{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5UICUNHCKYT3F5NMMVUJMHLVWT","short_pith_number":"pith:5UICUNHC","canonical_record":{"source":{"id":"2507.23291","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T07:09:52Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"135282ebcadbbd868392b1d3580e761226c087946e24bfcf6bd545908308c2f6","abstract_canon_sha256":"8f7b2cbffe10564cbf3179a6ac3f0f9401bdc2a28c6bc2736ff03e97cee72e47"},"schema_version":"1.0"},"canonical_sha256":"ed102a34e25627b2f5ac6568961d75b4d60825b5451652fbd9c33bed59c37a83","source":{"kind":"arxiv","id":"2507.23291","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.23291","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"arxiv_version","alias_value":"2507.23291v2","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.23291","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"pith_short_12","alias_value":"5UICUNHCKYT3","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"pith_short_16","alias_value":"5UICUNHCKYT3F5NM","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"pith_short_8","alias_value":"5UICUNHC","created_at":"2026-07-05T11:47:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5UICUNHCKYT3F5NMMVUJMHLVWT","target":"record","payload":{"canonical_record":{"source":{"id":"2507.23291","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T07:09:52Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"135282ebcadbbd868392b1d3580e761226c087946e24bfcf6bd545908308c2f6","abstract_canon_sha256":"8f7b2cbffe10564cbf3179a6ac3f0f9401bdc2a28c6bc2736ff03e97cee72e47"},"schema_version":"1.0"},"canonical_sha256":"ed102a34e25627b2f5ac6568961d75b4d60825b5451652fbd9c33bed59c37a83","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:47:27.714912Z","signature_b64":"RxZQ6zHOZk9/bQy/PzPPcs7jkgAMgsVC8Hn96ewPXfWBGTvSNF7xAokLagRdj6xDH26eW/mEvSY8OVAWPllXAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed102a34e25627b2f5ac6568961d75b4d60825b5451652fbd9c33bed59c37a83","last_reissued_at":"2026-07-05T11:47:27.714423Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:47:27.714423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.23291","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:47:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kv8gjm1Kx2s4zyfGD1OwMafGEmEVJP56AEF+M/lxl8iRTUgLyXiKcCpkUSbFELYH+TTgyQ3jls7rfBp6eOMtBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T07:23:28.635382Z"},"content_sha256":"6087388d1b46b9f94782ee4abebfb660d42019a969f39217a61069181e7eee5c","schema_version":"1.0","event_id":"sha256:6087388d1b46b9f94782ee4abebfb660d42019a969f39217a61069181e7eee5c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5UICUNHCKYT3F5NMMVUJMHLVWT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evaluating the Dynamics of Membership Privacy in Deep Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Lei Yu, Nathalie Baracaldo, Swanand Ravindra Kadhe, Yuetian Chen, Zhiqi Wang","submitted_at":"2025-07-31T07:09:52Z","abstract_excerpt":"Membership inference attacks (MIAs) pose a critical threat to the privacy of training data in deep learning. Despite significant progress in attack methodologies, our understanding of when and how models encode membership information during training remains limited. This paper presents a dynamic analytical framework for dissecting and quantifying privacy leakage dynamics at the individual sample level. By tracking per-sample vulnerabilities on an FPR-TPR plane throughout training, our framework systematically measures how factors such as dataset complexity, model architecture, and optimizer ch"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.23291","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.23291/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:47:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u/r2xTzEx//oPSWKzlqpL4V2i5PUmZzFKbrhh3JIfpvdkJCwh+KxIjPl1gXvSDStFnb4tUSGSBQTJZhdY8ixAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T07:23:28.636308Z"},"content_sha256":"4cdb6bd5c9538e4bc10cfcfd1882c934d630bee3295accf20fb3d22e67bb452b","schema_version":"1.0","event_id":"sha256:4cdb6bd5c9538e4bc10cfcfd1882c934d630bee3295accf20fb3d22e67bb452b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5UICUNHCKYT3F5NMMVUJMHLVWT/bundle.json","state_url":"https://pith.science/pith/5UICUNHCKYT3F5NMMVUJMHLVWT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5UICUNHCKYT3F5NMMVUJMHLVWT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T07:23:28Z","links":{"resolver":"https://pith.science/pith/5UICUNHCKYT3F5NMMVUJMHLVWT","bundle":"https://pith.science/pith/5UICUNHCKYT3F5NMMVUJMHLVWT/bundle.json","state":"https://pith.science/pith/5UICUNHCKYT3F5NMMVUJMHLVWT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5UICUNHCKYT3F5NMMVUJMHLVWT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5UICUNHCKYT3F5NMMVUJMHLVWT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f7b2cbffe10564cbf3179a6ac3f0f9401bdc2a28c6bc2736ff03e97cee72e47","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T07:09:52Z","title_canon_sha256":"135282ebcadbbd868392b1d3580e761226c087946e24bfcf6bd545908308c2f6"},"schema_version":"1.0","source":{"id":"2507.23291","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.23291","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"arxiv_version","alias_value":"2507.23291v2","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.23291","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"pith_short_12","alias_value":"5UICUNHCKYT3","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"pith_short_16","alias_value":"5UICUNHCKYT3F5NM","created_at":"2026-07-05T11:47:27Z"},{"alias_kind":"pith_short_8","alias_value":"5UICUNHC","created_at":"2026-07-05T11:47:27Z"}],"graph_snapshots":[{"event_id":"sha256:4cdb6bd5c9538e4bc10cfcfd1882c934d630bee3295accf20fb3d22e67bb452b","target":"graph","created_at":"2026-07-05T11:47:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.23291/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks (MIAs) pose a critical threat to the privacy of training data in deep learning. Despite significant progress in attack methodologies, our understanding of when and how models encode membership information during training remains limited. This paper presents a dynamic analytical framework for dissecting and quantifying privacy leakage dynamics at the individual sample level. By tracking per-sample vulnerabilities on an FPR-TPR plane throughout training, our framework systematically measures how factors such as dataset complexity, model architecture, and optimizer ch","authors_text":"Lei Yu, Nathalie Baracaldo, Swanand Ravindra Kadhe, Yuetian Chen, Zhiqi Wang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T07:09:52Z","title":"Evaluating the Dynamics of Membership Privacy in Deep Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.23291","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6087388d1b46b9f94782ee4abebfb660d42019a969f39217a61069181e7eee5c","target":"record","created_at":"2026-07-05T11:47:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f7b2cbffe10564cbf3179a6ac3f0f9401bdc2a28c6bc2736ff03e97cee72e47","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T07:09:52Z","title_canon_sha256":"135282ebcadbbd868392b1d3580e761226c087946e24bfcf6bd545908308c2f6"},"schema_version":"1.0","source":{"id":"2507.23291","kind":"arxiv","version":2}},"canonical_sha256":"ed102a34e25627b2f5ac6568961d75b4d60825b5451652fbd9c33bed59c37a83","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed102a34e25627b2f5ac6568961d75b4d60825b5451652fbd9c33bed59c37a83","first_computed_at":"2026-07-05T11:47:27.714423Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:47:27.714423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RxZQ6zHOZk9/bQy/PzPPcs7jkgAMgsVC8Hn96ewPXfWBGTvSNF7xAokLagRdj6xDH26eW/mEvSY8OVAWPllXAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:47:27.714912Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.23291","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6087388d1b46b9f94782ee4abebfb660d42019a969f39217a61069181e7eee5c","sha256:4cdb6bd5c9538e4bc10cfcfd1882c934d630bee3295accf20fb3d22e67bb452b"],"state_sha256":"394980decd2ac7cdfc4909b88125754ac19e9e224a98cca5be070ad2956e27f6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rK3aHPM526AtimBaBj32q/gvUHwpBzFBCy0IwSEHo9gD/mLpjY5acgiYP4cuu7Q/789zLhogFsYW5BxXii+wDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T07:23:28.653559Z","bundle_sha256":"867d9e36e1d2a11de28727dc73044e6aa2e302159af4b4de23ba00961a918a90"}}