{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5232TWM5QAIYH3QP6OIZCXM2F4","short_pith_number":"pith:5232TWM5","canonical_record":{"source":{"id":"2502.15012","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:09:14Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"84d2bbbad31b09b15e2ffb7cb46f17ffbf4823fb1fc749d2d9cc6168e830cc99","abstract_canon_sha256":"61aef2e2265687dc11411128e31f0efa8fea76e258cb0f0d89894a4edc9e2bc1"},"schema_version":"1.0"},"canonical_sha256":"eeb7a9d99d801183ee0ff391915d9a2f0e10d8db10bba54401b828b622c07275","source":{"kind":"arxiv","id":"2502.15012","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.15012","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"arxiv_version","alias_value":"2502.15012v1","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.15012","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_12","alias_value":"5232TWM5QAIY","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_16","alias_value":"5232TWM5QAIYH3QP","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_8","alias_value":"5232TWM5","created_at":"2026-07-05T10:17:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5232TWM5QAIYH3QP6OIZCXM2F4","target":"record","payload":{"canonical_record":{"source":{"id":"2502.15012","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:09:14Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"84d2bbbad31b09b15e2ffb7cb46f17ffbf4823fb1fc749d2d9cc6168e830cc99","abstract_canon_sha256":"61aef2e2265687dc11411128e31f0efa8fea76e258cb0f0d89894a4edc9e2bc1"},"schema_version":"1.0"},"canonical_sha256":"eeb7a9d99d801183ee0ff391915d9a2f0e10d8db10bba54401b828b622c07275","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:17:38.112788Z","signature_b64":"EcNred1tW+q3wgolT5iV5rdhOXS7Oey9gOlRm5uyi5VEnKKnk50CIUbQgNsnNuceGDKEIUTreuR1LX1+VKX7DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eeb7a9d99d801183ee0ff391915d9a2f0e10d8db10bba54401b828b622c07275","last_reissued_at":"2026-07-05T10:17:38.112291Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:17:38.112291Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.15012","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4PehHGDyno56yAA1yJQWEOqPJllyROLeAU5VFuBfaelCnWisYDm5LDjMTCl19Tyhk7utnj+TO3hEVBZzGb0RAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T01:10:33.293025Z"},"content_sha256":"28a002876696c4de3e6bce14c2a5d7cbc004caf87ed5bf357595a80ff4757d65","schema_version":"1.0","event_id":"sha256:28a002876696c4de3e6bce14c2a5d7cbc004caf87ed5bf357595a80ff4757d65"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5232TWM5QAIYH3QP6OIZCXM2F4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Graph in the Vault: Protecting Edge GNN Inference with Trusted Execution Environment","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Aidong Adam Ding, Ruyi Ding, Tianhong Xu, Yunsi Fei","submitted_at":"2025-02-20T20:09:14Z","abstract_excerpt":"Wide deployment of machine learning models on edge devices has rendered the model intellectual property (IP) and data privacy vulnerable. We propose GNNVault, the first secure Graph Neural Network (GNN) deployment strategy based on Trusted Execution Environment (TEE). GNNVault follows the design of 'partition-before-training' and includes a private GNN rectifier to complement with a public backbone model. This way, both critical GNN model parameters and the private graph used during inference are protected within secure TEE compartments. Real-world implementations with Intel SGX demonstrate th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.15012","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.15012/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OQcaqfdJpIYAJkzwfOV/Jz3WQ+XtzzzwUtxIA8WUEhohx74ZoTJ7OlD0O0EypomMbRzCre1PbKoqKhd53ImWAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T01:10:33.293707Z"},"content_sha256":"a96fd4c63468ea51b6b3751baa6e76034314e3837f89217867a1c71924f80bc7","schema_version":"1.0","event_id":"sha256:a96fd4c63468ea51b6b3751baa6e76034314e3837f89217867a1c71924f80bc7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5232TWM5QAIYH3QP6OIZCXM2F4/bundle.json","state_url":"https://pith.science/pith/5232TWM5QAIYH3QP6OIZCXM2F4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5232TWM5QAIYH3QP6OIZCXM2F4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T01:10:33Z","links":{"resolver":"https://pith.science/pith/5232TWM5QAIYH3QP6OIZCXM2F4","bundle":"https://pith.science/pith/5232TWM5QAIYH3QP6OIZCXM2F4/bundle.json","state":"https://pith.science/pith/5232TWM5QAIYH3QP6OIZCXM2F4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5232TWM5QAIYH3QP6OIZCXM2F4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5232TWM5QAIYH3QP6OIZCXM2F4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"61aef2e2265687dc11411128e31f0efa8fea76e258cb0f0d89894a4edc9e2bc1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:09:14Z","title_canon_sha256":"84d2bbbad31b09b15e2ffb7cb46f17ffbf4823fb1fc749d2d9cc6168e830cc99"},"schema_version":"1.0","source":{"id":"2502.15012","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.15012","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"arxiv_version","alias_value":"2502.15012v1","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.15012","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_12","alias_value":"5232TWM5QAIY","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_16","alias_value":"5232TWM5QAIYH3QP","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_8","alias_value":"5232TWM5","created_at":"2026-07-05T10:17:38Z"}],"graph_snapshots":[{"event_id":"sha256:a96fd4c63468ea51b6b3751baa6e76034314e3837f89217867a1c71924f80bc7","target":"graph","created_at":"2026-07-05T10:17:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.15012/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Wide deployment of machine learning models on edge devices has rendered the model intellectual property (IP) and data privacy vulnerable. We propose GNNVault, the first secure Graph Neural Network (GNN) deployment strategy based on Trusted Execution Environment (TEE). GNNVault follows the design of 'partition-before-training' and includes a private GNN rectifier to complement with a public backbone model. This way, both critical GNN model parameters and the private graph used during inference are protected within secure TEE compartments. Real-world implementations with Intel SGX demonstrate th","authors_text":"Aidong Adam Ding, Ruyi Ding, Tianhong Xu, Yunsi Fei","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:09:14Z","title":"Graph in the Vault: Protecting Edge GNN Inference with Trusted Execution Environment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.15012","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:28a002876696c4de3e6bce14c2a5d7cbc004caf87ed5bf357595a80ff4757d65","target":"record","created_at":"2026-07-05T10:17:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"61aef2e2265687dc11411128e31f0efa8fea76e258cb0f0d89894a4edc9e2bc1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:09:14Z","title_canon_sha256":"84d2bbbad31b09b15e2ffb7cb46f17ffbf4823fb1fc749d2d9cc6168e830cc99"},"schema_version":"1.0","source":{"id":"2502.15012","kind":"arxiv","version":1}},"canonical_sha256":"eeb7a9d99d801183ee0ff391915d9a2f0e10d8db10bba54401b828b622c07275","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eeb7a9d99d801183ee0ff391915d9a2f0e10d8db10bba54401b828b622c07275","first_computed_at":"2026-07-05T10:17:38.112291Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:17:38.112291Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EcNred1tW+q3wgolT5iV5rdhOXS7Oey9gOlRm5uyi5VEnKKnk50CIUbQgNsnNuceGDKEIUTreuR1LX1+VKX7DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:17:38.112788Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.15012","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:28a002876696c4de3e6bce14c2a5d7cbc004caf87ed5bf357595a80ff4757d65","sha256:a96fd4c63468ea51b6b3751baa6e76034314e3837f89217867a1c71924f80bc7"],"state_sha256":"187118cb2d525a345269859bb8d814d8381ffe7b2eb5fd942b1db12feb27dd0c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JNCslhYQyj99S1IOBztmDgXAiuDDygKr/d6k10Lw76QR01HQxhUF30A0fQqDLKa80bfau0HyiJS/vVYWH+weBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T01:10:33.297882Z","bundle_sha256":"e26d631513312387fad740c7f6c95281cb3132af18f9265da535bf229be45cc9"}}