{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:E22G5SXKRHAJPNRLK6TN5BBKB4","short_pith_number":"pith:E22G5SXK","canonical_record":{"source":{"id":"2405.20769","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-27T20:30:12Z","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"title_canon_sha256":"e4c686e88e334c248537838b0aa039c7e9ba2a68edddcb5ca9cbe78f695eb4a4","abstract_canon_sha256":"549ab701fef20fd3a2fe357c80eb16f89473cc670caecd16f3cd5dc717cca788"},"schema_version":"1.0"},"canonical_sha256":"26b46ecaea89c097b62b57a6de842a0f274074e80422fd1564d3605513781421","source":{"kind":"arxiv","id":"2405.20769","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20769","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20769v2","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20769","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"pith_short_12","alias_value":"E22G5SXKRHAJ","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"pith_short_16","alias_value":"E22G5SXKRHAJPNRL","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"pith_short_8","alias_value":"E22G5SXK","created_at":"2026-07-05T10:45:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:E22G5SXKRHAJPNRLK6TN5BBKB4","target":"record","payload":{"canonical_record":{"source":{"id":"2405.20769","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-27T20:30:12Z","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"title_canon_sha256":"e4c686e88e334c248537838b0aa039c7e9ba2a68edddcb5ca9cbe78f695eb4a4","abstract_canon_sha256":"549ab701fef20fd3a2fe357c80eb16f89473cc670caecd16f3cd5dc717cca788"},"schema_version":"1.0"},"canonical_sha256":"26b46ecaea89c097b62b57a6de842a0f274074e80422fd1564d3605513781421","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:45:52.770799Z","signature_b64":"rT6kbBPX2tC0qhpkcp/qLwMf1RaFfqd2VVnxTcHX6X2sYj2NBeZrgwZpL62AxytoaddVRVuIh2TZxo1QppaJCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"26b46ecaea89c097b62b57a6de842a0f274074e80422fd1564d3605513781421","last_reissued_at":"2026-07-05T10:45:52.770328Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:45:52.770328Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.20769","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:45:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kgmjm9iRermb31xS12tzqf6RzHq6E5Sv6MPx39ksGCyTXzXdBr6y0F+XX2WdBmso7yZkKay3xeG20ET+kMMhBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T01:52:44.261547Z"},"content_sha256":"3635cee855a4cfdf38dfb4ac724d695930dc3909016ca90b09478c885af010b5","schema_version":"1.0","event_id":"sha256:3635cee855a4cfdf38dfb4ac724d695930dc3909016ca90b09478c885af010b5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:E22G5SXKRHAJPNRLK6TN5BBKB4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.DS","cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Christian Janos Lebeda, Gautam Kamath, Matthew Regehr, Thomas Steinke","submitted_at":"2024-05-27T20:30:12Z","abstract_excerpt":"We consider the problem of computing tight privacy guarantees for the composition of subsampled differentially private mechanisms. Recent algorithms can numerically compute the privacy parameters to arbitrary precision but must be carefully applied.\n  Our main contribution is to address two common points of confusion. First, some privacy accountants assume that the privacy guarantees for the composition of a subsampled mechanism are determined by self-composing the worst-case datasets for the uncomposed mechanism. We show that this is not true in general. Second, Poisson subsampling is sometim"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20769","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.20769/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:45:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LbfNVGe0DDEaOlnSYzoJ2x1E7MOIYRob3aWR+oaDqPy/B+xMM0VDTTYZygKWPDcdsZATch+ir69+bPIWDEXiAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T01:52:44.262283Z"},"content_sha256":"403da3178b6e30c4fa98ab4380d84870366c0ff7f5b41f1b28b92adb9dacfa43","schema_version":"1.0","event_id":"sha256:403da3178b6e30c4fa98ab4380d84870366c0ff7f5b41f1b28b92adb9dacfa43"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/E22G5SXKRHAJPNRLK6TN5BBKB4/bundle.json","state_url":"https://pith.science/pith/E22G5SXKRHAJPNRLK6TN5BBKB4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/E22G5SXKRHAJPNRLK6TN5BBKB4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T01:52:44Z","links":{"resolver":"https://pith.science/pith/E22G5SXKRHAJPNRLK6TN5BBKB4","bundle":"https://pith.science/pith/E22G5SXKRHAJPNRLK6TN5BBKB4/bundle.json","state":"https://pith.science/pith/E22G5SXKRHAJPNRLK6TN5BBKB4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/E22G5SXKRHAJPNRLK6TN5BBKB4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:E22G5SXKRHAJPNRLK6TN5BBKB4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"549ab701fef20fd3a2fe357c80eb16f89473cc670caecd16f3cd5dc717cca788","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-27T20:30:12Z","title_canon_sha256":"e4c686e88e334c248537838b0aa039c7e9ba2a68edddcb5ca9cbe78f695eb4a4"},"schema_version":"1.0","source":{"id":"2405.20769","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20769","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20769v2","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20769","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"pith_short_12","alias_value":"E22G5SXKRHAJ","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"pith_short_16","alias_value":"E22G5SXKRHAJPNRL","created_at":"2026-07-05T10:45:52Z"},{"alias_kind":"pith_short_8","alias_value":"E22G5SXK","created_at":"2026-07-05T10:45:52Z"}],"graph_snapshots":[{"event_id":"sha256:403da3178b6e30c4fa98ab4380d84870366c0ff7f5b41f1b28b92adb9dacfa43","target":"graph","created_at":"2026-07-05T10:45:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.20769/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We consider the problem of computing tight privacy guarantees for the composition of subsampled differentially private mechanisms. Recent algorithms can numerically compute the privacy parameters to arbitrary precision but must be carefully applied.\n  Our main contribution is to address two common points of confusion. First, some privacy accountants assume that the privacy guarantees for the composition of a subsampled mechanism are determined by self-composing the worst-case datasets for the uncomposed mechanism. We show that this is not true in general. Second, Poisson subsampling is sometim","authors_text":"Christian Janos Lebeda, Gautam Kamath, Matthew Regehr, Thomas Steinke","cross_cats":["cs.DS","cs.LG","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-27T20:30:12Z","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20769","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3635cee855a4cfdf38dfb4ac724d695930dc3909016ca90b09478c885af010b5","target":"record","created_at":"2026-07-05T10:45:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"549ab701fef20fd3a2fe357c80eb16f89473cc670caecd16f3cd5dc717cca788","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-27T20:30:12Z","title_canon_sha256":"e4c686e88e334c248537838b0aa039c7e9ba2a68edddcb5ca9cbe78f695eb4a4"},"schema_version":"1.0","source":{"id":"2405.20769","kind":"arxiv","version":2}},"canonical_sha256":"26b46ecaea89c097b62b57a6de842a0f274074e80422fd1564d3605513781421","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"26b46ecaea89c097b62b57a6de842a0f274074e80422fd1564d3605513781421","first_computed_at":"2026-07-05T10:45:52.770328Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:45:52.770328Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rT6kbBPX2tC0qhpkcp/qLwMf1RaFfqd2VVnxTcHX6X2sYj2NBeZrgwZpL62AxytoaddVRVuIh2TZxo1QppaJCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:45:52.770799Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.20769","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3635cee855a4cfdf38dfb4ac724d695930dc3909016ca90b09478c885af010b5","sha256:403da3178b6e30c4fa98ab4380d84870366c0ff7f5b41f1b28b92adb9dacfa43"],"state_sha256":"60705ec289ea155c76a4cd1305a0f95f808a4da9a0994b8ef59db2944262a91c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AhiA1e+5SbmsodMDRnvJFBXz9QjBEyxu+ZxpA+s8kuPe6GjzSzk4MNPeM58Usfz/npSi/mb7SQjeKBe+u2I1Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T01:52:44.267805Z","bundle_sha256":"189ac2b46d86d09d25154e6bee76c3154a5f3a0a8b191cbfe4e0f543c68c08e2"}}