{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:EKZH5DDRINBZV2H7NVVLPAGYLU","short_pith_number":"pith:EKZH5DDR","canonical_record":{"source":{"id":"2501.17396","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T03:23:46Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"9d730477f6f68392540583e16f47a07d856bedbaeaa17b06750f8ab229fcefac","abstract_canon_sha256":"c0ff80e4118f9322e7c4c1d78bf2cad624068e6ecde1689f7af8187149877e09"},"schema_version":"1.0"},"canonical_sha256":"22b27e8c7143439ae8ff6d6ab780d85d26d63fdd354e308effb33d3d59f72c2f","source":{"kind":"arxiv","id":"2501.17396","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.17396","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"arxiv_version","alias_value":"2501.17396v1","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.17396","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_12","alias_value":"EKZH5DDRINBZ","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_16","alias_value":"EKZH5DDRINBZV2H7","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_8","alias_value":"EKZH5DDR","created_at":"2026-07-05T10:06:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:EKZH5DDRINBZV2H7NVVLPAGYLU","target":"record","payload":{"canonical_record":{"source":{"id":"2501.17396","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T03:23:46Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"9d730477f6f68392540583e16f47a07d856bedbaeaa17b06750f8ab229fcefac","abstract_canon_sha256":"c0ff80e4118f9322e7c4c1d78bf2cad624068e6ecde1689f7af8187149877e09"},"schema_version":"1.0"},"canonical_sha256":"22b27e8c7143439ae8ff6d6ab780d85d26d63fdd354e308effb33d3d59f72c2f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:06:52.229777Z","signature_b64":"8iIVYimVS8+n+kVJYYPIk24CJBvqB9dfFqG37RX8N96+xdOdgklgWm6DAwfhY+RAcZPwESufiZ7M83+oW2+GDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"22b27e8c7143439ae8ff6d6ab780d85d26d63fdd354e308effb33d3d59f72c2f","last_reissued_at":"2026-07-05T10:06:52.229244Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:06:52.229244Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.17396","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L8QuqUiF5avUkmDsYKrFLADL4zcHHPLnzGRI4v4/amRCyWKnDcLM5jc5hcLyENvAcn5aL2fxpGLgJeQRussNDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T08:27:21.882384Z"},"content_sha256":"211eef4b7f0926627ec73fc7d9396142627cdf2298d72a8093eb9d393900050f","schema_version":"1.0","event_id":"sha256:211eef4b7f0926627ec73fc7d9396142627cdf2298d72a8093eb9d393900050f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:EKZH5DDRINBZV2H7NVVLPAGYLU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Poisoning Attacks and Defenses to Federated Unlearning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.DC","cs.LG"],"primary_cat":"cs.CR","authors_text":"Minghong Fang, Qiwen Ma, Wenbin Wang, Yuchen Liu, Zhuqing Liu, Zifan Zhang","submitted_at":"2025-01-29T03:23:46Z","abstract_excerpt":"Federated learning allows multiple clients to collaboratively train a global model with the assistance of a server. However, its distributed nature makes it susceptible to poisoning attacks, where malicious clients can compromise the global model by sending harmful local model updates to the server. To unlearn an accurate global model from a poisoned one after identifying malicious clients, federated unlearning has been introduced. Yet, current research on federated unlearning has primarily concentrated on its effectiveness and efficiency, overlooking the security challenges it presents. In th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.17396","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.17396/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JUzFAtR4jGUYiKS5BjoQjeEQO8LTCJcdZTAHR2LIT3lzxosCYGyGnE+J3Jt9SNTbueutDLisjea1MKbwe82xBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T08:27:21.883037Z"},"content_sha256":"3eec81810c59d26cff882bcfc2f0abb7197f2e965887b1cfc52f621021a6bf94","schema_version":"1.0","event_id":"sha256:3eec81810c59d26cff882bcfc2f0abb7197f2e965887b1cfc52f621021a6bf94"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EKZH5DDRINBZV2H7NVVLPAGYLU/bundle.json","state_url":"https://pith.science/pith/EKZH5DDRINBZV2H7NVVLPAGYLU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EKZH5DDRINBZV2H7NVVLPAGYLU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T08:27:21Z","links":{"resolver":"https://pith.science/pith/EKZH5DDRINBZV2H7NVVLPAGYLU","bundle":"https://pith.science/pith/EKZH5DDRINBZV2H7NVVLPAGYLU/bundle.json","state":"https://pith.science/pith/EKZH5DDRINBZV2H7NVVLPAGYLU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EKZH5DDRINBZV2H7NVVLPAGYLU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:EKZH5DDRINBZV2H7NVVLPAGYLU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c0ff80e4118f9322e7c4c1d78bf2cad624068e6ecde1689f7af8187149877e09","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T03:23:46Z","title_canon_sha256":"9d730477f6f68392540583e16f47a07d856bedbaeaa17b06750f8ab229fcefac"},"schema_version":"1.0","source":{"id":"2501.17396","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.17396","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"arxiv_version","alias_value":"2501.17396v1","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.17396","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_12","alias_value":"EKZH5DDRINBZ","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_16","alias_value":"EKZH5DDRINBZV2H7","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_8","alias_value":"EKZH5DDR","created_at":"2026-07-05T10:06:52Z"}],"graph_snapshots":[{"event_id":"sha256:3eec81810c59d26cff882bcfc2f0abb7197f2e965887b1cfc52f621021a6bf94","target":"graph","created_at":"2026-07-05T10:06:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.17396/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning allows multiple clients to collaboratively train a global model with the assistance of a server. However, its distributed nature makes it susceptible to poisoning attacks, where malicious clients can compromise the global model by sending harmful local model updates to the server. To unlearn an accurate global model from a poisoned one after identifying malicious clients, federated unlearning has been introduced. Yet, current research on federated unlearning has primarily concentrated on its effectiveness and efficiency, overlooking the security challenges it presents. In th","authors_text":"Minghong Fang, Qiwen Ma, Wenbin Wang, Yuchen Liu, Zhuqing Liu, Zifan Zhang","cross_cats":["cs.DC","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T03:23:46Z","title":"Poisoning Attacks and Defenses to Federated Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.17396","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:211eef4b7f0926627ec73fc7d9396142627cdf2298d72a8093eb9d393900050f","target":"record","created_at":"2026-07-05T10:06:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c0ff80e4118f9322e7c4c1d78bf2cad624068e6ecde1689f7af8187149877e09","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T03:23:46Z","title_canon_sha256":"9d730477f6f68392540583e16f47a07d856bedbaeaa17b06750f8ab229fcefac"},"schema_version":"1.0","source":{"id":"2501.17396","kind":"arxiv","version":1}},"canonical_sha256":"22b27e8c7143439ae8ff6d6ab780d85d26d63fdd354e308effb33d3d59f72c2f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"22b27e8c7143439ae8ff6d6ab780d85d26d63fdd354e308effb33d3d59f72c2f","first_computed_at":"2026-07-05T10:06:52.229244Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:06:52.229244Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8iIVYimVS8+n+kVJYYPIk24CJBvqB9dfFqG37RX8N96+xdOdgklgWm6DAwfhY+RAcZPwESufiZ7M83+oW2+GDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:06:52.229777Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.17396","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:211eef4b7f0926627ec73fc7d9396142627cdf2298d72a8093eb9d393900050f","sha256:3eec81810c59d26cff882bcfc2f0abb7197f2e965887b1cfc52f621021a6bf94"],"state_sha256":"15913988a2c2d544c69b5806ad4ae948198694778ae5d0e1d5feca4157129826"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VzwJfyCednzDY4CHpOwtmZ77q+swuuB32nusowAHqV3Ms2MzLzx+W1KnESaPMu8GcHTlRuTT67nYAUch3hQmDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T08:27:21.887213Z","bundle_sha256":"0bd37e1b494dd12d248bb221a6dde14f21ecfe838cb4bed5a88e360900a51950"}}