{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HI4236PBMGVKBQDXCRG6BI7PKW","short_pith_number":"pith:HI4236PB","canonical_record":{"source":{"id":"2507.04119","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-05T18:03:52Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"3f3cf8867db7c927444a51784c238260f4853748013207f0059fcb5c8c1ebf37","abstract_canon_sha256":"e8b080809c6ebecf1bfd3f732b0fbcffb8d59e4cd4558b88e5a91c80bdc63be2"},"schema_version":"1.0"},"canonical_sha256":"3a39adf9e161aaa0c077144de0a3ef558e69e65a3f3dfca9f456f7436ebb6a48","source":{"kind":"arxiv","id":"2507.04119","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.04119","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"arxiv_version","alias_value":"2507.04119v1","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.04119","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"pith_short_12","alias_value":"HI4236PBMGVK","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"pith_short_16","alias_value":"HI4236PBMGVKBQDX","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"pith_short_8","alias_value":"HI4236PB","created_at":"2026-07-05T11:32:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HI4236PBMGVKBQDXCRG6BI7PKW","target":"record","payload":{"canonical_record":{"source":{"id":"2507.04119","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-05T18:03:52Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"3f3cf8867db7c927444a51784c238260f4853748013207f0059fcb5c8c1ebf37","abstract_canon_sha256":"e8b080809c6ebecf1bfd3f732b0fbcffb8d59e4cd4558b88e5a91c80bdc63be2"},"schema_version":"1.0"},"canonical_sha256":"3a39adf9e161aaa0c077144de0a3ef558e69e65a3f3dfca9f456f7436ebb6a48","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:32:42.311752Z","signature_b64":"99hEHu2TaZRX32h1jEtvugQ8FtYaIRDAkDELou6dCQ00BH8QNwlF89JOSgG6lxp0QQT205MUjRh1hLEyLIFGCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3a39adf9e161aaa0c077144de0a3ef558e69e65a3f3dfca9f456f7436ebb6a48","last_reissued_at":"2026-07-05T11:32:42.311186Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:32:42.311186Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.04119","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:32:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5y48K5bK6luLfojkCV3fCnhQLj2jT9luzi4MkqGdRg+R84EZk68PzDlzQuEYxMzTkK9YorvTSrKwcTLpYAMTCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T07:07:08.646773Z"},"content_sha256":"36f2dd1b469e56553547e669f39921416f6572d8c7af4b37e8b05a3eb5555040","schema_version":"1.0","event_id":"sha256:36f2dd1b469e56553547e669f39921416f6572d8c7af4b37e8b05a3eb5555040"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HI4236PBMGVKBQDXCRG6BI7PKW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Data-Free Knowledge Distillation Meets Non-Transferable Teacher: Escaping Out-of-Distribution Trap is All You Need","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Bo Du, Bo Han, Runnan Chen, Tongliang Liu, Zengmao Wang, Ziming Hong","submitted_at":"2025-07-05T18:03:52Z","abstract_excerpt":"Data-free knowledge distillation (DFKD) transfers knowledge from a teacher to a student without access the real in-distribution (ID) data. Its common solution is to use a generator to synthesize fake data and use them as a substitute for real ID data. However, existing works typically assume teachers are trustworthy, leaving the robustness and security of DFKD from untrusted teachers largely unexplored. In this work, we conduct the first investigation into distilling non-transferable learning (NTL) teachers using DFKD, where the transferability from an ID domain to an out-of-distribution (OOD)"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.04119","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.04119/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:32:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k7smS0lZJNrbBvlP/XxDNxRbq9AANiAxTXDkinljCbbRX5ydHYC4SCoAhEMnFA7s9i7fPYAT8fyw0B5zAvWGAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T07:07:08.647701Z"},"content_sha256":"28ab46d92cb21453d37430c8ef1d73f301ca5b2d74b4a97194e56ed3fd544215","schema_version":"1.0","event_id":"sha256:28ab46d92cb21453d37430c8ef1d73f301ca5b2d74b4a97194e56ed3fd544215"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HI4236PBMGVKBQDXCRG6BI7PKW/bundle.json","state_url":"https://pith.science/pith/HI4236PBMGVKBQDXCRG6BI7PKW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HI4236PBMGVKBQDXCRG6BI7PKW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T07:07:08Z","links":{"resolver":"https://pith.science/pith/HI4236PBMGVKBQDXCRG6BI7PKW","bundle":"https://pith.science/pith/HI4236PBMGVKBQDXCRG6BI7PKW/bundle.json","state":"https://pith.science/pith/HI4236PBMGVKBQDXCRG6BI7PKW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HI4236PBMGVKBQDXCRG6BI7PKW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HI4236PBMGVKBQDXCRG6BI7PKW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e8b080809c6ebecf1bfd3f732b0fbcffb8d59e4cd4558b88e5a91c80bdc63be2","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-05T18:03:52Z","title_canon_sha256":"3f3cf8867db7c927444a51784c238260f4853748013207f0059fcb5c8c1ebf37"},"schema_version":"1.0","source":{"id":"2507.04119","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.04119","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"arxiv_version","alias_value":"2507.04119v1","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.04119","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"pith_short_12","alias_value":"HI4236PBMGVK","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"pith_short_16","alias_value":"HI4236PBMGVKBQDX","created_at":"2026-07-05T11:32:42Z"},{"alias_kind":"pith_short_8","alias_value":"HI4236PB","created_at":"2026-07-05T11:32:42Z"}],"graph_snapshots":[{"event_id":"sha256:28ab46d92cb21453d37430c8ef1d73f301ca5b2d74b4a97194e56ed3fd544215","target":"graph","created_at":"2026-07-05T11:32:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.04119/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data-free knowledge distillation (DFKD) transfers knowledge from a teacher to a student without access the real in-distribution (ID) data. Its common solution is to use a generator to synthesize fake data and use them as a substitute for real ID data. However, existing works typically assume teachers are trustworthy, leaving the robustness and security of DFKD from untrusted teachers largely unexplored. In this work, we conduct the first investigation into distilling non-transferable learning (NTL) teachers using DFKD, where the transferability from an ID domain to an out-of-distribution (OOD)","authors_text":"Bo Du, Bo Han, Runnan Chen, Tongliang Liu, Zengmao Wang, Ziming Hong","cross_cats":["cs.AI","cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-05T18:03:52Z","title":"When Data-Free Knowledge Distillation Meets Non-Transferable Teacher: Escaping Out-of-Distribution Trap is All You Need"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.04119","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:36f2dd1b469e56553547e669f39921416f6572d8c7af4b37e8b05a3eb5555040","target":"record","created_at":"2026-07-05T11:32:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e8b080809c6ebecf1bfd3f732b0fbcffb8d59e4cd4558b88e5a91c80bdc63be2","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-05T18:03:52Z","title_canon_sha256":"3f3cf8867db7c927444a51784c238260f4853748013207f0059fcb5c8c1ebf37"},"schema_version":"1.0","source":{"id":"2507.04119","kind":"arxiv","version":1}},"canonical_sha256":"3a39adf9e161aaa0c077144de0a3ef558e69e65a3f3dfca9f456f7436ebb6a48","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3a39adf9e161aaa0c077144de0a3ef558e69e65a3f3dfca9f456f7436ebb6a48","first_computed_at":"2026-07-05T11:32:42.311186Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:32:42.311186Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"99hEHu2TaZRX32h1jEtvugQ8FtYaIRDAkDELou6dCQ00BH8QNwlF89JOSgG6lxp0QQT205MUjRh1hLEyLIFGCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:32:42.311752Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.04119","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:36f2dd1b469e56553547e669f39921416f6572d8c7af4b37e8b05a3eb5555040","sha256:28ab46d92cb21453d37430c8ef1d73f301ca5b2d74b4a97194e56ed3fd544215"],"state_sha256":"b7a88c39ff09ca4bd916d7e3464bb887cb5b0083ba72b0c94da286f31b71bcf9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gXEv5m1y/eqe3wbkx+PIIuAuOTob6HgrEeYsEitbDCsJjPwOY+mFr5hHcTNEFaDcX9Nof1Wd3Ek4xhLpF2BgDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T07:07:08.675900Z","bundle_sha256":"f375731d949745d2cf91d215c8d9cf8bad41cbc10624a71bb9dc3d55c3fe331b"}}