{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:3QKUCL73E7FG73OYKPGHQDWKFQ","short_pith_number":"pith:3QKUCL73","canonical_record":{"source":{"id":"2607.17504","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-20T03:19:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"4989faa368653f40b2cdae88563f571b4391e661769aa975939de474aa43c738","abstract_canon_sha256":"4a6e643a414de9df3909382bcda35994888d35ab7f4f5465036942aa04cb0fbb"},"schema_version":"1.0"},"canonical_sha256":"dc15412ffb27ca6fedd853cc780eca2c23c5518f0718bda42e0e461d6ec11ed6","source":{"kind":"arxiv","id":"2607.17504","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.17504","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"arxiv_version","alias_value":"2607.17504v1","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.17504","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"pith_short_12","alias_value":"3QKUCL73E7FG","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"pith_short_16","alias_value":"3QKUCL73E7FG73OY","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"pith_short_8","alias_value":"3QKUCL73","created_at":"2026-07-21T01:21:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:3QKUCL73E7FG73OYKPGHQDWKFQ","target":"record","payload":{"canonical_record":{"source":{"id":"2607.17504","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-20T03:19:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"4989faa368653f40b2cdae88563f571b4391e661769aa975939de474aa43c738","abstract_canon_sha256":"4a6e643a414de9df3909382bcda35994888d35ab7f4f5465036942aa04cb0fbb"},"schema_version":"1.0"},"canonical_sha256":"dc15412ffb27ca6fedd853cc780eca2c23c5518f0718bda42e0e461d6ec11ed6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-21T01:21:49.061014Z","signature_b64":"pxmWugrXe0eauiKxhgsNnpYLVpRWRagU+EKFRP9nGNnjMCH7Y8mfsgw4ljFEGC6ekn3VsmUazii+2ijHVRGWCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dc15412ffb27ca6fedd853cc780eca2c23c5518f0718bda42e0e461d6ec11ed6","last_reissued_at":"2026-07-21T01:21:49.060141Z","signature_status":"signed_v1","first_computed_at":"2026-07-21T01:21:49.060141Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.17504","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T01:21:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F/jMYzZOXA3cFDoUY2Gzj5qEwyH92lncuhQ/ACsdljUGvkOO3FOlHxCHRWUsl1zXScPdA1qWzKzF4v+M96FvDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:59:42.011304Z"},"content_sha256":"06b214261e6dae53994ee9a67aadb32ee6d33b2dcc958d80639ea108d60a616a","schema_version":"1.0","event_id":"sha256:06b214261e6dae53994ee9a67aadb32ee6d33b2dcc958d80639ea108d60a616a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:3QKUCL73E7FG73OYKPGHQDWKFQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DecoyFace: Beyond Obfuscation via Controllable and Imperceptible Identity Misdirection for Privacy-Preserving Face Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Fan Li, Lijun He, Xinyao Wang, Xinzhu Fu, Zhihan Ren","submitted_at":"2026-07-20T03:19:00Z","abstract_excerpt":"Split face recognition reduces client-side computation but exposes intermediate features to feature inversion attacks and unauthorized analysis by honest-but-curious (HBC) servers. Existing privacy-preserving face recognition methods mainly aim to resist unauthorized reconstruction, typically producing features whose inversion yields visibly degraded results, which may reveal the existence of protection and motivate adaptive attacks. To address this issue, we propose DecoyFace, an imperceptible decoy-oriented framework that steers unauthorized reconstruction toward a plausible but incorrect id"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.17504","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.17504/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T01:21:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xs6VUCPergbbXtBpVmnOuHalqvHuMt+8eg1EMJwTZtHs6z6rsj7UY8J+Qye9xa6BTyyBKIXkOuRc5wgh7HqBDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:59:42.011906Z"},"content_sha256":"70f8dde40cf68775f9f401201cea78bef00edf4246ff8a26380d13c05b7c67fc","schema_version":"1.0","event_id":"sha256:70f8dde40cf68775f9f401201cea78bef00edf4246ff8a26380d13c05b7c67fc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3QKUCL73E7FG73OYKPGHQDWKFQ/bundle.json","state_url":"https://pith.science/pith/3QKUCL73E7FG73OYKPGHQDWKFQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3QKUCL73E7FG73OYKPGHQDWKFQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T09:59:42Z","links":{"resolver":"https://pith.science/pith/3QKUCL73E7FG73OYKPGHQDWKFQ","bundle":"https://pith.science/pith/3QKUCL73E7FG73OYKPGHQDWKFQ/bundle.json","state":"https://pith.science/pith/3QKUCL73E7FG73OYKPGHQDWKFQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3QKUCL73E7FG73OYKPGHQDWKFQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:3QKUCL73E7FG73OYKPGHQDWKFQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4a6e643a414de9df3909382bcda35994888d35ab7f4f5465036942aa04cb0fbb","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-20T03:19:00Z","title_canon_sha256":"4989faa368653f40b2cdae88563f571b4391e661769aa975939de474aa43c738"},"schema_version":"1.0","source":{"id":"2607.17504","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.17504","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"arxiv_version","alias_value":"2607.17504v1","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.17504","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"pith_short_12","alias_value":"3QKUCL73E7FG","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"pith_short_16","alias_value":"3QKUCL73E7FG73OY","created_at":"2026-07-21T01:21:49Z"},{"alias_kind":"pith_short_8","alias_value":"3QKUCL73","created_at":"2026-07-21T01:21:49Z"}],"graph_snapshots":[{"event_id":"sha256:70f8dde40cf68775f9f401201cea78bef00edf4246ff8a26380d13c05b7c67fc","target":"graph","created_at":"2026-07-21T01:21:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.17504/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Split face recognition reduces client-side computation but exposes intermediate features to feature inversion attacks and unauthorized analysis by honest-but-curious (HBC) servers. Existing privacy-preserving face recognition methods mainly aim to resist unauthorized reconstruction, typically producing features whose inversion yields visibly degraded results, which may reveal the existence of protection and motivate adaptive attacks. To address this issue, we propose DecoyFace, an imperceptible decoy-oriented framework that steers unauthorized reconstruction toward a plausible but incorrect id","authors_text":"Fan Li, Lijun He, Xinyao Wang, Xinzhu Fu, Zhihan Ren","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-20T03:19:00Z","title":"DecoyFace: Beyond Obfuscation via Controllable and Imperceptible Identity Misdirection for Privacy-Preserving Face Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.17504","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:06b214261e6dae53994ee9a67aadb32ee6d33b2dcc958d80639ea108d60a616a","target":"record","created_at":"2026-07-21T01:21:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4a6e643a414de9df3909382bcda35994888d35ab7f4f5465036942aa04cb0fbb","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-20T03:19:00Z","title_canon_sha256":"4989faa368653f40b2cdae88563f571b4391e661769aa975939de474aa43c738"},"schema_version":"1.0","source":{"id":"2607.17504","kind":"arxiv","version":1}},"canonical_sha256":"dc15412ffb27ca6fedd853cc780eca2c23c5518f0718bda42e0e461d6ec11ed6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dc15412ffb27ca6fedd853cc780eca2c23c5518f0718bda42e0e461d6ec11ed6","first_computed_at":"2026-07-21T01:21:49.060141Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-21T01:21:49.060141Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pxmWugrXe0eauiKxhgsNnpYLVpRWRagU+EKFRP9nGNnjMCH7Y8mfsgw4ljFEGC6ekn3VsmUazii+2ijHVRGWCw==","signature_status":"signed_v1","signed_at":"2026-07-21T01:21:49.061014Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.17504","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:06b214261e6dae53994ee9a67aadb32ee6d33b2dcc958d80639ea108d60a616a","sha256:70f8dde40cf68775f9f401201cea78bef00edf4246ff8a26380d13c05b7c67fc"],"state_sha256":"fb9346c751a4f0e02fbabb056c53e0ab2acbd6554aeebb28570ac274aae7dc37"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V8/sBrlkIwDB04K+pvMB3J2m3rGkEH7KNeNkn6A1EfBZWL5pAEydxeMM8Mxz+elCTul32JArq5g6Y9WIfo3kCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T09:59:42.015464Z","bundle_sha256":"dc9b7f34cb3d7397a118900fd971483e7cd0feec5de3d91686a605de8d31d452"}}