{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:A7UNG3EETVBBCSEJWZWODZ32KL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"42e48223d212493b3a5d39cef90d53c22941c66dd03e444ddeca76d9869ea9d9","cross_cats_sorted":["cs.IT","cs.LG","math.IT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-27T20:47:28Z","title_canon_sha256":"659734ab0bc605b76d48ce8ae522b5d5fb5568eba4a8856f405385d5fa7be424"},"schema_version":"1.0","source":{"id":"2411.18746","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.18746","created_at":"2026-07-05T09:41:50Z"},{"alias_kind":"arxiv_version","alias_value":"2411.18746v1","created_at":"2026-07-05T09:41:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.18746","created_at":"2026-07-05T09:41:50Z"},{"alias_kind":"pith_short_12","alias_value":"A7UNG3EETVBB","created_at":"2026-07-05T09:41:50Z"},{"alias_kind":"pith_short_16","alias_value":"A7UNG3EETVBBCSEJ","created_at":"2026-07-05T09:41:50Z"},{"alias_kind":"pith_short_8","alias_value":"A7UNG3EE","created_at":"2026-07-05T09:41:50Z"}],"graph_snapshots":[{"event_id":"sha256:ad43de799bc660cb540b0e7af45b538f8ecb7b76e52765be8dac1a00b39bbade","target":"graph","created_at":"2026-07-05T09:41:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.18746/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Ensuring privacy during inference stage is crucial to prevent malicious third parties from reconstructing users' private inputs from outputs of public models. Despite a large body of literature on privacy preserving learning (which ensures privacy of training data), there is no existing systematic framework to ensure the privacy of users' data during inference. Motivated by this problem, we introduce the notion of Inference Privacy (IP), which can allow a user to interact with a model (for instance, a classifier, or an AI-assisted chat-bot) while providing a rigorous privacy guarantee for the ","authors_text":"Fengwei Tian, Ravi Tandon","cross_cats":["cs.IT","cs.LG","math.IT"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-27T20:47:28Z","title":"Inference Privacy: Properties and Mechanisms"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.18746","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9ce635ec7e15cdaa0c49aed9512fdb85eaba58d6de241456f5be9a95b118e275","target":"record","created_at":"2026-07-05T09:41:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"42e48223d212493b3a5d39cef90d53c22941c66dd03e444ddeca76d9869ea9d9","cross_cats_sorted":["cs.IT","cs.LG","math.IT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-27T20:47:28Z","title_canon_sha256":"659734ab0bc605b76d48ce8ae522b5d5fb5568eba4a8856f405385d5fa7be424"},"schema_version":"1.0","source":{"id":"2411.18746","kind":"arxiv","version":1}},"canonical_sha256":"07e8d36c849d42114889b66ce1e77a52c8d51d28f225ba8a06a23afd08c04d70","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"07e8d36c849d42114889b66ce1e77a52c8d51d28f225ba8a06a23afd08c04d70","first_computed_at":"2026-07-05T09:41:50.875694Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:41:50.875694Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0ACoKXTXV/m+RazJuOlSrv3mV4WwMSnG2TEBCMMCb/HcG1JDEFQJeezLK+S+5TJUViBVGaC7r0oLQtJ2uEQaDw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:41:50.876156Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.18746","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9ce635ec7e15cdaa0c49aed9512fdb85eaba58d6de241456f5be9a95b118e275","sha256:ad43de799bc660cb540b0e7af45b538f8ecb7b76e52765be8dac1a00b39bbade"],"state_sha256":"3727d8c0ad1547577a6754216d10c768852889b4b32e43febb830de693ad1bab"}