{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AILU76OXA6CDC3HPJNFLMPSTOI","short_pith_number":"pith:AILU76OX","canonical_record":{"source":{"id":"2505.18786","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-24T16:55:57Z","cross_cats_sorted":[],"title_canon_sha256":"407943cda4768a214d6159274554312595b37e9ce0c430203ca61e59d08d3ab3","abstract_canon_sha256":"3216bd0acb98e404a2ce232f1f0a414233a6a8c340340aaa3f021a4ddc65e713"},"schema_version":"1.0"},"canonical_sha256":"02174ff9d70784316cef4b4ab63e537204fba82a37dda7dab9130f19e6bcf4d4","source":{"kind":"arxiv","id":"2505.18786","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.18786","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"arxiv_version","alias_value":"2505.18786v1","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.18786","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"pith_short_12","alias_value":"AILU76OXA6CD","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"pith_short_16","alias_value":"AILU76OXA6CDC3HP","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"pith_short_8","alias_value":"AILU76OX","created_at":"2026-07-05T11:09:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AILU76OXA6CDC3HPJNFLMPSTOI","target":"record","payload":{"canonical_record":{"source":{"id":"2505.18786","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-24T16:55:57Z","cross_cats_sorted":[],"title_canon_sha256":"407943cda4768a214d6159274554312595b37e9ce0c430203ca61e59d08d3ab3","abstract_canon_sha256":"3216bd0acb98e404a2ce232f1f0a414233a6a8c340340aaa3f021a4ddc65e713"},"schema_version":"1.0"},"canonical_sha256":"02174ff9d70784316cef4b4ab63e537204fba82a37dda7dab9130f19e6bcf4d4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:19.586583Z","signature_b64":"ew5mZkdIkGgklx7DQoQ3RUX9PvqYDfzGhFS86U45RntBNN2L8L+MSfJC9zTmuuuz6S+bx2yM8tOkLRh0ScXUDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"02174ff9d70784316cef4b4ab63e537204fba82a37dda7dab9130f19e6bcf4d4","last_reissued_at":"2026-07-05T11:09:19.586167Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:19.586167Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.18786","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6xZOL3f7MDenFU2GKDT9eEdM+muBM4j7DRho8T+R4RizFQKtyFgtmyUoQ6xa+RkDjiW6wppmQ1rmzPBkqWSvAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T10:51:14.835538Z"},"content_sha256":"c1bcf79c43f5236bd7df07cb96ccc9ef0861b38892a5140e38631a5317a938c3","schema_version":"1.0","event_id":"sha256:c1bcf79c43f5236bd7df07cb96ccc9ef0861b38892a5140e38631a5317a938c3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AILU76OXA6CDC3HPJNFLMPSTOI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Leveraging Per-Instance Privacy for Machine Unlearning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Anvith Thudi, Ashmita Bhattacharyya, Berivan Isik, Daniel M. Roy, Eleni Triantafillou, Gintare Karolina Dziugaite, Nazanin Mohammadi Sepahvand, Nicolas Papernot","submitted_at":"2025-05-24T16:55:57Z","abstract_excerpt":"We present a principled, per-instance approach to quantifying the difficulty of unlearning via fine-tuning. We begin by sharpening an analysis of noisy gradient descent for unlearning (Chien et al., 2024), obtaining a better utility-unlearning tradeoff by replacing worst-case privacy loss bounds with per-instance privacy losses (Thudi et al., 2024), each of which bounds the (Renyi) divergence to retraining without an individual data point. To demonstrate the practical applicability of our theory, we present empirical results showing that our theoretical predictions are born out both for Stocha"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.18786","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.18786/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hMOcKgQPVrJE75/K/IRATgPkswytBxjSYBBdZjx8BgtP6N84IatchHMN9pAtpswxWS5h19rZan3KDM0e4PAmCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T10:51:14.836063Z"},"content_sha256":"343ec4b51fefe1b3a0393ce0ce6c188d095b2da80790646f8d91fe2cfe6ff4d9","schema_version":"1.0","event_id":"sha256:343ec4b51fefe1b3a0393ce0ce6c188d095b2da80790646f8d91fe2cfe6ff4d9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AILU76OXA6CDC3HPJNFLMPSTOI/bundle.json","state_url":"https://pith.science/pith/AILU76OXA6CDC3HPJNFLMPSTOI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AILU76OXA6CDC3HPJNFLMPSTOI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T10:51:14Z","links":{"resolver":"https://pith.science/pith/AILU76OXA6CDC3HPJNFLMPSTOI","bundle":"https://pith.science/pith/AILU76OXA6CDC3HPJNFLMPSTOI/bundle.json","state":"https://pith.science/pith/AILU76OXA6CDC3HPJNFLMPSTOI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AILU76OXA6CDC3HPJNFLMPSTOI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AILU76OXA6CDC3HPJNFLMPSTOI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3216bd0acb98e404a2ce232f1f0a414233a6a8c340340aaa3f021a4ddc65e713","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-24T16:55:57Z","title_canon_sha256":"407943cda4768a214d6159274554312595b37e9ce0c430203ca61e59d08d3ab3"},"schema_version":"1.0","source":{"id":"2505.18786","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.18786","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"arxiv_version","alias_value":"2505.18786v1","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.18786","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"pith_short_12","alias_value":"AILU76OXA6CD","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"pith_short_16","alias_value":"AILU76OXA6CDC3HP","created_at":"2026-07-05T11:09:19Z"},{"alias_kind":"pith_short_8","alias_value":"AILU76OX","created_at":"2026-07-05T11:09:19Z"}],"graph_snapshots":[{"event_id":"sha256:343ec4b51fefe1b3a0393ce0ce6c188d095b2da80790646f8d91fe2cfe6ff4d9","target":"graph","created_at":"2026-07-05T11:09:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.18786/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present a principled, per-instance approach to quantifying the difficulty of unlearning via fine-tuning. We begin by sharpening an analysis of noisy gradient descent for unlearning (Chien et al., 2024), obtaining a better utility-unlearning tradeoff by replacing worst-case privacy loss bounds with per-instance privacy losses (Thudi et al., 2024), each of which bounds the (Renyi) divergence to retraining without an individual data point. To demonstrate the practical applicability of our theory, we present empirical results showing that our theoretical predictions are born out both for Stocha","authors_text":"Anvith Thudi, Ashmita Bhattacharyya, Berivan Isik, Daniel M. Roy, Eleni Triantafillou, Gintare Karolina Dziugaite, Nazanin Mohammadi Sepahvand, Nicolas Papernot","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-24T16:55:57Z","title":"Leveraging Per-Instance Privacy for Machine Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.18786","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c1bcf79c43f5236bd7df07cb96ccc9ef0861b38892a5140e38631a5317a938c3","target":"record","created_at":"2026-07-05T11:09:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3216bd0acb98e404a2ce232f1f0a414233a6a8c340340aaa3f021a4ddc65e713","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-24T16:55:57Z","title_canon_sha256":"407943cda4768a214d6159274554312595b37e9ce0c430203ca61e59d08d3ab3"},"schema_version":"1.0","source":{"id":"2505.18786","kind":"arxiv","version":1}},"canonical_sha256":"02174ff9d70784316cef4b4ab63e537204fba82a37dda7dab9130f19e6bcf4d4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"02174ff9d70784316cef4b4ab63e537204fba82a37dda7dab9130f19e6bcf4d4","first_computed_at":"2026-07-05T11:09:19.586167Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:19.586167Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ew5mZkdIkGgklx7DQoQ3RUX9PvqYDfzGhFS86U45RntBNN2L8L+MSfJC9zTmuuuz6S+bx2yM8tOkLRh0ScXUDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:19.586583Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.18786","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c1bcf79c43f5236bd7df07cb96ccc9ef0861b38892a5140e38631a5317a938c3","sha256:343ec4b51fefe1b3a0393ce0ce6c188d095b2da80790646f8d91fe2cfe6ff4d9"],"state_sha256":"9c108ee23c01fe161763d07534b82aaa9d01223195e2ddcc707770e21d003751"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+ifuqKGX6Dmu2I5G07Kwe0AxqqMppMfYHzVWW/axm/fDXlUrPfYbAwG4qwkiT5NYBItbcuLu4tCYcArhzrViCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T10:51:14.839875Z","bundle_sha256":"8d257c0ddd707a170aa072e69be0bdce28efbdf94ea09583df86cf937d686632"}}