{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:5KYYKBLG4RWJ6UWIMCGE4SJ5DR","short_pith_number":"pith:5KYYKBLG","canonical_record":{"source":{"id":"2607.15970","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T14:04:59Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0ee6158e2d71d3536eb6f3cfdb8347127d6314ca959f2a8764fbee4720bcaae5","abstract_canon_sha256":"91da6d452b45c2cdd10a1cffba284d010d4f2e194635b6eb418e9f51bffac195"},"schema_version":"1.0"},"canonical_sha256":"eab1850566e46c9f52c8608c4e493d1c4c3da4459aea18e36625aec3e2909dc1","source":{"kind":"arxiv","id":"2607.15970","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15970","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15970v1","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15970","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"pith_short_12","alias_value":"5KYYKBLG4RWJ","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"pith_short_16","alias_value":"5KYYKBLG4RWJ6UWI","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"pith_short_8","alias_value":"5KYYKBLG","created_at":"2026-07-20T02:19:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:5KYYKBLG4RWJ6UWIMCGE4SJ5DR","target":"record","payload":{"canonical_record":{"source":{"id":"2607.15970","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T14:04:59Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0ee6158e2d71d3536eb6f3cfdb8347127d6314ca959f2a8764fbee4720bcaae5","abstract_canon_sha256":"91da6d452b45c2cdd10a1cffba284d010d4f2e194635b6eb418e9f51bffac195"},"schema_version":"1.0"},"canonical_sha256":"eab1850566e46c9f52c8608c4e493d1c4c3da4459aea18e36625aec3e2909dc1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-20T02:19:23.332249Z","signature_b64":"AIBpQnUH4s1q0BVSnKzh2VFHnQItH7UWfx/cNM5mWHg60DcII4IP5n+tkF64coSfVBTppOtolyfjoFLDgxJqCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eab1850566e46c9f52c8608c4e493d1c4c3da4459aea18e36625aec3e2909dc1","last_reissued_at":"2026-07-20T02:19:23.331415Z","signature_status":"signed_v1","first_computed_at":"2026-07-20T02:19:23.331415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.15970","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T02:19:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"miRVbRu4+dVXrjYc9ZwyH1TUmYZfxYwfUBkDfMCaAoKnCg0DGiZWkRgfn28QsRfBGfYZwMXKwwwbCHDiz+syBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-02T20:11:13.158230Z"},"content_sha256":"1bdd3d806eb021114e9b34e4530f02fc69b363e1ea03cdf91d875434a1ac6301","schema_version":"1.0","event_id":"sha256:1bdd3d806eb021114e9b34e4530f02fc69b363e1ea03cdf91d875434a1ac6301"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:5KYYKBLG4RWJ6UWIMCGE4SJ5DR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Code-Poisoning Property Inference Attacks","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Gang Zhang, Jinyan Liu, Xuesong Li, Xukun Luan, Yuanguo Bi, Yuhui Gong, Zixuan Huang","submitted_at":"2026-07-17T14:04:59Z","abstract_excerpt":"The flourishing code hosting platforms and coding agents enable even beginners with private data to build tailored Machine Learning (ML) models using available code quickly. The training data for ML models, often regarded as private property (e.g., clinical records, transaction information), is at significant risk of information leakage. Property Inference Attacks (PIAs), as a significant type of privacy attack, aim to expose global property information of the training set. In this paper, we present Code-Poisoning Property Inference Attack (CPPIA), the first code-level PIA, which overcomes fou"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15970","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.15970/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T02:19:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"08Tds6pjEdCBgY28msVhYgdSmYYa8sofBiJH6Yemc2xx8RTarAsbV2WIybFIuBk0uEwZAJuEOGxiY0WreiJmBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-02T20:11:13.159170Z"},"content_sha256":"8f68024cbb95686298fbc2cb3d24ce748d3360c98a54761a95c4b96a48f84c36","schema_version":"1.0","event_id":"sha256:8f68024cbb95686298fbc2cb3d24ce748d3360c98a54761a95c4b96a48f84c36"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5KYYKBLG4RWJ6UWIMCGE4SJ5DR/bundle.json","state_url":"https://pith.science/pith/5KYYKBLG4RWJ6UWIMCGE4SJ5DR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5KYYKBLG4RWJ6UWIMCGE4SJ5DR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-02T20:11:13Z","links":{"resolver":"https://pith.science/pith/5KYYKBLG4RWJ6UWIMCGE4SJ5DR","bundle":"https://pith.science/pith/5KYYKBLG4RWJ6UWIMCGE4SJ5DR/bundle.json","state":"https://pith.science/pith/5KYYKBLG4RWJ6UWIMCGE4SJ5DR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5KYYKBLG4RWJ6UWIMCGE4SJ5DR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:5KYYKBLG4RWJ6UWIMCGE4SJ5DR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"91da6d452b45c2cdd10a1cffba284d010d4f2e194635b6eb418e9f51bffac195","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T14:04:59Z","title_canon_sha256":"0ee6158e2d71d3536eb6f3cfdb8347127d6314ca959f2a8764fbee4720bcaae5"},"schema_version":"1.0","source":{"id":"2607.15970","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15970","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15970v1","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15970","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"pith_short_12","alias_value":"5KYYKBLG4RWJ","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"pith_short_16","alias_value":"5KYYKBLG4RWJ6UWI","created_at":"2026-07-20T02:19:23Z"},{"alias_kind":"pith_short_8","alias_value":"5KYYKBLG","created_at":"2026-07-20T02:19:23Z"}],"graph_snapshots":[{"event_id":"sha256:8f68024cbb95686298fbc2cb3d24ce748d3360c98a54761a95c4b96a48f84c36","target":"graph","created_at":"2026-07-20T02:19:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.15970/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The flourishing code hosting platforms and coding agents enable even beginners with private data to build tailored Machine Learning (ML) models using available code quickly. The training data for ML models, often regarded as private property (e.g., clinical records, transaction information), is at significant risk of information leakage. Property Inference Attacks (PIAs), as a significant type of privacy attack, aim to expose global property information of the training set. In this paper, we present Code-Poisoning Property Inference Attack (CPPIA), the first code-level PIA, which overcomes fou","authors_text":"Gang Zhang, Jinyan Liu, Xuesong Li, Xukun Luan, Yuanguo Bi, Yuhui Gong, Zixuan Huang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15970","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1bdd3d806eb021114e9b34e4530f02fc69b363e1ea03cdf91d875434a1ac6301","target":"record","created_at":"2026-07-20T02:19:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"91da6d452b45c2cdd10a1cffba284d010d4f2e194635b6eb418e9f51bffac195","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T14:04:59Z","title_canon_sha256":"0ee6158e2d71d3536eb6f3cfdb8347127d6314ca959f2a8764fbee4720bcaae5"},"schema_version":"1.0","source":{"id":"2607.15970","kind":"arxiv","version":1}},"canonical_sha256":"eab1850566e46c9f52c8608c4e493d1c4c3da4459aea18e36625aec3e2909dc1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eab1850566e46c9f52c8608c4e493d1c4c3da4459aea18e36625aec3e2909dc1","first_computed_at":"2026-07-20T02:19:23.331415Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-20T02:19:23.331415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AIBpQnUH4s1q0BVSnKzh2VFHnQItH7UWfx/cNM5mWHg60DcII4IP5n+tkF64coSfVBTppOtolyfjoFLDgxJqCA==","signature_status":"signed_v1","signed_at":"2026-07-20T02:19:23.332249Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.15970","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1bdd3d806eb021114e9b34e4530f02fc69b363e1ea03cdf91d875434a1ac6301","sha256:8f68024cbb95686298fbc2cb3d24ce748d3360c98a54761a95c4b96a48f84c36"],"state_sha256":"3907748c23268c58455e25f86aaded8f7925f32bcc4ceb2779c7f4ea647f42cc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lBgw4v4DlUrRhvtq7pxlEA1IcU1rwPcGmqfOteFnLaSsPMPbKsvavDuxj+qud9eGHa1p8v00hgokDOxqNSsTCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-02T20:11:13.163858Z","bundle_sha256":"98ef08bae968e8cffd0389547fc393cd2e30a46c05abdce0ef7d20cd4128a705"}}