{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:GQNVQBMV5NHOUZTJLUKNSUYSMI","short_pith_number":"pith:GQNVQBMV","canonical_record":{"source":{"id":"2310.00096","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-29T19:09:27Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"4cd05947f3404ab10ea79da0d51e583bb7ef3c705dd62080e59d4daf274a37a9","abstract_canon_sha256":"86921c328ec6f5a8515950523018114cb540bce33ec2280ff46ab0e5f759a5db"},"schema_version":"1.0"},"canonical_sha256":"341b580595eb4eea66695d14d95312620bd4e46e1204e9425be95afdacb72e95","source":{"kind":"arxiv","id":"2310.00096","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.00096","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"arxiv_version","alias_value":"2310.00096v2","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.00096","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"pith_short_12","alias_value":"GQNVQBMV5NHO","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"GQNVQBMV5NHOUZTJ","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"GQNVQBMV","created_at":"2026-07-05T10:31:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:GQNVQBMV5NHOUZTJLUKNSUYSMI","target":"record","payload":{"canonical_record":{"source":{"id":"2310.00096","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-29T19:09:27Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"4cd05947f3404ab10ea79da0d51e583bb7ef3c705dd62080e59d4daf274a37a9","abstract_canon_sha256":"86921c328ec6f5a8515950523018114cb540bce33ec2280ff46ab0e5f759a5db"},"schema_version":"1.0"},"canonical_sha256":"341b580595eb4eea66695d14d95312620bd4e46e1204e9425be95afdacb72e95","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:31:21.992607Z","signature_b64":"JUKIjA72U8TQQU9/b2Gw7tTGTusdBsof6eatexixgA6IHVNmV4x0g9swB4jGb/nenFRIv+8mWdwmt8h1a55gDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"341b580595eb4eea66695d14d95312620bd4e46e1204e9425be95afdacb72e95","last_reissued_at":"2026-07-05T10:31:21.991913Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:31:21.991913Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.00096","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UcZrxZ0cBJKKQI474a1dnV/PTg3HwihUO5SLVArGJiJmSFy/vEhRL/bnt+/qKMsExdxDTrP1RdZ2DqPAcsNdDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T07:06:33.423295Z"},"content_sha256":"4e63d387b304ada06fdc63f4751a97958e0b456af617c3cf719032a65adeb740","schema_version":"1.0","event_id":"sha256:4e63d387b304ada06fdc63f4751a97958e0b456af617c3cf719032a65adeb740"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:GQNVQBMV5NHOUZTJLUKNSUYSMI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Few-Call Model Stealing via Active Self-Paced Knowledge Distillation and Diffusion-Based Image Generation","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Radu Tudor Ionescu, Vlad Hondru","submitted_at":"2023-09-29T19:09:27Z","abstract_excerpt":"Diffusion models showcase strong capabilities in image synthesis, being used in many computer vision tasks with great success. To this end, we propose to explore a new use case, namely to copy black-box classification models without having access to the original training data, the architecture, and the weights of the model, i.e. the model is only exposed through an inference API. More specifically, we can only observe the (soft or hard) labels for some image samples passed as input to the model. Furthermore, we consider an additional constraint limiting the number of model calls, mostly focusi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.00096","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.00096/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Eb6Baro2mDtM2RiNVj0UcOn8hVd8rZxHcFDlYd9ksFfdWtPEHAntk3IJdd2fl4hZQFuMr1rdrsfTTJMk+zSPCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T07:06:33.423846Z"},"content_sha256":"414cf7837e7da160464a20cc23c17936fa88559019733ae4c33b6c631c668955","schema_version":"1.0","event_id":"sha256:414cf7837e7da160464a20cc23c17936fa88559019733ae4c33b6c631c668955"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GQNVQBMV5NHOUZTJLUKNSUYSMI/bundle.json","state_url":"https://pith.science/pith/GQNVQBMV5NHOUZTJLUKNSUYSMI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GQNVQBMV5NHOUZTJLUKNSUYSMI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T07:06:33Z","links":{"resolver":"https://pith.science/pith/GQNVQBMV5NHOUZTJLUKNSUYSMI","bundle":"https://pith.science/pith/GQNVQBMV5NHOUZTJLUKNSUYSMI/bundle.json","state":"https://pith.science/pith/GQNVQBMV5NHOUZTJLUKNSUYSMI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GQNVQBMV5NHOUZTJLUKNSUYSMI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:GQNVQBMV5NHOUZTJLUKNSUYSMI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"86921c328ec6f5a8515950523018114cb540bce33ec2280ff46ab0e5f759a5db","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-29T19:09:27Z","title_canon_sha256":"4cd05947f3404ab10ea79da0d51e583bb7ef3c705dd62080e59d4daf274a37a9"},"schema_version":"1.0","source":{"id":"2310.00096","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.00096","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"arxiv_version","alias_value":"2310.00096v2","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.00096","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"pith_short_12","alias_value":"GQNVQBMV5NHO","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"GQNVQBMV5NHOUZTJ","created_at":"2026-07-05T10:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"GQNVQBMV","created_at":"2026-07-05T10:31:21Z"}],"graph_snapshots":[{"event_id":"sha256:414cf7837e7da160464a20cc23c17936fa88559019733ae4c33b6c631c668955","target":"graph","created_at":"2026-07-05T10:31:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.00096/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models showcase strong capabilities in image synthesis, being used in many computer vision tasks with great success. To this end, we propose to explore a new use case, namely to copy black-box classification models without having access to the original training data, the architecture, and the weights of the model, i.e. the model is only exposed through an inference API. More specifically, we can only observe the (soft or hard) labels for some image samples passed as input to the model. Furthermore, we consider an additional constraint limiting the number of model calls, mostly focusi","authors_text":"Radu Tudor Ionescu, Vlad Hondru","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-29T19:09:27Z","title":"Towards Few-Call Model Stealing via Active Self-Paced Knowledge Distillation and Diffusion-Based Image Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.00096","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4e63d387b304ada06fdc63f4751a97958e0b456af617c3cf719032a65adeb740","target":"record","created_at":"2026-07-05T10:31:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"86921c328ec6f5a8515950523018114cb540bce33ec2280ff46ab0e5f759a5db","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-29T19:09:27Z","title_canon_sha256":"4cd05947f3404ab10ea79da0d51e583bb7ef3c705dd62080e59d4daf274a37a9"},"schema_version":"1.0","source":{"id":"2310.00096","kind":"arxiv","version":2}},"canonical_sha256":"341b580595eb4eea66695d14d95312620bd4e46e1204e9425be95afdacb72e95","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"341b580595eb4eea66695d14d95312620bd4e46e1204e9425be95afdacb72e95","first_computed_at":"2026-07-05T10:31:21.991913Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:31:21.991913Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JUKIjA72U8TQQU9/b2Gw7tTGTusdBsof6eatexixgA6IHVNmV4x0g9swB4jGb/nenFRIv+8mWdwmt8h1a55gDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:31:21.992607Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.00096","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4e63d387b304ada06fdc63f4751a97958e0b456af617c3cf719032a65adeb740","sha256:414cf7837e7da160464a20cc23c17936fa88559019733ae4c33b6c631c668955"],"state_sha256":"967cb43df54eeb76d0a953994c671928b137ee6ca6fc93b566fcbc0eaffc35dc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cTxN738Jf1fOmRD5nQUonsZN+JsLryAM8VorVXXs3y8VZ6UbnpM98yR8R3ATncaYRh2BwWCFhH9kH72dKMmFBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T07:06:33.429525Z","bundle_sha256":"d70f150090e076c79270d3432242110140f41a34fac41ac030bf3feed75e2edd"}}