{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:ACXHU7QG7IXN74FEXCD7JSAC4V","short_pith_number":"pith:ACXHU7QG","canonical_record":{"source":{"id":"1907.00164","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-29T07:59:34Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"01105e7ff6e6565389efc1a689379a63ce59bd1fae321fc68d86866861d33eca","abstract_canon_sha256":"958a813e2d7354a5ace4ef47a235822e1f559af192fdaf85f305affd60f2d82c"},"schema_version":"1.0"},"canonical_sha256":"00ae7a7e06fa2edff0a4b887f4c802e57ee3bf379b1681db86470a52d37b0fb8","source":{"kind":"arxiv","id":"1907.00164","version":6},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.00164","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"arxiv_version","alias_value":"1907.00164v6","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.00164","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"pith_short_12","alias_value":"ACXHU7QG7IXN","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"pith_short_16","alias_value":"ACXHU7QG7IXN74FE","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"pith_short_8","alias_value":"ACXHU7QG","created_at":"2026-07-05T02:12:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:ACXHU7QG7IXN74FEXCD7JSAC4V","target":"record","payload":{"canonical_record":{"source":{"id":"1907.00164","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-29T07:59:34Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"01105e7ff6e6565389efc1a689379a63ce59bd1fae321fc68d86866861d33eca","abstract_canon_sha256":"958a813e2d7354a5ace4ef47a235822e1f559af192fdaf85f305affd60f2d82c"},"schema_version":"1.0"},"canonical_sha256":"00ae7a7e06fa2edff0a4b887f4c802e57ee3bf379b1681db86470a52d37b0fb8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:12:52.054198Z","signature_b64":"bJbNRcJmQDponyz6Epd3JnlCAu+udGM0O0XqaEGq59DNEbh/iHP6MMCT4AS4BnYePxySTa5SrMnVf9MLoQt9Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"00ae7a7e06fa2edff0a4b887f4c802e57ee3bf379b1681db86470a52d37b0fb8","last_reissued_at":"2026-07-05T02:12:52.053725Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:12:52.053725Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1907.00164","source_version":6,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:12:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z9RFSSvlev2ZQVK2vWr/apkI4RpHaHvwGMjA4SAX6tbRmyAR//QKhoxSJHiGZq8wVYKoAEZEIzWmNJeBVlSKCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:41:42.688817Z"},"content_sha256":"d28cd3098c5c211e1448e36519af3982a8f4a7f7ae95a0e41b7fefcaa5a2d967","schema_version":"1.0","event_id":"sha256:d28cd3098c5c211e1448e36519af3982a8f4a7f7ae95a0e41b7fefcaa5a2d967"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:ACXHU7QG7IXN74FEXCD7JSAC4V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Privacy Risks of Model Explanations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Martin Strobel, Reza Shokri, Yair Zick","submitted_at":"2019-06-29T07:59:34Z","abstract_excerpt":"Privacy and transparency are two key foundations of trustworthy machine learning. Model explanations offer insights into a model's decisions on input data, whereas privacy is primarily concerned with protecting information about the training data. We analyze connections between model explanations and the leakage of sensitive information about the model's training set. We investigate the privacy risks of feature-based model explanations using membership inference attacks: quantifying how much model predictions plus their explanations leak information about the presence of a datapoint in the tra"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.00164","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1907.00164/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:12:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LTMDTAoXipumVyYoQjUAT/pKT0PhyKYjWPJYsgZ2m9vRm2H9Nah8Qd4Nxk6nis8RIMI0M8W5wRc8ZavAzzZ1Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:41:42.689451Z"},"content_sha256":"6fafeeb0a0723bee4ece1a91c59d189ba5a17df3be23515b909bc17efbbf5a03","schema_version":"1.0","event_id":"sha256:6fafeeb0a0723bee4ece1a91c59d189ba5a17df3be23515b909bc17efbbf5a03"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ACXHU7QG7IXN74FEXCD7JSAC4V/bundle.json","state_url":"https://pith.science/pith/ACXHU7QG7IXN74FEXCD7JSAC4V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ACXHU7QG7IXN74FEXCD7JSAC4V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:41:42Z","links":{"resolver":"https://pith.science/pith/ACXHU7QG7IXN74FEXCD7JSAC4V","bundle":"https://pith.science/pith/ACXHU7QG7IXN74FEXCD7JSAC4V/bundle.json","state":"https://pith.science/pith/ACXHU7QG7IXN74FEXCD7JSAC4V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ACXHU7QG7IXN74FEXCD7JSAC4V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:ACXHU7QG7IXN74FEXCD7JSAC4V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"958a813e2d7354a5ace4ef47a235822e1f559af192fdaf85f305affd60f2d82c","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-29T07:59:34Z","title_canon_sha256":"01105e7ff6e6565389efc1a689379a63ce59bd1fae321fc68d86866861d33eca"},"schema_version":"1.0","source":{"id":"1907.00164","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.00164","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"arxiv_version","alias_value":"1907.00164v6","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.00164","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"pith_short_12","alias_value":"ACXHU7QG7IXN","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"pith_short_16","alias_value":"ACXHU7QG7IXN74FE","created_at":"2026-07-05T02:12:52Z"},{"alias_kind":"pith_short_8","alias_value":"ACXHU7QG","created_at":"2026-07-05T02:12:52Z"}],"graph_snapshots":[{"event_id":"sha256:6fafeeb0a0723bee4ece1a91c59d189ba5a17df3be23515b909bc17efbbf5a03","target":"graph","created_at":"2026-07-05T02:12:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1907.00164/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Privacy and transparency are two key foundations of trustworthy machine learning. Model explanations offer insights into a model's decisions on input data, whereas privacy is primarily concerned with protecting information about the training data. We analyze connections between model explanations and the leakage of sensitive information about the model's training set. We investigate the privacy risks of feature-based model explanations using membership inference attacks: quantifying how much model predictions plus their explanations leak information about the presence of a datapoint in the tra","authors_text":"Martin Strobel, Reza Shokri, Yair Zick","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-29T07:59:34Z","title":"On the Privacy Risks of Model Explanations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.00164","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d28cd3098c5c211e1448e36519af3982a8f4a7f7ae95a0e41b7fefcaa5a2d967","target":"record","created_at":"2026-07-05T02:12:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"958a813e2d7354a5ace4ef47a235822e1f559af192fdaf85f305affd60f2d82c","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-29T07:59:34Z","title_canon_sha256":"01105e7ff6e6565389efc1a689379a63ce59bd1fae321fc68d86866861d33eca"},"schema_version":"1.0","source":{"id":"1907.00164","kind":"arxiv","version":6}},"canonical_sha256":"00ae7a7e06fa2edff0a4b887f4c802e57ee3bf379b1681db86470a52d37b0fb8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"00ae7a7e06fa2edff0a4b887f4c802e57ee3bf379b1681db86470a52d37b0fb8","first_computed_at":"2026-07-05T02:12:52.053725Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:12:52.053725Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bJbNRcJmQDponyz6Epd3JnlCAu+udGM0O0XqaEGq59DNEbh/iHP6MMCT4AS4BnYePxySTa5SrMnVf9MLoQt9Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:12:52.054198Z","signed_message":"canonical_sha256_bytes"},"source_id":"1907.00164","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d28cd3098c5c211e1448e36519af3982a8f4a7f7ae95a0e41b7fefcaa5a2d967","sha256:6fafeeb0a0723bee4ece1a91c59d189ba5a17df3be23515b909bc17efbbf5a03"],"state_sha256":"152c823b0438689abd536f892928b08d9603a68b62f6a6b7daacf9a89777e85c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"skzdS8MlpjqWUV6GhRaf0348Rdvg8WjWOZ71xxog17jY5kLtlZzPz2fwhk0dRlGdqeRPpwH5JhwGyfZVJ0jCAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:41:42.693984Z","bundle_sha256":"db9b3beafb763f449f302330b4bcc107e454d974641a16d0aaa6e9091b34a6ce"}}