{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:35HBZS7HBQPVVUJDZOXNAQIQB4","short_pith_number":"pith:35HBZS7H","canonical_record":{"source":{"id":"2509.04214","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T13:39:37Z","cross_cats_sorted":[],"title_canon_sha256":"9292c75d4f1cfa79bebe277f8baecd39c665d464f8c71f7079fdd67461722ab1","abstract_canon_sha256":"53940d712789ad410020a8950344ce35e8c09e7e016a954351340b36f846c15b"},"schema_version":"1.0"},"canonical_sha256":"df4e1ccbe70c1f5ad123cbaed041100f250f4d78eb05f608289a4da8d54a43f2","source":{"kind":"arxiv","id":"2509.04214","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.04214","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"arxiv_version","alias_value":"2509.04214v1","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.04214","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"pith_short_12","alias_value":"35HBZS7HBQPV","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"pith_short_16","alias_value":"35HBZS7HBQPVVUJD","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"pith_short_8","alias_value":"35HBZS7H","created_at":"2026-07-05T12:04:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:35HBZS7HBQPVVUJDZOXNAQIQB4","target":"record","payload":{"canonical_record":{"source":{"id":"2509.04214","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T13:39:37Z","cross_cats_sorted":[],"title_canon_sha256":"9292c75d4f1cfa79bebe277f8baecd39c665d464f8c71f7079fdd67461722ab1","abstract_canon_sha256":"53940d712789ad410020a8950344ce35e8c09e7e016a954351340b36f846c15b"},"schema_version":"1.0"},"canonical_sha256":"df4e1ccbe70c1f5ad123cbaed041100f250f4d78eb05f608289a4da8d54a43f2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:04:55.615991Z","signature_b64":"KM6WA9GEwVdF9TR+o1c4J5zGOUF/mlXf+nAZMSafE34NqtqUCzBlBVlOvpUeehaLhFIzIwZPEZj14fKa0icEAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"df4e1ccbe70c1f5ad123cbaed041100f250f4d78eb05f608289a4da8d54a43f2","last_reissued_at":"2026-07-05T12:04:55.615399Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:04:55.615399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.04214","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:04:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/R7rnobpZ/K2N8kFBjHddi8QZ38Lj2+7rr7TJnXf5xZuiZ427bPO3V3fEZP2EvS/YJPLURaibZpojvJE8P65BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T13:26:58.403475Z"},"content_sha256":"6e4a59aceeaedf010b9158a1acfd31e7ef4049ae103adec808521b0070cb4982","schema_version":"1.0","event_id":"sha256:6e4a59aceeaedf010b9158a1acfd31e7ef4049ae103adec808521b0070cb4982"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:35HBZS7HBQPVVUJDZOXNAQIQB4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Automated, Scalable Machine Learning Model Inversion Assessment Pipeline","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"David Saranchak, Jessica Carpenter, Nathaniel D. Bastian, Tyler Shumaker","submitted_at":"2025-09-04T13:39:37Z","abstract_excerpt":"Machine learning (ML) models have the potential to transform military battlefields, presenting a large external pressure to rapidly incorporate them into operational settings. However, it is well-established that these ML models are vulnerable to a number of adversarial attacks throughout the model deployment pipeline that threaten to negate battlefield advantage. One broad category is privacy attacks (such as model inversion) where an adversary can reverse engineer information from the model, such as the sensitive data used in its training. The ability to quantify the risk of model inversion "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.04214","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.04214/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:04:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z9Z6yTqi5DSfjqBHuI54c3fDXd9adPTAicJlvUH/Q8ifJTiRrED26Dp/PpEEu3GNmCt1zQWajoZ76Pgo0UCADw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T13:26:58.404258Z"},"content_sha256":"521165d9fa2192854815d3825239506b66af6730b8a3ffc3e0ff878716ac7e10","schema_version":"1.0","event_id":"sha256:521165d9fa2192854815d3825239506b66af6730b8a3ffc3e0ff878716ac7e10"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/35HBZS7HBQPVVUJDZOXNAQIQB4/bundle.json","state_url":"https://pith.science/pith/35HBZS7HBQPVVUJDZOXNAQIQB4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/35HBZS7HBQPVVUJDZOXNAQIQB4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T13:26:58Z","links":{"resolver":"https://pith.science/pith/35HBZS7HBQPVVUJDZOXNAQIQB4","bundle":"https://pith.science/pith/35HBZS7HBQPVVUJDZOXNAQIQB4/bundle.json","state":"https://pith.science/pith/35HBZS7HBQPVVUJDZOXNAQIQB4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/35HBZS7HBQPVVUJDZOXNAQIQB4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:35HBZS7HBQPVVUJDZOXNAQIQB4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"53940d712789ad410020a8950344ce35e8c09e7e016a954351340b36f846c15b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T13:39:37Z","title_canon_sha256":"9292c75d4f1cfa79bebe277f8baecd39c665d464f8c71f7079fdd67461722ab1"},"schema_version":"1.0","source":{"id":"2509.04214","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.04214","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"arxiv_version","alias_value":"2509.04214v1","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.04214","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"pith_short_12","alias_value":"35HBZS7HBQPV","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"pith_short_16","alias_value":"35HBZS7HBQPVVUJD","created_at":"2026-07-05T12:04:55Z"},{"alias_kind":"pith_short_8","alias_value":"35HBZS7H","created_at":"2026-07-05T12:04:55Z"}],"graph_snapshots":[{"event_id":"sha256:521165d9fa2192854815d3825239506b66af6730b8a3ffc3e0ff878716ac7e10","target":"graph","created_at":"2026-07-05T12:04:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.04214/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning (ML) models have the potential to transform military battlefields, presenting a large external pressure to rapidly incorporate them into operational settings. However, it is well-established that these ML models are vulnerable to a number of adversarial attacks throughout the model deployment pipeline that threaten to negate battlefield advantage. One broad category is privacy attacks (such as model inversion) where an adversary can reverse engineer information from the model, such as the sensitive data used in its training. The ability to quantify the risk of model inversion ","authors_text":"David Saranchak, Jessica Carpenter, Nathaniel D. Bastian, Tyler Shumaker","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T13:39:37Z","title":"An Automated, Scalable Machine Learning Model Inversion Assessment Pipeline"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.04214","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6e4a59aceeaedf010b9158a1acfd31e7ef4049ae103adec808521b0070cb4982","target":"record","created_at":"2026-07-05T12:04:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"53940d712789ad410020a8950344ce35e8c09e7e016a954351340b36f846c15b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T13:39:37Z","title_canon_sha256":"9292c75d4f1cfa79bebe277f8baecd39c665d464f8c71f7079fdd67461722ab1"},"schema_version":"1.0","source":{"id":"2509.04214","kind":"arxiv","version":1}},"canonical_sha256":"df4e1ccbe70c1f5ad123cbaed041100f250f4d78eb05f608289a4da8d54a43f2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"df4e1ccbe70c1f5ad123cbaed041100f250f4d78eb05f608289a4da8d54a43f2","first_computed_at":"2026-07-05T12:04:55.615399Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:04:55.615399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KM6WA9GEwVdF9TR+o1c4J5zGOUF/mlXf+nAZMSafE34NqtqUCzBlBVlOvpUeehaLhFIzIwZPEZj14fKa0icEAA==","signature_status":"signed_v1","signed_at":"2026-07-05T12:04:55.615991Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.04214","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6e4a59aceeaedf010b9158a1acfd31e7ef4049ae103adec808521b0070cb4982","sha256:521165d9fa2192854815d3825239506b66af6730b8a3ffc3e0ff878716ac7e10"],"state_sha256":"10f81a82835d93909d1b8032578812bd735d54772e4d4265445193b374defa56"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DAYypkMkofuWYINCFceaIjnn7paZIz3ieH+1lS9XMCEcmUGpdcUag8XKBxu6MOgdmiCxVFrKoRxMAUWTm8L/BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T13:26:58.409925Z","bundle_sha256":"0733ef30bb8412e1f8917d8c0b7a25c8972e204b9c73d38dd35bef99581df0d1"}}