{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:73LKP5KYPM4NAXJUKQY4DWORJI","short_pith_number":"pith:73LKP5KY","canonical_record":{"source":{"id":"2502.02913","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-05T06:20:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"3849f568d819dd8d396d464628e957849386d22ffcbe9984d4dd0cd9b2ca21af","abstract_canon_sha256":"8569ca3c3ea038c9f9024c1f3a7d7b5e5d0a685df266c876b1e8516b71e8ae30"},"schema_version":"1.0"},"canonical_sha256":"fed6a7f5587b38d05d345431c1d9d14a207338255e115a3567451be48692c69e","source":{"kind":"arxiv","id":"2502.02913","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.02913","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"arxiv_version","alias_value":"2502.02913v4","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.02913","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"pith_short_12","alias_value":"73LKP5KYPM4N","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"pith_short_16","alias_value":"73LKP5KYPM4NAXJU","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"pith_short_8","alias_value":"73LKP5KY","created_at":"2026-07-05T10:13:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:73LKP5KYPM4NAXJUKQY4DWORJI","target":"record","payload":{"canonical_record":{"source":{"id":"2502.02913","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-05T06:20:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"3849f568d819dd8d396d464628e957849386d22ffcbe9984d4dd0cd9b2ca21af","abstract_canon_sha256":"8569ca3c3ea038c9f9024c1f3a7d7b5e5d0a685df266c876b1e8516b71e8ae30"},"schema_version":"1.0"},"canonical_sha256":"fed6a7f5587b38d05d345431c1d9d14a207338255e115a3567451be48692c69e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:13:08.213485Z","signature_b64":"j38VGBwIeeKKz+WYkBsu7DNPlL2hO9kCTf2TPWUgisoScBw36erQb/Q3QORG9YggiPSIEDU3QelfWkrddKJDAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fed6a7f5587b38d05d345431c1d9d14a207338255e115a3567451be48692c69e","last_reissued_at":"2026-07-05T10:13:08.212911Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:13:08.212911Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.02913","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:13:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2E91exovDW0/wFFpV9JsVyDcdQjeF0zViwRpeLV9CHvh3zuXNEFe4OMCKpK3GPPM5dz4hhPucTYyjCniy+uCAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T23:53:20.183131Z"},"content_sha256":"c239d1385d31c171109ec8f6a1802a841281bea77b4d3bf91eeffc4573f822a3","schema_version":"1.0","event_id":"sha256:c239d1385d31c171109ec8f6a1802a841281bea77b4d3bf91eeffc4573f822a3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:73LKP5KYPM4NAXJUKQY4DWORJI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Chen Hou, Hong Chen, Jiayang Meng, Qingyu Huang, Tao Huang, Xin Shi","submitted_at":"2025-02-05T06:20:20Z","abstract_excerpt":"The widespread deployment of deep learning models in privacy-sensitive domains has amplified concerns regarding privacy risks, particularly those stemming from gradient leakage during training. Current privacy assessments primarily rely on post-training attack simulations. However, these methods are inherently reactive, unable to encompass all potential attack scenarios, and often based on idealized adversarial assumptions. These limitations underscore the need for proactive approaches to privacy risk assessment during the training process. To address this gap, we propose the concept of privac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.02913","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.02913/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:13:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XUgJXO9SAeujbVj9vql6eTv6ibwuyItoo+SsfAu9n0BcKUHBAe09SEiuT6J7lh6TERiJrW5NMRQND9oeLMDiAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T23:53:20.183733Z"},"content_sha256":"2320e28385c0819f1b2fa049d707fb4d64a212701f506af4a0714312238b32e5","schema_version":"1.0","event_id":"sha256:2320e28385c0819f1b2fa049d707fb4d64a212701f506af4a0714312238b32e5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/73LKP5KYPM4NAXJUKQY4DWORJI/bundle.json","state_url":"https://pith.science/pith/73LKP5KYPM4NAXJUKQY4DWORJI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/73LKP5KYPM4NAXJUKQY4DWORJI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T23:53:20Z","links":{"resolver":"https://pith.science/pith/73LKP5KYPM4NAXJUKQY4DWORJI","bundle":"https://pith.science/pith/73LKP5KYPM4NAXJUKQY4DWORJI/bundle.json","state":"https://pith.science/pith/73LKP5KYPM4NAXJUKQY4DWORJI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/73LKP5KYPM4NAXJUKQY4DWORJI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:73LKP5KYPM4NAXJUKQY4DWORJI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8569ca3c3ea038c9f9024c1f3a7d7b5e5d0a685df266c876b1e8516b71e8ae30","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-05T06:20:20Z","title_canon_sha256":"3849f568d819dd8d396d464628e957849386d22ffcbe9984d4dd0cd9b2ca21af"},"schema_version":"1.0","source":{"id":"2502.02913","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.02913","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"arxiv_version","alias_value":"2502.02913v4","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.02913","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"pith_short_12","alias_value":"73LKP5KYPM4N","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"pith_short_16","alias_value":"73LKP5KYPM4NAXJU","created_at":"2026-07-05T10:13:08Z"},{"alias_kind":"pith_short_8","alias_value":"73LKP5KY","created_at":"2026-07-05T10:13:08Z"}],"graph_snapshots":[{"event_id":"sha256:2320e28385c0819f1b2fa049d707fb4d64a212701f506af4a0714312238b32e5","target":"graph","created_at":"2026-07-05T10:13:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.02913/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread deployment of deep learning models in privacy-sensitive domains has amplified concerns regarding privacy risks, particularly those stemming from gradient leakage during training. Current privacy assessments primarily rely on post-training attack simulations. However, these methods are inherently reactive, unable to encompass all potential attack scenarios, and often based on idealized adversarial assumptions. These limitations underscore the need for proactive approaches to privacy risk assessment during the training process. To address this gap, we propose the concept of privac","authors_text":"Chen Hou, Hong Chen, Jiayang Meng, Qingyu Huang, Tao Huang, Xin Shi","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-05T06:20:20Z","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.02913","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c239d1385d31c171109ec8f6a1802a841281bea77b4d3bf91eeffc4573f822a3","target":"record","created_at":"2026-07-05T10:13:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8569ca3c3ea038c9f9024c1f3a7d7b5e5d0a685df266c876b1e8516b71e8ae30","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-05T06:20:20Z","title_canon_sha256":"3849f568d819dd8d396d464628e957849386d22ffcbe9984d4dd0cd9b2ca21af"},"schema_version":"1.0","source":{"id":"2502.02913","kind":"arxiv","version":4}},"canonical_sha256":"fed6a7f5587b38d05d345431c1d9d14a207338255e115a3567451be48692c69e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fed6a7f5587b38d05d345431c1d9d14a207338255e115a3567451be48692c69e","first_computed_at":"2026-07-05T10:13:08.212911Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:13:08.212911Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"j38VGBwIeeKKz+WYkBsu7DNPlL2hO9kCTf2TPWUgisoScBw36erQb/Q3QORG9YggiPSIEDU3QelfWkrddKJDAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:13:08.213485Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.02913","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c239d1385d31c171109ec8f6a1802a841281bea77b4d3bf91eeffc4573f822a3","sha256:2320e28385c0819f1b2fa049d707fb4d64a212701f506af4a0714312238b32e5"],"state_sha256":"8e1c7582ba466296faaca3a5620d28f594de55b28e2c30182ea28bd54590fd32"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Aj/Hol0t6Jb9R4OXgdfzCI87aKtHfdETAxbZbDVl6i1NHWkxKIQ7bzDwQs7cwlzHgE5oV4diqcvUDv5r4Z5xBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T23:53:20.189001Z","bundle_sha256":"f3c57fbf8898afc6945d9f3d6e5504aecc98c6b7a9794a9086bd963ad6ce6afe"}}