{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:2QN2ZTYWS3JCYKYBJQQDOMAGGN","short_pith_number":"pith:2QN2ZTYW","canonical_record":{"source":{"id":"2311.15792","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-27T13:14:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8de6cddf11bdacc569d3431aa878e35ac6ee3dde7c71b2c00b3944ecefa8b032","abstract_canon_sha256":"6be385427004e6e14390bfc35f47172651c43647ef87fade2a2480bcd317706b"},"schema_version":"1.0"},"canonical_sha256":"d41baccf1696d22c2b014c2037300633407f11a325b92e29d20301db0c742e66","source":{"kind":"arxiv","id":"2311.15792","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.15792","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"arxiv_version","alias_value":"2311.15792v1","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.15792","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"pith_short_12","alias_value":"2QN2ZTYWS3JC","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"pith_short_16","alias_value":"2QN2ZTYWS3JCYKYB","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"pith_short_8","alias_value":"2QN2ZTYW","created_at":"2026-07-05T07:17:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:2QN2ZTYWS3JCYKYBJQQDOMAGGN","target":"record","payload":{"canonical_record":{"source":{"id":"2311.15792","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-27T13:14:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8de6cddf11bdacc569d3431aa878e35ac6ee3dde7c71b2c00b3944ecefa8b032","abstract_canon_sha256":"6be385427004e6e14390bfc35f47172651c43647ef87fade2a2480bcd317706b"},"schema_version":"1.0"},"canonical_sha256":"d41baccf1696d22c2b014c2037300633407f11a325b92e29d20301db0c742e66","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:17:09.509241Z","signature_b64":"SDRPoat8LwIwIbTQbumiCSgJ0TCJd5oEXqQ7/NAPywJuYh/mEqUbCG/NAFGxJoIiutcWLZ19UTVav3UXoZazAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d41baccf1696d22c2b014c2037300633407f11a325b92e29d20301db0c742e66","last_reissued_at":"2026-07-05T07:17:09.508721Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:17:09.508721Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.15792","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:17:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OzZePAB95t8d34MPnsq3UJbmlJOwp8ArEE/DSLcJ1EGcYjtkoa4E0iUiMBAg5DGTFh2rp0MFaEh8gsJm1VeACA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T10:08:02.036121Z"},"content_sha256":"b0c5d19f7788ef1fb64bb76c377fc5ee54162610665a9be384d87a74dccc9953","schema_version":"1.0","event_id":"sha256:b0c5d19f7788ef1fb64bb76c377fc5ee54162610665a9be384d87a74dccc9953"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:2QN2ZTYWS3JCYKYBJQQDOMAGGN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Ahmed Salem, Andrew Paverd, Boris K\\\"opf, Lukas Wutschitz, Menglin Xia, Santiago Zanella-B\\'eguelin, Saravan Rajmohan, Shruti Tople, Victor R\\\"uhle","submitted_at":"2023-11-27T13:14:39Z","abstract_excerpt":"Modern machine learning systems use models trained on ever-growing corpora. Typically, metadata such as ownership, access control, or licensing information is ignored during training. Instead, to mitigate privacy risks, we rely on generic techniques such as dataset sanitization and differentially private model training, with inherent privacy/utility trade-offs that hurt model performance. Moreover, these techniques have limitations in scenarios where sensitive information is shared across multiple participants and fine-grained access control is required. By ignoring metadata, we therefore miss"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.15792","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.15792/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:17:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zIEuazmgHqhAwrZw5Y+BXXIPSrFoFQX8guGiq9ay3mKyaDRQhc7pdFkVxjVEWJd+r6oMgflw1K4zrAx735aaCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T10:08:02.036994Z"},"content_sha256":"625cd9615260b0f1ac27d1f758c0dd97f9f5a116e8484c914c5ca0dcf8d8df51","schema_version":"1.0","event_id":"sha256:625cd9615260b0f1ac27d1f758c0dd97f9f5a116e8484c914c5ca0dcf8d8df51"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2QN2ZTYWS3JCYKYBJQQDOMAGGN/bundle.json","state_url":"https://pith.science/pith/2QN2ZTYWS3JCYKYBJQQDOMAGGN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2QN2ZTYWS3JCYKYBJQQDOMAGGN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T10:08:02Z","links":{"resolver":"https://pith.science/pith/2QN2ZTYWS3JCYKYBJQQDOMAGGN","bundle":"https://pith.science/pith/2QN2ZTYWS3JCYKYBJQQDOMAGGN/bundle.json","state":"https://pith.science/pith/2QN2ZTYWS3JCYKYBJQQDOMAGGN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2QN2ZTYWS3JCYKYBJQQDOMAGGN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:2QN2ZTYWS3JCYKYBJQQDOMAGGN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6be385427004e6e14390bfc35f47172651c43647ef87fade2a2480bcd317706b","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-27T13:14:39Z","title_canon_sha256":"8de6cddf11bdacc569d3431aa878e35ac6ee3dde7c71b2c00b3944ecefa8b032"},"schema_version":"1.0","source":{"id":"2311.15792","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.15792","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"arxiv_version","alias_value":"2311.15792v1","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.15792","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"pith_short_12","alias_value":"2QN2ZTYWS3JC","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"pith_short_16","alias_value":"2QN2ZTYWS3JCYKYB","created_at":"2026-07-05T07:17:09Z"},{"alias_kind":"pith_short_8","alias_value":"2QN2ZTYW","created_at":"2026-07-05T07:17:09Z"}],"graph_snapshots":[{"event_id":"sha256:625cd9615260b0f1ac27d1f758c0dd97f9f5a116e8484c914c5ca0dcf8d8df51","target":"graph","created_at":"2026-07-05T07:17:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.15792/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern machine learning systems use models trained on ever-growing corpora. Typically, metadata such as ownership, access control, or licensing information is ignored during training. Instead, to mitigate privacy risks, we rely on generic techniques such as dataset sanitization and differentially private model training, with inherent privacy/utility trade-offs that hurt model performance. Moreover, these techniques have limitations in scenarios where sensitive information is shared across multiple participants and fine-grained access control is required. By ignoring metadata, we therefore miss","authors_text":"Ahmed Salem, Andrew Paverd, Boris K\\\"opf, Lukas Wutschitz, Menglin Xia, Santiago Zanella-B\\'eguelin, Saravan Rajmohan, Shruti Tople, Victor R\\\"uhle","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-27T13:14:39Z","title":"Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.15792","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b0c5d19f7788ef1fb64bb76c377fc5ee54162610665a9be384d87a74dccc9953","target":"record","created_at":"2026-07-05T07:17:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6be385427004e6e14390bfc35f47172651c43647ef87fade2a2480bcd317706b","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-27T13:14:39Z","title_canon_sha256":"8de6cddf11bdacc569d3431aa878e35ac6ee3dde7c71b2c00b3944ecefa8b032"},"schema_version":"1.0","source":{"id":"2311.15792","kind":"arxiv","version":1}},"canonical_sha256":"d41baccf1696d22c2b014c2037300633407f11a325b92e29d20301db0c742e66","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d41baccf1696d22c2b014c2037300633407f11a325b92e29d20301db0c742e66","first_computed_at":"2026-07-05T07:17:09.508721Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:17:09.508721Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SDRPoat8LwIwIbTQbumiCSgJ0TCJd5oEXqQ7/NAPywJuYh/mEqUbCG/NAFGxJoIiutcWLZ19UTVav3UXoZazAw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:17:09.509241Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.15792","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b0c5d19f7788ef1fb64bb76c377fc5ee54162610665a9be384d87a74dccc9953","sha256:625cd9615260b0f1ac27d1f758c0dd97f9f5a116e8484c914c5ca0dcf8d8df51"],"state_sha256":"be0603242b9a9ac898dac3c2a04b08577d624eb3783c360746411350e4415342"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c3LE+4PeZZlz/iVxGq46ll+JB5Z5ZmRfvGGvkKEexP+w1p4rbabkyKebwCjRBuJ/ehEZAPL/Q0YiYtlZ3W/aBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T10:08:02.042216Z","bundle_sha256":"3bc230437645d10bdfcb6678fbb7282bd9a92634d3b8d5be4bffed2f86d7328c"}}