{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:EEEACWPHHUR3SB6AVQWF6QTJ2E","short_pith_number":"pith:EEEACWPH","canonical_record":{"source":{"id":"2211.13403","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-24T04:04:20Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"88873b04d6ac823b6875945808abe7deb3471c43d4e64c8f75dcf2441e1b1702","abstract_canon_sha256":"995761314bd779dd028a285cbc6bdb5d35c2949a0342d93c80ad6706c4b2e37c"},"schema_version":"1.0"},"canonical_sha256":"21080159e73d23b907c0ac2c5f4269d10dd8265f90a9c2df7712821688eb9fb3","source":{"kind":"arxiv","id":"2211.13403","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.13403","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"arxiv_version","alias_value":"2211.13403v1","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.13403","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"pith_short_12","alias_value":"EEEACWPHHUR3","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"pith_short_16","alias_value":"EEEACWPHHUR3SB6A","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"pith_short_8","alias_value":"EEEACWPH","created_at":"2026-07-05T05:19:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:EEEACWPHHUR3SB6AVQWF6QTJ2E","target":"record","payload":{"canonical_record":{"source":{"id":"2211.13403","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-24T04:04:20Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"88873b04d6ac823b6875945808abe7deb3471c43d4e64c8f75dcf2441e1b1702","abstract_canon_sha256":"995761314bd779dd028a285cbc6bdb5d35c2949a0342d93c80ad6706c4b2e37c"},"schema_version":"1.0"},"canonical_sha256":"21080159e73d23b907c0ac2c5f4269d10dd8265f90a9c2df7712821688eb9fb3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:19:03.187856Z","signature_b64":"cReb56wvohk8XzasFWuljN8ozZeB22PTgDomNZJ4E1IkD1cgXhx/pyz5G+8tCiwRTo616ZWtFVY1NKaLLWUcDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"21080159e73d23b907c0ac2c5f4269d10dd8265f90a9c2df7712821688eb9fb3","last_reissued_at":"2026-07-05T05:19:03.187403Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:19:03.187403Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.13403","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:19:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ad3div/jySXkt3VrJMxZNczYBSgrSu3fnwIuNAuUtPxrRhj5Gn3G2XoDdQwA8FsEBJyNIaBrqrm9IVb98bIYAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T21:35:22.073213Z"},"content_sha256":"316bf699d22ecd6177488341dd478cfa7a7b79fc8c9a8d82cb5d4317774fceae","schema_version":"1.0","event_id":"sha256:316bf699d22ecd6177488341dd478cfa7a7b79fc8c9a8d82cb5d4317774fceae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:EEEACWPHHUR3SB6AVQWF6QTJ2E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Differentially Private Image Classification from Features","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Abhradeep Thakurta, Alexey Kurakin, Ashok Cutkosky, Harsh Mehta, Walid Krichene","submitted_at":"2022-11-24T04:04:20Z","abstract_excerpt":"Leveraging transfer learning has recently been shown to be an effective strategy for training large models with Differential Privacy (DP). Moreover, somewhat surprisingly, recent works have found that privately training just the last layer of a pre-trained model provides the best utility with DP. While past studies largely rely on algorithms like DP-SGD for training large models, in the specific case of privately learning from features, we observe that computational burden is low enough to allow for more sophisticated optimization schemes, including second-order methods. To that end, we system"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.13403","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.13403/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:19:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M7XGiaM635SpxTUQ4dVGhPqIWJ6tCmelKUHQ6vUMi101M1odp9BuZY6mp5XXwhBKQrpdnWLAtCISxiMpghGtAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T21:35:22.073815Z"},"content_sha256":"d3500575b005a3738971ce7cc0de93124ba81ea26feb80a29a65cb16e2cda097","schema_version":"1.0","event_id":"sha256:d3500575b005a3738971ce7cc0de93124ba81ea26feb80a29a65cb16e2cda097"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EEEACWPHHUR3SB6AVQWF6QTJ2E/bundle.json","state_url":"https://pith.science/pith/EEEACWPHHUR3SB6AVQWF6QTJ2E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EEEACWPHHUR3SB6AVQWF6QTJ2E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T21:35:22Z","links":{"resolver":"https://pith.science/pith/EEEACWPHHUR3SB6AVQWF6QTJ2E","bundle":"https://pith.science/pith/EEEACWPHHUR3SB6AVQWF6QTJ2E/bundle.json","state":"https://pith.science/pith/EEEACWPHHUR3SB6AVQWF6QTJ2E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EEEACWPHHUR3SB6AVQWF6QTJ2E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:EEEACWPHHUR3SB6AVQWF6QTJ2E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"995761314bd779dd028a285cbc6bdb5d35c2949a0342d93c80ad6706c4b2e37c","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-24T04:04:20Z","title_canon_sha256":"88873b04d6ac823b6875945808abe7deb3471c43d4e64c8f75dcf2441e1b1702"},"schema_version":"1.0","source":{"id":"2211.13403","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.13403","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"arxiv_version","alias_value":"2211.13403v1","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.13403","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"pith_short_12","alias_value":"EEEACWPHHUR3","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"pith_short_16","alias_value":"EEEACWPHHUR3SB6A","created_at":"2026-07-05T05:19:03Z"},{"alias_kind":"pith_short_8","alias_value":"EEEACWPH","created_at":"2026-07-05T05:19:03Z"}],"graph_snapshots":[{"event_id":"sha256:d3500575b005a3738971ce7cc0de93124ba81ea26feb80a29a65cb16e2cda097","target":"graph","created_at":"2026-07-05T05:19:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.13403/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Leveraging transfer learning has recently been shown to be an effective strategy for training large models with Differential Privacy (DP). Moreover, somewhat surprisingly, recent works have found that privately training just the last layer of a pre-trained model provides the best utility with DP. While past studies largely rely on algorithms like DP-SGD for training large models, in the specific case of privately learning from features, we observe that computational burden is low enough to allow for more sophisticated optimization schemes, including second-order methods. To that end, we system","authors_text":"Abhradeep Thakurta, Alexey Kurakin, Ashok Cutkosky, Harsh Mehta, Walid Krichene","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-24T04:04:20Z","title":"Differentially Private Image Classification from Features"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.13403","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:316bf699d22ecd6177488341dd478cfa7a7b79fc8c9a8d82cb5d4317774fceae","target":"record","created_at":"2026-07-05T05:19:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"995761314bd779dd028a285cbc6bdb5d35c2949a0342d93c80ad6706c4b2e37c","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-24T04:04:20Z","title_canon_sha256":"88873b04d6ac823b6875945808abe7deb3471c43d4e64c8f75dcf2441e1b1702"},"schema_version":"1.0","source":{"id":"2211.13403","kind":"arxiv","version":1}},"canonical_sha256":"21080159e73d23b907c0ac2c5f4269d10dd8265f90a9c2df7712821688eb9fb3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"21080159e73d23b907c0ac2c5f4269d10dd8265f90a9c2df7712821688eb9fb3","first_computed_at":"2026-07-05T05:19:03.187403Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:19:03.187403Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cReb56wvohk8XzasFWuljN8ozZeB22PTgDomNZJ4E1IkD1cgXhx/pyz5G+8tCiwRTo616ZWtFVY1NKaLLWUcDw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:19:03.187856Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.13403","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:316bf699d22ecd6177488341dd478cfa7a7b79fc8c9a8d82cb5d4317774fceae","sha256:d3500575b005a3738971ce7cc0de93124ba81ea26feb80a29a65cb16e2cda097"],"state_sha256":"5da7c573111d6b9544c312a713e0662f845db6a37af258cd03f2d34933980a45"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QKQEXMur//fg8tYn4B7qgwyZjWMbpLG4Tb5uT5qG6Iz7i+TYIUSkp3Ld8IBOJ5s58/wPLLB58/ZU4P8aByj1Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T21:35:22.079167Z","bundle_sha256":"cf90f7516749836a5d3e2e62df9e3e37139c36a14f9854c3aeea13d7790485fa"}}