{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:B2IEICQOMFSQL77NXSUSR3X7Z7","short_pith_number":"pith:B2IEICQO","canonical_record":{"source":{"id":"2302.07225","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-14T18:02:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"eea93c458588cc9e3b1c759b935fa231c24481e74a4868d944ebc96e760a2f53","abstract_canon_sha256":"ad6cccfbc58b855e824c1a94bf73532a3a038324a4ce0cc7c84b1c7e8fa27c93"},"schema_version":"1.0"},"canonical_sha256":"0e90440a0e616505ffedbca928eeffcff6cf887ed9f8ab2f8a229a1a32ec6eb4","source":{"kind":"arxiv","id":"2302.07225","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.07225","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"arxiv_version","alias_value":"2302.07225v3","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.07225","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"pith_short_12","alias_value":"B2IEICQOMFSQ","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"pith_short_16","alias_value":"B2IEICQOMFSQL77N","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"pith_short_8","alias_value":"B2IEICQO","created_at":"2026-07-05T07:06:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:B2IEICQOMFSQL77NXSUSR3X7Z7","target":"record","payload":{"canonical_record":{"source":{"id":"2302.07225","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-14T18:02:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"eea93c458588cc9e3b1c759b935fa231c24481e74a4868d944ebc96e760a2f53","abstract_canon_sha256":"ad6cccfbc58b855e824c1a94bf73532a3a038324a4ce0cc7c84b1c7e8fa27c93"},"schema_version":"1.0"},"canonical_sha256":"0e90440a0e616505ffedbca928eeffcff6cf887ed9f8ab2f8a229a1a32ec6eb4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:06:23.277371Z","signature_b64":"92w7FO6uxu0xotix1W2LHX3FWx4KbCFsCS4lXNIhCcEB+xoh24peJBxUKseHY5QqEmHpxaVUAklH4aQ20DGNAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0e90440a0e616505ffedbca928eeffcff6cf887ed9f8ab2f8a229a1a32ec6eb4","last_reissued_at":"2026-07-05T07:06:23.276872Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:06:23.276872Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.07225","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"abNFDA4hyDkm4LBBkAVEX8Bw2z1tFoRxzeATOY6q/yjJNyXP4YC+t3wtJ4Zddak95K3rDiuX9kiXAVnRr9m9CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T09:10:39.239451Z"},"content_sha256":"8728f3e3a9655feb1beee2494b3f92c01959cabc898002523ed95c2dfc0e1f94","schema_version":"1.0","event_id":"sha256:8728f3e3a9655feb1beee2494b3f92c01959cabc898002523ed95c2dfc0e1f94"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:B2IEICQOMFSQL77NXSUSR3X7Z7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Bounding Training Data Reconstruction in DP-SGD","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Borja Balle, Jamie Hayes, Saeed Mahloujifar","submitted_at":"2023-02-14T18:02:34Z","abstract_excerpt":"Differentially private training offers a protection which is usually interpreted as a guarantee against membership inference attacks. By proxy, this guarantee extends to other threats like reconstruction attacks attempting to extract complete training examples. Recent works provide evidence that if one does not need to protect against membership attacks but instead only wants to protect against training data reconstruction, then utility of private models can be improved because less noise is required to protect against these more ambitious attacks. We investigate this further in the context of"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.07225","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.07225/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lUxMyGZ9I+tWdBC7ur6a3y4VcedL5Md6UoQLknn4mcLPwcXUP1KaeDradkeyfXjfHqDEcusEqYKB7D7X1102Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T09:10:39.240027Z"},"content_sha256":"53946b33e6b2924860f070242ae7722f76efc9bc1a50830227eaffe620642489","schema_version":"1.0","event_id":"sha256:53946b33e6b2924860f070242ae7722f76efc9bc1a50830227eaffe620642489"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B2IEICQOMFSQL77NXSUSR3X7Z7/bundle.json","state_url":"https://pith.science/pith/B2IEICQOMFSQL77NXSUSR3X7Z7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B2IEICQOMFSQL77NXSUSR3X7Z7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T09:10:39Z","links":{"resolver":"https://pith.science/pith/B2IEICQOMFSQL77NXSUSR3X7Z7","bundle":"https://pith.science/pith/B2IEICQOMFSQL77NXSUSR3X7Z7/bundle.json","state":"https://pith.science/pith/B2IEICQOMFSQL77NXSUSR3X7Z7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B2IEICQOMFSQL77NXSUSR3X7Z7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:B2IEICQOMFSQL77NXSUSR3X7Z7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad6cccfbc58b855e824c1a94bf73532a3a038324a4ce0cc7c84b1c7e8fa27c93","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-14T18:02:34Z","title_canon_sha256":"eea93c458588cc9e3b1c759b935fa231c24481e74a4868d944ebc96e760a2f53"},"schema_version":"1.0","source":{"id":"2302.07225","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.07225","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"arxiv_version","alias_value":"2302.07225v3","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.07225","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"pith_short_12","alias_value":"B2IEICQOMFSQ","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"pith_short_16","alias_value":"B2IEICQOMFSQL77N","created_at":"2026-07-05T07:06:23Z"},{"alias_kind":"pith_short_8","alias_value":"B2IEICQO","created_at":"2026-07-05T07:06:23Z"}],"graph_snapshots":[{"event_id":"sha256:53946b33e6b2924860f070242ae7722f76efc9bc1a50830227eaffe620642489","target":"graph","created_at":"2026-07-05T07:06:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.07225/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Differentially private training offers a protection which is usually interpreted as a guarantee against membership inference attacks. By proxy, this guarantee extends to other threats like reconstruction attacks attempting to extract complete training examples. Recent works provide evidence that if one does not need to protect against membership attacks but instead only wants to protect against training data reconstruction, then utility of private models can be improved because less noise is required to protect against these more ambitious attacks. We investigate this further in the context of","authors_text":"Borja Balle, Jamie Hayes, Saeed Mahloujifar","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-14T18:02:34Z","title":"Bounding Training Data Reconstruction in DP-SGD"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.07225","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8728f3e3a9655feb1beee2494b3f92c01959cabc898002523ed95c2dfc0e1f94","target":"record","created_at":"2026-07-05T07:06:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad6cccfbc58b855e824c1a94bf73532a3a038324a4ce0cc7c84b1c7e8fa27c93","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-14T18:02:34Z","title_canon_sha256":"eea93c458588cc9e3b1c759b935fa231c24481e74a4868d944ebc96e760a2f53"},"schema_version":"1.0","source":{"id":"2302.07225","kind":"arxiv","version":3}},"canonical_sha256":"0e90440a0e616505ffedbca928eeffcff6cf887ed9f8ab2f8a229a1a32ec6eb4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0e90440a0e616505ffedbca928eeffcff6cf887ed9f8ab2f8a229a1a32ec6eb4","first_computed_at":"2026-07-05T07:06:23.276872Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:06:23.276872Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"92w7FO6uxu0xotix1W2LHX3FWx4KbCFsCS4lXNIhCcEB+xoh24peJBxUKseHY5QqEmHpxaVUAklH4aQ20DGNAg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:06:23.277371Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.07225","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8728f3e3a9655feb1beee2494b3f92c01959cabc898002523ed95c2dfc0e1f94","sha256:53946b33e6b2924860f070242ae7722f76efc9bc1a50830227eaffe620642489"],"state_sha256":"c38b84dd74c370b4f45a7725a1b2e35e53f3361e3ffbeae33bb472b41a123ace"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n841fXycH2cB10XjHwB30w+rS9/3pPUwUHNHw3QljEjE/aoBlFs8GcLvexTJW/dZi+0jNl9q3Xcutl0czHhUCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T09:10:39.245354Z","bundle_sha256":"90c49d22427bfbd3080af9e58284dbaff4c1a2bad76ba5b6f004de5ab8aae046"}}