{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:CNYVX6P6JJ53YBY4TXQBUT2JYK","short_pith_number":"pith:CNYVX6P6","canonical_record":{"source":{"id":"2202.05089","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-10T15:19:46Z","cross_cats_sorted":[],"title_canon_sha256":"57966bee79960a37cd124d3660f7e8169faf56cc64f650a470c4665ecf9f8c0b","abstract_canon_sha256":"141fe164ddcf5b78e6a23b4db174bfa3dc40cddc7ef37f2f472d1fa0ca9bd87b"},"schema_version":"1.0"},"canonical_sha256":"13715bf9fe4a7bbc071c9de01a4f49c298ac54bbbb76b8a8ed671c2e1398dc31","source":{"kind":"arxiv","id":"2202.05089","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.05089","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"arxiv_version","alias_value":"2202.05089v2","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.05089","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"pith_short_12","alias_value":"CNYVX6P6JJ53","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"pith_short_16","alias_value":"CNYVX6P6JJ53YBY4","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"pith_short_8","alias_value":"CNYVX6P6","created_at":"2026-07-05T03:58:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:CNYVX6P6JJ53YBY4TXQBUT2JYK","target":"record","payload":{"canonical_record":{"source":{"id":"2202.05089","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-10T15:19:46Z","cross_cats_sorted":[],"title_canon_sha256":"57966bee79960a37cd124d3660f7e8169faf56cc64f650a470c4665ecf9f8c0b","abstract_canon_sha256":"141fe164ddcf5b78e6a23b4db174bfa3dc40cddc7ef37f2f472d1fa0ca9bd87b"},"schema_version":"1.0"},"canonical_sha256":"13715bf9fe4a7bbc071c9de01a4f49c298ac54bbbb76b8a8ed671c2e1398dc31","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:58:06.577833Z","signature_b64":"0ll54p0ckux1vVNLg0O7Y4wH8o1LlsCaZLF451JpRQqY27tVP8Ni29LrioW7dlpN0lJ6Ei1p1DjRFIQDtypZBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"13715bf9fe4a7bbc071c9de01a4f49c298ac54bbbb76b8a8ed671c2e1398dc31","last_reissued_at":"2026-07-05T03:58:06.577399Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:58:06.577399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.05089","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:58:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xnvm3xhrTQJvx6qE3J83a6I2vdbhX/8+gDHSAhdpD/oyPmlfmKoJOLXGO+MlleSD9b7bIhEB0hev7biZVNAqAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T09:50:52.205957Z"},"content_sha256":"428c9adf39a06be1af355e920193796eb1d07e44319e0b1515d40d0f09724764","schema_version":"1.0","event_id":"sha256:428c9adf39a06be1af355e920193796eb1d07e44319e0b1515d40d0f09724764"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:CNYVX6P6JJ53YBY4TXQBUT2JYK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backpropagation Clipping for Deep Learning with Differential Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Calvin Hirsch, David Darais, David Slater, Ivoline C. Ngong, Joseph P. Near, Timothy Stevens","submitted_at":"2022-02-10T15:19:46Z","abstract_excerpt":"We present backpropagation clipping, a novel variant of differentially private stochastic gradient descent (DP-SGD) for privacy-preserving deep learning. Our approach clips each trainable layer's inputs (during the forward pass) and its upstream gradients (during the backward pass) to ensure bounded global sensitivity for the layer's gradient; this combination replaces the gradient clipping step in existing DP-SGD variants. Our approach is simple to implement in existing deep learning frameworks. The results of our empirical evaluation demonstrate that backpropagation clipping provides higher "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.05089","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.05089/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:58:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+sYzuPAKlnLE7UI68m9drNWUlLeY0lsF9O3q7iIxPMpnUoiK4sHumnVbqnW8HRr016nMUsSMfpmixaciTXdQCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T09:50:52.206448Z"},"content_sha256":"753b48641782ffde0b31f550f03fca89ee2ecc7f7586d55c4df819b0950ff1f1","schema_version":"1.0","event_id":"sha256:753b48641782ffde0b31f550f03fca89ee2ecc7f7586d55c4df819b0950ff1f1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CNYVX6P6JJ53YBY4TXQBUT2JYK/bundle.json","state_url":"https://pith.science/pith/CNYVX6P6JJ53YBY4TXQBUT2JYK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CNYVX6P6JJ53YBY4TXQBUT2JYK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T09:50:52Z","links":{"resolver":"https://pith.science/pith/CNYVX6P6JJ53YBY4TXQBUT2JYK","bundle":"https://pith.science/pith/CNYVX6P6JJ53YBY4TXQBUT2JYK/bundle.json","state":"https://pith.science/pith/CNYVX6P6JJ53YBY4TXQBUT2JYK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CNYVX6P6JJ53YBY4TXQBUT2JYK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:CNYVX6P6JJ53YBY4TXQBUT2JYK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"141fe164ddcf5b78e6a23b4db174bfa3dc40cddc7ef37f2f472d1fa0ca9bd87b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-10T15:19:46Z","title_canon_sha256":"57966bee79960a37cd124d3660f7e8169faf56cc64f650a470c4665ecf9f8c0b"},"schema_version":"1.0","source":{"id":"2202.05089","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.05089","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"arxiv_version","alias_value":"2202.05089v2","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.05089","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"pith_short_12","alias_value":"CNYVX6P6JJ53","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"pith_short_16","alias_value":"CNYVX6P6JJ53YBY4","created_at":"2026-07-05T03:58:06Z"},{"alias_kind":"pith_short_8","alias_value":"CNYVX6P6","created_at":"2026-07-05T03:58:06Z"}],"graph_snapshots":[{"event_id":"sha256:753b48641782ffde0b31f550f03fca89ee2ecc7f7586d55c4df819b0950ff1f1","target":"graph","created_at":"2026-07-05T03:58:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.05089/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present backpropagation clipping, a novel variant of differentially private stochastic gradient descent (DP-SGD) for privacy-preserving deep learning. Our approach clips each trainable layer's inputs (during the forward pass) and its upstream gradients (during the backward pass) to ensure bounded global sensitivity for the layer's gradient; this combination replaces the gradient clipping step in existing DP-SGD variants. Our approach is simple to implement in existing deep learning frameworks. The results of our empirical evaluation demonstrate that backpropagation clipping provides higher ","authors_text":"Calvin Hirsch, David Darais, David Slater, Ivoline C. Ngong, Joseph P. Near, Timothy Stevens","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-10T15:19:46Z","title":"Backpropagation Clipping for Deep Learning with Differential Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.05089","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:428c9adf39a06be1af355e920193796eb1d07e44319e0b1515d40d0f09724764","target":"record","created_at":"2026-07-05T03:58:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"141fe164ddcf5b78e6a23b4db174bfa3dc40cddc7ef37f2f472d1fa0ca9bd87b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-10T15:19:46Z","title_canon_sha256":"57966bee79960a37cd124d3660f7e8169faf56cc64f650a470c4665ecf9f8c0b"},"schema_version":"1.0","source":{"id":"2202.05089","kind":"arxiv","version":2}},"canonical_sha256":"13715bf9fe4a7bbc071c9de01a4f49c298ac54bbbb76b8a8ed671c2e1398dc31","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"13715bf9fe4a7bbc071c9de01a4f49c298ac54bbbb76b8a8ed671c2e1398dc31","first_computed_at":"2026-07-05T03:58:06.577399Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:58:06.577399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0ll54p0ckux1vVNLg0O7Y4wH8o1LlsCaZLF451JpRQqY27tVP8Ni29LrioW7dlpN0lJ6Ei1p1DjRFIQDtypZBw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:58:06.577833Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.05089","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:428c9adf39a06be1af355e920193796eb1d07e44319e0b1515d40d0f09724764","sha256:753b48641782ffde0b31f550f03fca89ee2ecc7f7586d55c4df819b0950ff1f1"],"state_sha256":"33a7f5c4c01125cf6e314c556fbe02e06a13025ef55fb6aadc250ad6b7e29b0d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6rGIqbpDYpXXyIx3rROnCwf66dz44cR8x1p8cC0l7+ciqtCd1HS7WppGnX3EtVP3rECmCI8XYcDmCjOEW/+lCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T09:50:52.210935Z","bundle_sha256":"f2bcd80b6afe456004ca218cb31a5844d9b0cd248ee255b7ebc0b3ffd76fce24"}}