{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BOFK3LAZGIANOD7IKQ7ZJ5FV55","short_pith_number":"pith:BOFK3LAZ","canonical_record":{"source":{"id":"2505.06747","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-10T19:49:51Z","cross_cats_sorted":[],"title_canon_sha256":"e1f3367eae984702341f712dcd3580794ee53fa5b678faaac81127f969a9d9f8","abstract_canon_sha256":"15b5e9ab7ffb1614e522d3393af48ef5ca2b322b80f378ab77cd0fc6d30748eb"},"schema_version":"1.0"},"canonical_sha256":"0b8aadac193200d70fe8543f94f4b5ef5ea70390daf008f927af49b648d96125","source":{"kind":"arxiv","id":"2505.06747","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06747","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06747v1","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06747","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"pith_short_12","alias_value":"BOFK3LAZGIAN","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"pith_short_16","alias_value":"BOFK3LAZGIANOD7I","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"pith_short_8","alias_value":"BOFK3LAZ","created_at":"2026-07-05T11:01:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BOFK3LAZGIANOD7IKQ7ZJ5FV55","target":"record","payload":{"canonical_record":{"source":{"id":"2505.06747","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-10T19:49:51Z","cross_cats_sorted":[],"title_canon_sha256":"e1f3367eae984702341f712dcd3580794ee53fa5b678faaac81127f969a9d9f8","abstract_canon_sha256":"15b5e9ab7ffb1614e522d3393af48ef5ca2b322b80f378ab77cd0fc6d30748eb"},"schema_version":"1.0"},"canonical_sha256":"0b8aadac193200d70fe8543f94f4b5ef5ea70390daf008f927af49b648d96125","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:01:15.168832Z","signature_b64":"/WPrQto/lWlhSrKF2pi/Sv5X9T0wvMKyt5Ala0xp9+HQukiIn5VJB+2dliEeHWgn/lyK11zl2/2wkpWz0WE7Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b8aadac193200d70fe8543f94f4b5ef5ea70390daf008f927af49b648d96125","last_reissued_at":"2026-07-05T11:01:15.168382Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:01:15.168382Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.06747","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wrRaOtKuYN6aoD0X3TxCwsHScZNXzSLyDNX7o6YRqijaQoVUSQvR2Y98ty+wjciO/j019WwI+hd2GIA/QS47Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T02:42:08.163919Z"},"content_sha256":"37fd9b363b6bf60c54050c67e2cd02ad54ca61c47c7c445cbcf2917b3674b901","schema_version":"1.0","event_id":"sha256:37fd9b363b6bf60c54050c67e2cd02ad54ca61c47c7c445cbcf2917b3674b901"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BOFK3LAZGIANOD7IKQ7ZJ5FV55","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DPolicy: Managing Privacy Risks Across Multiple Releases with Differential Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexander Viand, Anwar Hithnawi, Hidde Lycklama, Nicolas K\\\"uchler","submitted_at":"2025-05-10T19:49:51Z","abstract_excerpt":"Differential Privacy (DP) has emerged as a robust framework for privacy-preserving data releases and has been successfully applied in high-profile cases, such as the 2020 US Census. However, in organizational settings, the use of DP remains largely confined to isolated data releases. This approach restricts the potential of DP to serve as a framework for comprehensive privacy risk management at an organizational level. Although one might expect that the cumulative privacy risk of isolated releases could be assessed using DP's compositional property, in practice, individual DP guarantees are fr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06747","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.06747/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yaaPRb1HcdyUC8cypU4Xb6BMC4zIesWkONMG4ysIALXe0gfODWeCqcbQL9jsb711IfofCIxeVKgwdK2A+YBdAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T02:42:08.164872Z"},"content_sha256":"396b8a97185a09f07762ee11d1680afc7c15c3e6e841999a6d9d27635ef14982","schema_version":"1.0","event_id":"sha256:396b8a97185a09f07762ee11d1680afc7c15c3e6e841999a6d9d27635ef14982"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BOFK3LAZGIANOD7IKQ7ZJ5FV55/bundle.json","state_url":"https://pith.science/pith/BOFK3LAZGIANOD7IKQ7ZJ5FV55/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BOFK3LAZGIANOD7IKQ7ZJ5FV55/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T02:42:08Z","links":{"resolver":"https://pith.science/pith/BOFK3LAZGIANOD7IKQ7ZJ5FV55","bundle":"https://pith.science/pith/BOFK3LAZGIANOD7IKQ7ZJ5FV55/bundle.json","state":"https://pith.science/pith/BOFK3LAZGIANOD7IKQ7ZJ5FV55/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BOFK3LAZGIANOD7IKQ7ZJ5FV55/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BOFK3LAZGIANOD7IKQ7ZJ5FV55","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"15b5e9ab7ffb1614e522d3393af48ef5ca2b322b80f378ab77cd0fc6d30748eb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-10T19:49:51Z","title_canon_sha256":"e1f3367eae984702341f712dcd3580794ee53fa5b678faaac81127f969a9d9f8"},"schema_version":"1.0","source":{"id":"2505.06747","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06747","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06747v1","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06747","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"pith_short_12","alias_value":"BOFK3LAZGIAN","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"pith_short_16","alias_value":"BOFK3LAZGIANOD7I","created_at":"2026-07-05T11:01:15Z"},{"alias_kind":"pith_short_8","alias_value":"BOFK3LAZ","created_at":"2026-07-05T11:01:15Z"}],"graph_snapshots":[{"event_id":"sha256:396b8a97185a09f07762ee11d1680afc7c15c3e6e841999a6d9d27635ef14982","target":"graph","created_at":"2026-07-05T11:01:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.06747/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Differential Privacy (DP) has emerged as a robust framework for privacy-preserving data releases and has been successfully applied in high-profile cases, such as the 2020 US Census. However, in organizational settings, the use of DP remains largely confined to isolated data releases. This approach restricts the potential of DP to serve as a framework for comprehensive privacy risk management at an organizational level. Although one might expect that the cumulative privacy risk of isolated releases could be assessed using DP's compositional property, in practice, individual DP guarantees are fr","authors_text":"Alexander Viand, Anwar Hithnawi, Hidde Lycklama, Nicolas K\\\"uchler","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-10T19:49:51Z","title":"DPolicy: Managing Privacy Risks Across Multiple Releases with Differential Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06747","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:37fd9b363b6bf60c54050c67e2cd02ad54ca61c47c7c445cbcf2917b3674b901","target":"record","created_at":"2026-07-05T11:01:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"15b5e9ab7ffb1614e522d3393af48ef5ca2b322b80f378ab77cd0fc6d30748eb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-10T19:49:51Z","title_canon_sha256":"e1f3367eae984702341f712dcd3580794ee53fa5b678faaac81127f969a9d9f8"},"schema_version":"1.0","source":{"id":"2505.06747","kind":"arxiv","version":1}},"canonical_sha256":"0b8aadac193200d70fe8543f94f4b5ef5ea70390daf008f927af49b648d96125","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0b8aadac193200d70fe8543f94f4b5ef5ea70390daf008f927af49b648d96125","first_computed_at":"2026-07-05T11:01:15.168382Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:01:15.168382Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/WPrQto/lWlhSrKF2pi/Sv5X9T0wvMKyt5Ala0xp9+HQukiIn5VJB+2dliEeHWgn/lyK11zl2/2wkpWz0WE7Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:01:15.168832Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.06747","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:37fd9b363b6bf60c54050c67e2cd02ad54ca61c47c7c445cbcf2917b3674b901","sha256:396b8a97185a09f07762ee11d1680afc7c15c3e6e841999a6d9d27635ef14982"],"state_sha256":"748aa6790688b7c0323314febd2c2f1f1ad9b45623f905ac25c5aa7d84eb7b14"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BPCqfubF0yeHAyva3SsJ1sK2J9k0zcd8B8sEqaFMEKLYvU0Emle+HPm/curxUCmvzaDuXMhpNYjJEQdNYmyhDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T02:42:08.172428Z","bundle_sha256":"e307b3b7bbd97e14daae5c40f621e3330c4d464e93140e525ce65f3ff8f85061"}}