1c480182-2467-4203-a4b0-686ef8fdb9fe","resolution":{"observed_at":"2026-08-04T20:29:12.782210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.02912","last_updated":"2023-03-01T18:22:47Z","snapshot_observed_at":"2026-08-01T22:02:43.645259Z","submitted_at":"2022-10-06T13:30:16Z","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.02912","snapshot_observed_at":"2026-08-04T20:29:12.784641Z","title":"Canife: Crafting canaries for empirical privacy measurement in federated learning.arXiv preprint arXiv:2210.02912, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.784641Z"},"links":{"cited_paper":"/paper/2210.02912","citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:fc7142088352a4089fdbc38120720a16b3aa0723f822b4dc22a862d605e7af58","observation_id":"2acaf33e-0b7f-4438-91ca-8edc11f4bd53","resolution":{"observed_at":"2026-08-04T20:29:12.784641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22235","last_updated":"2024-10-29T17:02:22Z","snapshot_observed_at":"2026-08-03T22:53:30.291791Z","submitted_at":"2024-10-29T17:02:22Z","title":"Auditing $f$-Differential Privacy in One Run","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22235","snapshot_observed_at":"2026-08-04T20:29:12.787455Z","title":"Auditing f-differential privacy in one run.arXiv preprint arXiv:2410.22235, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.787455Z"},"links":{"cited_paper":"/paper/2410.22235","citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:14054fc0c11e17287bf42d853e62859e7977e53b97d76cb1a3446634647731d7","observation_id":"ecf3f8fe-276b-4313-93f7-9ec6aa1912a2","resolution":{"observed_at":"2026-08-04T20:29:12.787455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.790301Z","title":"Antipodes of label differential privacy: Pate and alibi","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.790301Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:61aecea6ae49b19a10c0c4b8fec7301b52281848e358c75319b2efb25fc13529","observation_id":"45a4d7da-7073-4925-bcdb-d8ffcc5b7e99","resolution":{"observed_at":"2026-08-04T20:29:12.790301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.792845Z","title":"On significance of the least significant bits for dif- ferential privacy","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.792845Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:9231dfe0943d96859481dc358c9d8144354884edbee486f3b9008f71429cd686","observation_id":"7e570c3f-d043-4454-9660-67634d587fe8","resolution":{"observed_at":"2026-08-04T20:29:12.792845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10530","last_updated":"2019-08-28T03:03:25Z","snapshot_observed_at":"2026-08-07T03:15:48.518041Z","submitted_at":"2019-08-28T03:03:25Z","title":"R\\'enyi Differential Privacy of the Sampled Gaussian Mechanism","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10530","snapshot_observed_at":"2026-08-04T20:29:12.795378Z","title":"R ´enyi differential privacy of the sampled gaussian mechanism.CoRR, abs/1908.10530, 2019","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.795378Z"},"links":{"cited_paper":"/paper/1908.10530","citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:c6f14fae01c23c32979237128bc9671a8e47dd1ca27239ac77243e5f93fdf521","observation_id":"ab1300f6-1984-46a8-9ad5-166cbe939d18","resolution":{"observed_at":"2026-08-04T20:29:12.795378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.798279Z","title":"Tight auditing of differentially private machine learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.798279Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:3510843dba643bcbff2a7bb7344b0cf7846619488b41018599ce623556a11b45","observation_id":"55c83d18-1b7a-4f22-b914-8710457e7f12","resolution":{"observed_at":"2026-08-04T20:29:12.798279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.800824Z","title":"Adversary instantiation: Lower bounds for differentially private machine learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.800824Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:bb5bff37bfb86aa1162d9af8f970da200712cf8b8e148a8f1279559b790701ad","observation_id":"aff35756-7556-4ab1-ab80-e6d3655ac789","resolution":{"observed_at":"2026-08-04T20:29:12.800824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.803444Z","title":null,"venue":null,"work_id":null,"year":1933},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.803444Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:0eb262af2500ad745874fd952973a81a1f696212fedc1d9426ecfa45f00f8b29","observation_id":"cc7dab67-2637-495a-8b88-44a435bd3c82","resolution":{"observed_at":"2026-08-04T20:29:12.803444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.806194Z","title":"https://www.flowhunt.io/glossary/cost-of-llm/?utm source=chatgpt.com","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.806194Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:b6dd842c2c7d0436e2dc2059b979fa3963270266e9e7adb3603f6d3573b2b9d2","observation_id":"46795b8f-6b97-4176-9e51-0540b3964a0a","resolution":{"observed_at":"2026-08-04T20:29:12.806194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.808928Z","title":"Springer, 2007","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.808928Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:5c434c5be14c516f458e4ecfb015bef4e63a764d2621e94415c73e4d1994fb86","observation_id":"65ee6220-580d-4746-b9f7-98ffe80da8f7","resolution":{"observed_at":"2026-08-04T20:29:12.808928Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.811378Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.811378Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:3078664edd334f4419c0a3a014c848603baee8e268b29954fed5f548dc621aa6","observation_id":"072cc418-3fb1-4d61-a461-77da63ad1fdb","resolution":{"observed_at":"2026-08-04T20:29:12.811378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.813951Z","title":"Privacy auditing with one (1) training run.Advances in Neural Information Processing Systems, 36:49268–49280, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.813951Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:ae427dcca9e85ba18c8d3587617c61151e3aa84fa83e19da126703e130f880f9","observation_id":"fe372758-83f5-4522-afa4-6463e5c43d16","resolution":{"observed_at":"2026-08-04T20:29:12.813951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.12219","last_updated":"2022-03-28T17:10:52Z","snapshot_observed_at":"2026-07-06T12:41:22.635071Z","submitted_at":"2022-02-24T17:31:08Z","title":"Debugging Differential Privacy: A Case Study for Privacy Auditing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.12219","snapshot_observed_at":"2026-08-04T20:29:12.816703Z","title":"Debugging differen- tial privacy: A case study for privacy auditing.arXiv preprint arXiv:2202.12219, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.816703Z"},"links":{"cited_paper":"/paper/2202.12219","citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:75ae3de828d588c4366b68fd2e0d8563656a5577e03e821af4edc9852c2812a1","observation_id":"9f27451f-ba7d-49bf-aabb-0ae0a3d2f346","resolution":{"observed_at":"2026-08-04T20:29:12.816703Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.819693Z","title":"Checkdp: An automated and integrated approach for proving differential privacy or finding precise counterexamples","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.819693Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:0f1ab5ffef557a71fb52691391a7a41af0063baae163604ef08308733b555335","observation_id":"5261450c-b267-4409-add8-32b21398e402","resolution":{"observed_at":"2026-08-04T20:29:12.819693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.822174Z","title":"Randomized response: A survey technique for eliminating evasive answer bias.Journal of the American Statistical Association, 60(309):63–69, 1965","venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.822174Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:0545c836e95a0cde18a498af720f79d6163419762ee0daab04df64f02143f047","observation_id":"0e4aac32-dcd3-4058-8768-57c4c1235bbc","resolution":{"observed_at":"2026-08-04T20:29:12.822174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.824826Z","title":"A statistical framework for differential privacy.Journal of the American Statistical Association, 105(489):375–389, 2010","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.824826Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:60b9536a3dd35f826fa6dad309abcc28272eec4e0a909b95f20e5479ce72b7f6","observation_id":"e86883cb-cc74-4257-b6ab-bd694198ad1a","resolution":{"observed_at":"2026-08-04T20:29:12.824826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.17750","last_updated":"2025-01-29T16:38:51Z","snapshot_observed_at":"2026-07-06T20:27:55.860626Z","submitted_at":"2025-01-29T16:38:51Z","title":"Privacy Audit as Bits Transmission: (Im)possibilities for Audit by One Run","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.17750","snapshot_observed_at":"2026-08-04T20:29:12.827382Z","title":"Privacy audit as bits transmission:(im) possibilities for audit by one run.arXiv preprint arXiv:2501.17750, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.827382Z"},"links":{"cited_paper":"/paper/2501.17750","citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:faca47615bd60c5acd7852e487667c2b32140973296b623bf9a3996e3f0a9eb0","observation_id":"ba8204fc-0c2a-4ec1-b637-64e553db5a04","resolution":{"observed_at":"2026-08-04T20:29:12.827382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.829998Z","title":"Bayesian estimation of differential privacy","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.829998Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:6f210ed442d58fa52d8007eb2803c3c67ac0c4d6f087c9f257b313ea324cdd12","observation_id":"7ddea888-c562-464d-9bed-70f6cdbb000a","resolution":{"observed_at":"2026-08-04T20:29:12.829998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T20:29:12.832727Z","title":"white- box","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T20:29:12.832727Z"},"links":{"citing_paper":"/paper/2509.08704"},"observation_digest":"sha256:e4cc0a770f73e08254de85ac2cbe47dab35b78928f0918b2960bd1bd1a8be613","observation_id":"afe7475e-04db-4b7f-9245-efe088106e6c","resolution":{"observed_at":"2026-08-04T20:29:12.832727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.08704","last_updated":"2025-09-10T15:55:03Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T10:34:17.549551Z","submitted_at":"2025-09-10T15:55:03Z","title":"Tight Privacy Audit in One Run"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 2 inbound Pith citation observations for arXiv:2509.08704."}