{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3JSHNBIFQSLMWNSVTDOUZKQDXQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d3aeae5226526d48e6a4c76e08884762ec0c071875987c00750280800210212f","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-26T09:04:25Z","title_canon_sha256":"94898bc1c87d531a2ca3cde29f31ed5f3d0190048b8f80382e06fc4f3d2989be"},"schema_version":"1.0","source":{"id":"2509.22082","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.22082","created_at":"2026-07-07T02:18:28Z"},{"alias_kind":"arxiv_version","alias_value":"2509.22082v3","created_at":"2026-07-07T02:18:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.22082","created_at":"2026-07-07T02:18:28Z"},{"alias_kind":"pith_short_12","alias_value":"3JSHNBIFQSLM","created_at":"2026-07-07T02:18:28Z"},{"alias_kind":"pith_short_16","alias_value":"3JSHNBIFQSLMWNSV","created_at":"2026-07-07T02:18:28Z"},{"alias_kind":"pith_short_8","alias_value":"3JSHNBIF","created_at":"2026-07-07T02:18:28Z"}],"graph_snapshots":[{"event_id":"sha256:6ce0774d59f0305931457a81499d60f2e99bba03f5a242f3a2829dd2370ed04e","target":"graph","created_at":"2026-07-07T02:18:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.22082/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning enables distributed information sharing and collaborative model training without exposing raw client data. However, shared gradients or model updates may still contain sensitive information, making federated learning vulnerable to gradient inversion attacks. Most existing gradient inversion attacks rely on simplified update observations, such as single-step gradients or endpoint-based matching. In practical FL, however, FedAvg produces an accumulated trajectory-dependent update after multiple local steps, rather than a gradient computed at a single model state.To address thi","authors_text":"Jing Yu, Li Xia, Sili Huang, Wei Tang, Xuan Liu, Zheng Liu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-26T09:04:25Z","title":"Trajectory-Aware Information Matching for Multi-Step Gradient Inversion in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.22082","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d46b567e49cdfed56134d10d05d73f63dc8e546fc608c62fbb6ba538793379c2","target":"record","created_at":"2026-07-07T02:18:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d3aeae5226526d48e6a4c76e08884762ec0c071875987c00750280800210212f","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-26T09:04:25Z","title_canon_sha256":"94898bc1c87d531a2ca3cde29f31ed5f3d0190048b8f80382e06fc4f3d2989be"},"schema_version":"1.0","source":{"id":"2509.22082","kind":"arxiv","version":3}},"canonical_sha256":"da647685058496cb365598dd4caa03bc093b2175d4bd788798703d2af4104bef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"da647685058496cb365598dd4caa03bc093b2175d4bd788798703d2af4104bef","first_computed_at":"2026-07-07T02:18:28.457552Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T02:18:28.457552Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ca/raV3zISdTXdvEj53ogHSPRq47VeR93NoZ17UlJ9iFbdx2DBab4eyLw+1Dvm2A4hXaHSScT7+3XJTGkXXqBg==","signature_status":"signed_v1","signed_at":"2026-07-07T02:18:28.458548Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.22082","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d46b567e49cdfed56134d10d05d73f63dc8e546fc608c62fbb6ba538793379c2","sha256:6ce0774d59f0305931457a81499d60f2e99bba03f5a242f3a2829dd2370ed04e"],"state_sha256":"bac1f192b20e652a8abfd554cce4885f082671251055198f50abcfbac1b256fc"}