{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:FLFK7X4FI24AGAUAVCC3GBKDKU","short_pith_number":"pith:FLFK7X4F","canonical_record":{"source":{"id":"2402.16934","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-26T17:53:15Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"5ded8ccfe07b5dc3348b1e5ce6f35c8074f5500e836c9e6d5e2d787fb0a7f0c5","abstract_canon_sha256":"96a435edd0b3cfb46be1012b81bb4b32c2f771da1b00f5d50a63cd99d4a99925"},"schema_version":"1.0"},"canonical_sha256":"2acaafdf8546b8030280a885b30543553c1a0997106e82bb524f04256acd0d8d","source":{"kind":"arxiv","id":"2402.16934","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16934","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16934v1","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16934","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_12","alias_value":"FLFK7X4FI24A","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_16","alias_value":"FLFK7X4FI24AGAUA","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_8","alias_value":"FLFK7X4F","created_at":"2026-07-05T07:49:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:FLFK7X4FI24AGAUAVCC3GBKDKU","target":"record","payload":{"canonical_record":{"source":{"id":"2402.16934","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-26T17:53:15Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"5ded8ccfe07b5dc3348b1e5ce6f35c8074f5500e836c9e6d5e2d787fb0a7f0c5","abstract_canon_sha256":"96a435edd0b3cfb46be1012b81bb4b32c2f771da1b00f5d50a63cd99d4a99925"},"schema_version":"1.0"},"canonical_sha256":"2acaafdf8546b8030280a885b30543553c1a0997106e82bb524f04256acd0d8d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:49:39.295261Z","signature_b64":"dRSaeGGynKe9GnEqgI3ypXI85ho8w79oCUPi/QanwMZAQ0xPI8y4OtybVRaWLyVaIt1fCKojOkNc/Qi99oiyAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2acaafdf8546b8030280a885b30543553c1a0997106e82bb524f04256acd0d8d","last_reissued_at":"2026-07-05T07:49:39.294800Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:49:39.294800Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.16934","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:49:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8pCSqbti6oV6R18GxayaVt6Ecr1wc/lMFCeloOsRI+eS7f0JHzdMW/VIWXqSbdmDqyhY7jSKlToxyw7tNjVoDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T22:58:29.023630Z"},"content_sha256":"0d4bf7541edd2f46132047ef722397742662380ac7cdd6b6de26bc00a42dbaf6","schema_version":"1.0","event_id":"sha256:0d4bf7541edd2f46132047ef722397742662380ac7cdd6b6de26bc00a42dbaf6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:FLFK7X4FI24AGAUAVCC3GBKDKU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FedReview: A Review Mechanism for Rejecting Poisoned Updates in Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Baochun Li, Tianhang Zheng","submitted_at":"2024-02-26T17:53:15Z","abstract_excerpt":"Federated learning has recently emerged as a decentralized approach to learn a high-performance model without access to user data. Despite its effectiveness, federated learning gives malicious users opportunities to manipulate the model by uploading poisoned model updates to the server. In this paper, we propose a review mechanism called FedReview to identify and decline the potential poisoned updates in federated learning. Under our mechanism, the server randomly assigns a subset of clients as reviewers to evaluate the model updates on their training datasets in each round. The reviewers rank"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16934","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.16934/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:49:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d2ObNDS524I0zuYRj2NzzyNdsz0ooOOEn2OQ15p6/zvdnPCwAfTljHZxTxov5DKHept7IICkt2QswXkUqLV+Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T22:58:29.024508Z"},"content_sha256":"9e265da9cbef6972675e21d3e1fe30a9586040a6e8cac0e7141100e91f5129f2","schema_version":"1.0","event_id":"sha256:9e265da9cbef6972675e21d3e1fe30a9586040a6e8cac0e7141100e91f5129f2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FLFK7X4FI24AGAUAVCC3GBKDKU/bundle.json","state_url":"https://pith.science/pith/FLFK7X4FI24AGAUAVCC3GBKDKU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FLFK7X4FI24AGAUAVCC3GBKDKU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T22:58:29Z","links":{"resolver":"https://pith.science/pith/FLFK7X4FI24AGAUAVCC3GBKDKU","bundle":"https://pith.science/pith/FLFK7X4FI24AGAUAVCC3GBKDKU/bundle.json","state":"https://pith.science/pith/FLFK7X4FI24AGAUAVCC3GBKDKU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FLFK7X4FI24AGAUAVCC3GBKDKU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:FLFK7X4FI24AGAUAVCC3GBKDKU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"96a435edd0b3cfb46be1012b81bb4b32c2f771da1b00f5d50a63cd99d4a99925","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-26T17:53:15Z","title_canon_sha256":"5ded8ccfe07b5dc3348b1e5ce6f35c8074f5500e836c9e6d5e2d787fb0a7f0c5"},"schema_version":"1.0","source":{"id":"2402.16934","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16934","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16934v1","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16934","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_12","alias_value":"FLFK7X4FI24A","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_16","alias_value":"FLFK7X4FI24AGAUA","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_8","alias_value":"FLFK7X4F","created_at":"2026-07-05T07:49:39Z"}],"graph_snapshots":[{"event_id":"sha256:9e265da9cbef6972675e21d3e1fe30a9586040a6e8cac0e7141100e91f5129f2","target":"graph","created_at":"2026-07-05T07:49:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.16934/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning has recently emerged as a decentralized approach to learn a high-performance model without access to user data. Despite its effectiveness, federated learning gives malicious users opportunities to manipulate the model by uploading poisoned model updates to the server. In this paper, we propose a review mechanism called FedReview to identify and decline the potential poisoned updates in federated learning. Under our mechanism, the server randomly assigns a subset of clients as reviewers to evaluate the model updates on their training datasets in each round. The reviewers rank","authors_text":"Baochun Li, Tianhang Zheng","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-26T17:53:15Z","title":"FedReview: A Review Mechanism for Rejecting Poisoned Updates in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16934","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0d4bf7541edd2f46132047ef722397742662380ac7cdd6b6de26bc00a42dbaf6","target":"record","created_at":"2026-07-05T07:49:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"96a435edd0b3cfb46be1012b81bb4b32c2f771da1b00f5d50a63cd99d4a99925","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-26T17:53:15Z","title_canon_sha256":"5ded8ccfe07b5dc3348b1e5ce6f35c8074f5500e836c9e6d5e2d787fb0a7f0c5"},"schema_version":"1.0","source":{"id":"2402.16934","kind":"arxiv","version":1}},"canonical_sha256":"2acaafdf8546b8030280a885b30543553c1a0997106e82bb524f04256acd0d8d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2acaafdf8546b8030280a885b30543553c1a0997106e82bb524f04256acd0d8d","first_computed_at":"2026-07-05T07:49:39.294800Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:49:39.294800Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dRSaeGGynKe9GnEqgI3ypXI85ho8w79oCUPi/QanwMZAQ0xPI8y4OtybVRaWLyVaIt1fCKojOkNc/Qi99oiyAw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:49:39.295261Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.16934","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0d4bf7541edd2f46132047ef722397742662380ac7cdd6b6de26bc00a42dbaf6","sha256:9e265da9cbef6972675e21d3e1fe30a9586040a6e8cac0e7141100e91f5129f2"],"state_sha256":"2fbbd6f5c81bc76a37c18bcfd8e6b6fdf710d306bf46af8c6c224eeb603aa17d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OCaTF+OOX83JfYa6mv3u0AcZlSdUIb22GjMcqY5kH7Y+8QdB1npRFGeI8pEOwmBJ/Lp8MpJnhjp5f5m7T3qYBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T22:58:29.030721Z","bundle_sha256":"1f152e7a946aed917737fc0b04efec03e11585d7fa53e7f356283d6767edd1a8"}}