{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:3S6BRMFISO6MDSDMO2WVTCZJ6K","short_pith_number":"pith:3S6BRMFI","canonical_record":{"source":{"id":"2607.05251","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T15:59:17Z","cross_cats_sorted":["cs.AI","cs.LG","cs.LO"],"title_canon_sha256":"1f5ecda8bd5758d1c995c0c399ccb8d3c424b5854260014ed02f65fbbb011914","abstract_canon_sha256":"3e3480e0b4f9362f5dcc2f7c8f17eeb78c427173d4224affd85115f7f2b1a677"},"schema_version":"1.0"},"canonical_sha256":"dcbc18b0a893bcc1c86c76ad598b29f2ae6260c34a2b8898de4b0fc7de750f16","source":{"kind":"arxiv","id":"2607.05251","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.05251","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2607.05251v1","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.05251","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"3S6BRMFISO6M","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"3S6BRMFISO6MDSDM","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"3S6BRMFI","created_at":"2026-07-07T03:19:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:3S6BRMFISO6MDSDMO2WVTCZJ6K","target":"record","payload":{"canonical_record":{"source":{"id":"2607.05251","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T15:59:17Z","cross_cats_sorted":["cs.AI","cs.LG","cs.LO"],"title_canon_sha256":"1f5ecda8bd5758d1c995c0c399ccb8d3c424b5854260014ed02f65fbbb011914","abstract_canon_sha256":"3e3480e0b4f9362f5dcc2f7c8f17eeb78c427173d4224affd85115f7f2b1a677"},"schema_version":"1.0"},"canonical_sha256":"dcbc18b0a893bcc1c86c76ad598b29f2ae6260c34a2b8898de4b0fc7de750f16","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T03:19:21.080264Z","signature_b64":"ZH4n8W0yXk996J4NMlpEtTpXvPPMKQSRF0ctdo/ZbDz8FMc4mSQg8elrquZm5LL/LBFj1S/z5e6G9lyhNowwDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dcbc18b0a893bcc1c86c76ad598b29f2ae6260c34a2b8898de4b0fc7de750f16","last_reissued_at":"2026-07-07T03:19:21.079693Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T03:19:21.079693Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.05251","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T03:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"35uWLqh8wBw0YkKTtnt3TY4/IiU1nBzta4sPAMHSmRgYVvUwLzCXKTCajXHd19lH1HbruwMker26vhhss2z0DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T14:49:43.342290Z"},"content_sha256":"68d8e69c146fd13f59a1210085706a7b2cbb4d9e1a1030896a5510a501a01ec5","schema_version":"1.0","event_id":"sha256:68d8e69c146fd13f59a1210085706a7b2cbb4d9e1a1030896a5510a501a01ec5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:3S6BRMFISO6MDSDMO2WVTCZJ6K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy-Preserving Robustness Verification for Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG","cs.LO"],"primary_cat":"cs.CR","authors_text":"Meng Sun, Nianyun Song, Rongfang Bie, Xiaokun Luan, Xiyue Zhang, Yu Guo","submitted_at":"2026-07-06T15:59:17Z","abstract_excerpt":"Neural network verification and data privacy are inherently in tension: verification demands full access to model parameters and input data, yet both are increasingly restricted by privacy regulations and intellectual property constraints. This tension has left robustness verification impractical in privacy-sensitive domains. In this work, we address this gap with SecureCROWN, the first framework for privacy-preserving neural network robustness verification. Built upon secure two-party computation (2PC), our framework enables a model owner and a data owner to jointly compute certified robustne"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.05251","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.05251/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T03:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r4lBh5dwtrWCvqTNODvNHVpi87oZUeT5mAFilca/vafTCeF3c6rowBbtFOnwLJiBP9+H01cjlU1Ar0VOT09ZDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T14:49:43.342777Z"},"content_sha256":"f9e2f464f489ad584d08b064112718ef68de92db78676318c2a9f820d336fe0a","schema_version":"1.0","event_id":"sha256:f9e2f464f489ad584d08b064112718ef68de92db78676318c2a9f820d336fe0a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3S6BRMFISO6MDSDMO2WVTCZJ6K/bundle.json","state_url":"https://pith.science/pith/3S6BRMFISO6MDSDMO2WVTCZJ6K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3S6BRMFISO6MDSDMO2WVTCZJ6K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T14:49:43Z","links":{"resolver":"https://pith.science/pith/3S6BRMFISO6MDSDMO2WVTCZJ6K","bundle":"https://pith.science/pith/3S6BRMFISO6MDSDMO2WVTCZJ6K/bundle.json","state":"https://pith.science/pith/3S6BRMFISO6MDSDMO2WVTCZJ6K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3S6BRMFISO6MDSDMO2WVTCZJ6K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:3S6BRMFISO6MDSDMO2WVTCZJ6K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3e3480e0b4f9362f5dcc2f7c8f17eeb78c427173d4224affd85115f7f2b1a677","cross_cats_sorted":["cs.AI","cs.LG","cs.LO"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T15:59:17Z","title_canon_sha256":"1f5ecda8bd5758d1c995c0c399ccb8d3c424b5854260014ed02f65fbbb011914"},"schema_version":"1.0","source":{"id":"2607.05251","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.05251","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2607.05251v1","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.05251","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"3S6BRMFISO6M","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"3S6BRMFISO6MDSDM","created_at":"2026-07-07T03:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"3S6BRMFI","created_at":"2026-07-07T03:19:21Z"}],"graph_snapshots":[{"event_id":"sha256:f9e2f464f489ad584d08b064112718ef68de92db78676318c2a9f820d336fe0a","target":"graph","created_at":"2026-07-07T03:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.05251/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural network verification and data privacy are inherently in tension: verification demands full access to model parameters and input data, yet both are increasingly restricted by privacy regulations and intellectual property constraints. This tension has left robustness verification impractical in privacy-sensitive domains. In this work, we address this gap with SecureCROWN, the first framework for privacy-preserving neural network robustness verification. Built upon secure two-party computation (2PC), our framework enables a model owner and a data owner to jointly compute certified robustne","authors_text":"Meng Sun, Nianyun Song, Rongfang Bie, Xiaokun Luan, Xiyue Zhang, Yu Guo","cross_cats":["cs.AI","cs.LG","cs.LO"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T15:59:17Z","title":"Privacy-Preserving Robustness Verification for Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.05251","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:68d8e69c146fd13f59a1210085706a7b2cbb4d9e1a1030896a5510a501a01ec5","target":"record","created_at":"2026-07-07T03:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3e3480e0b4f9362f5dcc2f7c8f17eeb78c427173d4224affd85115f7f2b1a677","cross_cats_sorted":["cs.AI","cs.LG","cs.LO"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T15:59:17Z","title_canon_sha256":"1f5ecda8bd5758d1c995c0c399ccb8d3c424b5854260014ed02f65fbbb011914"},"schema_version":"1.0","source":{"id":"2607.05251","kind":"arxiv","version":1}},"canonical_sha256":"dcbc18b0a893bcc1c86c76ad598b29f2ae6260c34a2b8898de4b0fc7de750f16","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dcbc18b0a893bcc1c86c76ad598b29f2ae6260c34a2b8898de4b0fc7de750f16","first_computed_at":"2026-07-07T03:19:21.079693Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T03:19:21.079693Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZH4n8W0yXk996J4NMlpEtTpXvPPMKQSRF0ctdo/ZbDz8FMc4mSQg8elrquZm5LL/LBFj1S/z5e6G9lyhNowwDg==","signature_status":"signed_v1","signed_at":"2026-07-07T03:19:21.080264Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.05251","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:68d8e69c146fd13f59a1210085706a7b2cbb4d9e1a1030896a5510a501a01ec5","sha256:f9e2f464f489ad584d08b064112718ef68de92db78676318c2a9f820d336fe0a"],"state_sha256":"a27b095c48e37677a8aa24e968683147570a3405ae7abef78f26fb6bf749b638"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nCFsNZosFodAqhH0u5UmMFOJpFDnIvqbA27m8AC6RAajSoYrPCFwm2PHpzShAkF1MqtJ1i723khHZFTj2+9PDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T14:49:43.346250Z","bundle_sha256":"a7fc55c0716703ecc4504f10540b1f94799a0a82373716289f47fa6c0a0da271"}}