{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:AHPON5JLLOHUTBPVHCC3GTRJED","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"84b64e06b51cd3debd19e603c36b59267b49df76e48a48ae91b019027da6688c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T18:59:27Z","title_canon_sha256":"a6f759280c55bff489cc0561eb31b332842e43f718c646f79b0afa706e3b24f1"},"schema_version":"1.0","source":{"id":"2402.09403","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.09403","created_at":"2026-07-05T07:45:13Z"},{"alias_kind":"arxiv_version","alias_value":"2402.09403v1","created_at":"2026-07-05T07:45:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.09403","created_at":"2026-07-05T07:45:13Z"},{"alias_kind":"pith_short_12","alias_value":"AHPON5JLLOHU","created_at":"2026-07-05T07:45:13Z"},{"alias_kind":"pith_short_16","alias_value":"AHPON5JLLOHUTBPV","created_at":"2026-07-05T07:45:13Z"},{"alias_kind":"pith_short_8","alias_value":"AHPON5JL","created_at":"2026-07-05T07:45:13Z"}],"graph_snapshots":[{"event_id":"sha256:c34940d2dd2b25a3f7164298428d9822b04af4020a9e4ae230eae645ecaa1036","target":"graph","created_at":"2026-07-05T07:45:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.09403/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Differential privacy (DP) offers a theoretical upper bound on the potential privacy leakage of analgorithm, while empirical auditing establishes a practical lower bound. Auditing techniques exist forDP training algorithms. However machine learning can also be made private at inference. We propose thefirst framework for auditing private prediction where we instantiate adversaries with varying poisoningand query capabilities. This enables us to study the privacy leakage of four private prediction algorithms:PATE [Papernot et al., 2016], CaPC [Choquette-Choo et al., 2020], PromptPATE [Duan et al.","authors_text":"Christopher Choquette-Choo, Karan Chadha, Matthew Jagielski, Milad Nasr, Nicolas Papernot","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T18:59:27Z","title":"Auditing Private Prediction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.09403","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6fc47425939496b0316a2c71c5aeae6e465ab7de04be6f60cfb3d38119f61b02","target":"record","created_at":"2026-07-05T07:45:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"84b64e06b51cd3debd19e603c36b59267b49df76e48a48ae91b019027da6688c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T18:59:27Z","title_canon_sha256":"a6f759280c55bff489cc0561eb31b332842e43f718c646f79b0afa706e3b24f1"},"schema_version":"1.0","source":{"id":"2402.09403","kind":"arxiv","version":1}},"canonical_sha256":"01dee6f52b5b8f4985f53885b34e2920f3899774dbe55bf7da8ea627200b5174","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"01dee6f52b5b8f4985f53885b34e2920f3899774dbe55bf7da8ea627200b5174","first_computed_at":"2026-07-05T07:45:13.246415Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:45:13.246415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5ufQQf5Z7Zeu9a5YG30RJUzt/krWQzJCcNccZf92tIt5BOz/KSqx5FbKXWSFvNVA2ZYdRTNzmLxDEtVabb+GAw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:45:13.246891Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.09403","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6fc47425939496b0316a2c71c5aeae6e465ab7de04be6f60cfb3d38119f61b02","sha256:c34940d2dd2b25a3f7164298428d9822b04af4020a9e4ae230eae645ecaa1036"],"state_sha256":"3199cee26cb7eee7ba756f1dfed8bea72b37688057da05943d6d468c0c4d269d"}