{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:CHRA3M6YOWED7TN3HBCCZP64ST","short_pith_number":"pith:CHRA3M6Y","canonical_record":{"source":{"id":"2607.19580","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-21T21:15:55Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4f7f291dd6f1595d7600f60d504fe0bc42e93f438abe5a21d4be87a3bf996c45","abstract_canon_sha256":"95a8d54f9be2629a85d8fba58b6a1bed2acded9267e7b17162a6dbf116d45157"},"schema_version":"1.0"},"canonical_sha256":"11e20db3d875883fcdbb38442cbfdc94d4f4ed2fa65277025c5b7bcc43c81d7c","source":{"kind":"arxiv","id":"2607.19580","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.19580","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"arxiv_version","alias_value":"2607.19580v1","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.19580","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"pith_short_12","alias_value":"CHRA3M6YOWED","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"pith_short_16","alias_value":"CHRA3M6YOWED7TN3","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"pith_short_8","alias_value":"CHRA3M6Y","created_at":"2026-07-23T00:23:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:CHRA3M6YOWED7TN3HBCCZP64ST","target":"record","payload":{"canonical_record":{"source":{"id":"2607.19580","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-21T21:15:55Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4f7f291dd6f1595d7600f60d504fe0bc42e93f438abe5a21d4be87a3bf996c45","abstract_canon_sha256":"95a8d54f9be2629a85d8fba58b6a1bed2acded9267e7b17162a6dbf116d45157"},"schema_version":"1.0"},"canonical_sha256":"11e20db3d875883fcdbb38442cbfdc94d4f4ed2fa65277025c5b7bcc43c81d7c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-23T00:23:57.463457Z","signature_b64":"YW//pjPoiUzRoGpsaBjFs+Juhuu0H2Hag/nZ9yPXkxQMHmGb8H4923AR003UHDg8mfHY+NLZ/5uTtHMgHA3hCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"11e20db3d875883fcdbb38442cbfdc94d4f4ed2fa65277025c5b7bcc43c81d7c","last_reissued_at":"2026-07-23T00:23:57.462465Z","signature_status":"signed_v1","first_computed_at":"2026-07-23T00:23:57.462465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.19580","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-23T00:23:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oYg5azLoScmQ5si/RlZOSm1qZrkkbo7rGR4dBVz+60gd4IZQrTnnzOC1YbDz5eycj/OkvO7EK4UGeg9luVB4BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:17:59.472064Z"},"content_sha256":"5141e1bbe26b84d99b612b302b70104b45cceefda1448768dcbfa350e26ab206","schema_version":"1.0","event_id":"sha256:5141e1bbe26b84d99b612b302b70104b45cceefda1448768dcbfa350e26ab206"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:CHRA3M6YOWED7TN3HBCCZP64ST","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"End-to-End Differential Privacy in Training Deep Neural Network Classifiers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Alexander Benvenuti, Calvin Hawkins, Huaiyuan Rao, Matthew Hale","submitted_at":"2026-07-21T21:15:55Z","abstract_excerpt":"Differentially private machine learning enables model training on sensitive data while ensuring that individual data is unlikely to be recoverable from the parameters of the resulting model. However, existing work often privatizes both training inputs and their labels, and these protections may be conservative when labels are public or can be safely made public. Therefore, in this work we propose a novel private training framework that instead privatizes training inputs while keeping labels public. We consider neural networks with softmax output layers, and thus the mapping from training input"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.19580","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.19580/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-23T00:23:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1MIlwuZhsU4ieIih7H/6msUDX+icqh8nuU3Jm6BXcpTsGoqwwfjgPg0pAJuuQXWhFlIM5FFi8s6obMgnjwBkBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:17:59.472743Z"},"content_sha256":"1237db13d06bf82b7113ebd8aaaa9f3d8653b526e7404b049c246bba413ccf5c","schema_version":"1.0","event_id":"sha256:1237db13d06bf82b7113ebd8aaaa9f3d8653b526e7404b049c246bba413ccf5c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CHRA3M6YOWED7TN3HBCCZP64ST/bundle.json","state_url":"https://pith.science/pith/CHRA3M6YOWED7TN3HBCCZP64ST/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CHRA3M6YOWED7TN3HBCCZP64ST/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T11:17:59Z","links":{"resolver":"https://pith.science/pith/CHRA3M6YOWED7TN3HBCCZP64ST","bundle":"https://pith.science/pith/CHRA3M6YOWED7TN3HBCCZP64ST/bundle.json","state":"https://pith.science/pith/CHRA3M6YOWED7TN3HBCCZP64ST/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CHRA3M6YOWED7TN3HBCCZP64ST/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:CHRA3M6YOWED7TN3HBCCZP64ST","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"95a8d54f9be2629a85d8fba58b6a1bed2acded9267e7b17162a6dbf116d45157","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-21T21:15:55Z","title_canon_sha256":"4f7f291dd6f1595d7600f60d504fe0bc42e93f438abe5a21d4be87a3bf996c45"},"schema_version":"1.0","source":{"id":"2607.19580","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.19580","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"arxiv_version","alias_value":"2607.19580v1","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.19580","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"pith_short_12","alias_value":"CHRA3M6YOWED","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"pith_short_16","alias_value":"CHRA3M6YOWED7TN3","created_at":"2026-07-23T00:23:57Z"},{"alias_kind":"pith_short_8","alias_value":"CHRA3M6Y","created_at":"2026-07-23T00:23:57Z"}],"graph_snapshots":[{"event_id":"sha256:1237db13d06bf82b7113ebd8aaaa9f3d8653b526e7404b049c246bba413ccf5c","target":"graph","created_at":"2026-07-23T00:23:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.19580/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Differentially private machine learning enables model training on sensitive data while ensuring that individual data is unlikely to be recoverable from the parameters of the resulting model. However, existing work often privatizes both training inputs and their labels, and these protections may be conservative when labels are public or can be safely made public. Therefore, in this work we propose a novel private training framework that instead privatizes training inputs while keeping labels public. We consider neural networks with softmax output layers, and thus the mapping from training input","authors_text":"Alexander Benvenuti, Calvin Hawkins, Huaiyuan Rao, Matthew Hale","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-21T21:15:55Z","title":"End-to-End Differential Privacy in Training Deep Neural Network Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.19580","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5141e1bbe26b84d99b612b302b70104b45cceefda1448768dcbfa350e26ab206","target":"record","created_at":"2026-07-23T00:23:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"95a8d54f9be2629a85d8fba58b6a1bed2acded9267e7b17162a6dbf116d45157","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-21T21:15:55Z","title_canon_sha256":"4f7f291dd6f1595d7600f60d504fe0bc42e93f438abe5a21d4be87a3bf996c45"},"schema_version":"1.0","source":{"id":"2607.19580","kind":"arxiv","version":1}},"canonical_sha256":"11e20db3d875883fcdbb38442cbfdc94d4f4ed2fa65277025c5b7bcc43c81d7c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"11e20db3d875883fcdbb38442cbfdc94d4f4ed2fa65277025c5b7bcc43c81d7c","first_computed_at":"2026-07-23T00:23:57.462465Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-23T00:23:57.462465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YW//pjPoiUzRoGpsaBjFs+Juhuu0H2Hag/nZ9yPXkxQMHmGb8H4923AR003UHDg8mfHY+NLZ/5uTtHMgHA3hCQ==","signature_status":"signed_v1","signed_at":"2026-07-23T00:23:57.463457Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.19580","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5141e1bbe26b84d99b612b302b70104b45cceefda1448768dcbfa350e26ab206","sha256:1237db13d06bf82b7113ebd8aaaa9f3d8653b526e7404b049c246bba413ccf5c"],"state_sha256":"cabe0b59ab20439a31a6afd90981e52dc332f6846649ad405347f7cbb8a1b873"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fuvT96yrROB8SDYhXCG34TNVA6dLnJsg4qQC1x7A/B4fu6/ai+loXoazAdS+OeUTDUSYEs+WAiPaMeOD0t5QDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T11:17:59.479466Z","bundle_sha256":"90ec930fa89b616046665dfd96e433038fd80c1df844eeef4a1cf9c62144e8d8"}}