{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:4PGGKTE4QY43WI56C2XI7QNE3H","short_pith_number":"pith:4PGGKTE4","canonical_record":{"source":{"id":"2112.14087","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-28T10:51:26Z","cross_cats_sorted":[],"title_canon_sha256":"3888e38000c222a6ed14e8080cceea83bd37a2362243968da1356465afc491b2","abstract_canon_sha256":"b72ace480cbc6f7e7f30d3de284067eb8f5ff5f8413e20a3be7409890832f660"},"schema_version":"1.0"},"canonical_sha256":"e3cc654c9c8639bb23be16ae8fc1a4d9e31fd5d82c2d749c40759ad180359de1","source":{"kind":"arxiv","id":"2112.14087","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.14087","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"arxiv_version","alias_value":"2112.14087v1","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.14087","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"pith_short_12","alias_value":"4PGGKTE4QY43","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"pith_short_16","alias_value":"4PGGKTE4QY43WI56","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"pith_short_8","alias_value":"4PGGKTE4","created_at":"2026-07-05T03:44:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:4PGGKTE4QY43WI56C2XI7QNE3H","target":"record","payload":{"canonical_record":{"source":{"id":"2112.14087","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-28T10:51:26Z","cross_cats_sorted":[],"title_canon_sha256":"3888e38000c222a6ed14e8080cceea83bd37a2362243968da1356465afc491b2","abstract_canon_sha256":"b72ace480cbc6f7e7f30d3de284067eb8f5ff5f8413e20a3be7409890832f660"},"schema_version":"1.0"},"canonical_sha256":"e3cc654c9c8639bb23be16ae8fc1a4d9e31fd5d82c2d749c40759ad180359de1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:44:18.446005Z","signature_b64":"J+BlLwnVJKQpLWDFuPLwjm1FSgR8oCnoZsxI/XXYAWQaPbDGZKgvC12meVFbO2D7vvO/Ukjg204OEW0+ZjTuDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e3cc654c9c8639bb23be16ae8fc1a4d9e31fd5d82c2d749c40759ad180359de1","last_reissued_at":"2026-07-05T03:44:18.445578Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:44:18.445578Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.14087","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:44:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rYivcAGUlU3DI2GYHd3YMF6cZ0HWSrf2PeR7Akyji2Xi4xND/Ba+pDs7cHbU5jeWKng/g2BoNfMbdnutplTCAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:36:14.859920Z"},"content_sha256":"0a1a32109784888311f9e9d48a32d75dca8b5cc7ec27e9d09424af70799b5aa6","schema_version":"1.0","event_id":"sha256:0a1a32109784888311f9e9d48a32d75dca8b5cc7ec27e9d09424af70799b5aa6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:4PGGKTE4QY43WI56C2XI7QNE3H","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"APRIL: Finding the Achilles' Heel on Privacy for Vision Transformers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jiahao Lu, Jian Cheng, Tianli Zhao, Xiangyu He, Xi Sheryl Zhang","submitted_at":"2021-12-28T10:51:26Z","abstract_excerpt":"Federated learning frameworks typically require collaborators to share their local gradient updates of a common model instead of sharing training data to preserve privacy. However, prior works on Gradient Leakage Attacks showed that private training data can be revealed from gradients. So far almost all relevant works base their attacks on fully-connected or convolutional neural networks. Given the recent overwhelmingly rising trend of adapting Transformers to solve multifarious vision tasks, it is highly valuable to investigate the privacy risk of vision transformers. In this paper, we analys"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.14087","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.14087/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:44:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jx2TvE66masVVdoK2Jh10sk4UysG74ix3HbNJMJ1hz/igeyDqRCBjj2tO9qRhUpTe1XnFuFliLpLQ8nyOVQeBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:36:14.860517Z"},"content_sha256":"c7b3e8287a085856ffb4c22b715304bd81ee41f7c778ae156eb874f79e291f1b","schema_version":"1.0","event_id":"sha256:c7b3e8287a085856ffb4c22b715304bd81ee41f7c778ae156eb874f79e291f1b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4PGGKTE4QY43WI56C2XI7QNE3H/bundle.json","state_url":"https://pith.science/pith/4PGGKTE4QY43WI56C2XI7QNE3H/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4PGGKTE4QY43WI56C2XI7QNE3H/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T04:36:14Z","links":{"resolver":"https://pith.science/pith/4PGGKTE4QY43WI56C2XI7QNE3H","bundle":"https://pith.science/pith/4PGGKTE4QY43WI56C2XI7QNE3H/bundle.json","state":"https://pith.science/pith/4PGGKTE4QY43WI56C2XI7QNE3H/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4PGGKTE4QY43WI56C2XI7QNE3H/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:4PGGKTE4QY43WI56C2XI7QNE3H","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b72ace480cbc6f7e7f30d3de284067eb8f5ff5f8413e20a3be7409890832f660","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-28T10:51:26Z","title_canon_sha256":"3888e38000c222a6ed14e8080cceea83bd37a2362243968da1356465afc491b2"},"schema_version":"1.0","source":{"id":"2112.14087","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.14087","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"arxiv_version","alias_value":"2112.14087v1","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.14087","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"pith_short_12","alias_value":"4PGGKTE4QY43","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"pith_short_16","alias_value":"4PGGKTE4QY43WI56","created_at":"2026-07-05T03:44:18Z"},{"alias_kind":"pith_short_8","alias_value":"4PGGKTE4","created_at":"2026-07-05T03:44:18Z"}],"graph_snapshots":[{"event_id":"sha256:c7b3e8287a085856ffb4c22b715304bd81ee41f7c778ae156eb874f79e291f1b","target":"graph","created_at":"2026-07-05T03:44:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.14087/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning frameworks typically require collaborators to share their local gradient updates of a common model instead of sharing training data to preserve privacy. However, prior works on Gradient Leakage Attacks showed that private training data can be revealed from gradients. So far almost all relevant works base their attacks on fully-connected or convolutional neural networks. Given the recent overwhelmingly rising trend of adapting Transformers to solve multifarious vision tasks, it is highly valuable to investigate the privacy risk of vision transformers. In this paper, we analys","authors_text":"Jiahao Lu, Jian Cheng, Tianli Zhao, Xiangyu He, Xi Sheryl Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-28T10:51:26Z","title":"APRIL: Finding the Achilles' Heel on Privacy for Vision Transformers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.14087","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0a1a32109784888311f9e9d48a32d75dca8b5cc7ec27e9d09424af70799b5aa6","target":"record","created_at":"2026-07-05T03:44:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b72ace480cbc6f7e7f30d3de284067eb8f5ff5f8413e20a3be7409890832f660","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-28T10:51:26Z","title_canon_sha256":"3888e38000c222a6ed14e8080cceea83bd37a2362243968da1356465afc491b2"},"schema_version":"1.0","source":{"id":"2112.14087","kind":"arxiv","version":1}},"canonical_sha256":"e3cc654c9c8639bb23be16ae8fc1a4d9e31fd5d82c2d749c40759ad180359de1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e3cc654c9c8639bb23be16ae8fc1a4d9e31fd5d82c2d749c40759ad180359de1","first_computed_at":"2026-07-05T03:44:18.445578Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:44:18.445578Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"J+BlLwnVJKQpLWDFuPLwjm1FSgR8oCnoZsxI/XXYAWQaPbDGZKgvC12meVFbO2D7vvO/Ukjg204OEW0+ZjTuDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:44:18.446005Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.14087","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0a1a32109784888311f9e9d48a32d75dca8b5cc7ec27e9d09424af70799b5aa6","sha256:c7b3e8287a085856ffb4c22b715304bd81ee41f7c778ae156eb874f79e291f1b"],"state_sha256":"db786edb58fed7e4e9d89ac946716dd97d7dc934eb11a781c20df2b68cfece28"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bMMCx2obHpEvjrb1Z6tCqARgypYbILFfGX7IKurzsvf9bbfI71/BKdFjEI8xo2x8/owWMSuyjDUxGxAco5EmBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T04:36:14.866076Z","bundle_sha256":"97ce0bc7a7072557e3dd17d1497badbca13a222fe3f1410ca2da506b7bb2a9c6"}}