{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HOQXQGWIID7N4T3JWFKOJ4WRN5","short_pith_number":"pith:HOQXQGWI","canonical_record":{"source":{"id":"2509.05350","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-02T18:44:07Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0653c50abd03f6e0623a841729d40d689d882ecde17e6dccc98bfa8dfd914e49","abstract_canon_sha256":"5c5c77395d240a1c40be161f44c5d2fd7a3f2fe4312de0dc443270078b8cdc41"},"schema_version":"1.0"},"canonical_sha256":"3ba1781ac840fede4f69b154e4f2d16f4662dc2555be336a5460f85afb6bdef4","source":{"kind":"arxiv","id":"2509.05350","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05350","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05350v1","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05350","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"pith_short_12","alias_value":"HOQXQGWIID7N","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"pith_short_16","alias_value":"HOQXQGWIID7N4T3J","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"pith_short_8","alias_value":"HOQXQGWI","created_at":"2026-07-05T12:05:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HOQXQGWIID7N4T3JWFKOJ4WRN5","target":"record","payload":{"canonical_record":{"source":{"id":"2509.05350","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-02T18:44:07Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0653c50abd03f6e0623a841729d40d689d882ecde17e6dccc98bfa8dfd914e49","abstract_canon_sha256":"5c5c77395d240a1c40be161f44c5d2fd7a3f2fe4312de0dc443270078b8cdc41"},"schema_version":"1.0"},"canonical_sha256":"3ba1781ac840fede4f69b154e4f2d16f4662dc2555be336a5460f85afb6bdef4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:05:45.676555Z","signature_b64":"+bGnD7AQQuogDGTvdx19soMQgwTiJ2q7PfwL5gwj1cqHQyWnKGR3zgtaHa4VGIHPtDyWCDqfQN+/nx49y7AhBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3ba1781ac840fede4f69b154e4f2d16f4662dc2555be336a5460f85afb6bdef4","last_reissued_at":"2026-07-05T12:05:45.676031Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:05:45.676031Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.05350","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aXEd7sA9W9JhP5c4JgHvX46F+qUp54uOh3TG72fMoxM3R7UiClFCmSYrSQ23yZ02esLKwOE9jiZRkdH5C8+PBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T23:26:11.932211Z"},"content_sha256":"e713a196261b6c0020f7f2aecfd084ccc5905524dce7323658d19a6cc1ed9232","schema_version":"1.0","event_id":"sha256:e713a196261b6c0020f7f2aecfd084ccc5905524dce7323658d19a6cc1ed9232"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HOQXQGWIID7N4T3JWFKOJ4WRN5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Ensembling Membership Inference Attacks Against Tabular Generative Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chi-Hua Wang, Guang Cheng, Joshua Ward, Yuxuan Yang","submitted_at":"2025-09-02T18:44:07Z","abstract_excerpt":"Membership Inference Attacks (MIAs) have emerged as a principled framework for auditing the privacy of synthetic data generated by tabular generative models, where many diverse methods have been proposed that each exploit different privacy leakage signals. However, in realistic threat scenarios, an adversary must choose a single method without a priori guarantee that it will be the empirically highest performing option. We study this challenge as a decision theoretic problem under uncertainty and conduct the largest synthetic data privacy benchmark to date. Here, we find that no MIA constitute"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05350","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.05350/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yWtvceP/8gcPR7o+AA0I2CehSG6HEN2MKs6WMsaL0vYGRvjFf+GmcGqtxWGXAZo1y33thbOKbXHqxp4K6NEmDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T23:26:11.932825Z"},"content_sha256":"811d8fd33f4788462029c33972e2a5c1446c180bc60f1903201257e3f8e131d4","schema_version":"1.0","event_id":"sha256:811d8fd33f4788462029c33972e2a5c1446c180bc60f1903201257e3f8e131d4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HOQXQGWIID7N4T3JWFKOJ4WRN5/bundle.json","state_url":"https://pith.science/pith/HOQXQGWIID7N4T3JWFKOJ4WRN5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HOQXQGWIID7N4T3JWFKOJ4WRN5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T23:26:11Z","links":{"resolver":"https://pith.science/pith/HOQXQGWIID7N4T3JWFKOJ4WRN5","bundle":"https://pith.science/pith/HOQXQGWIID7N4T3JWFKOJ4WRN5/bundle.json","state":"https://pith.science/pith/HOQXQGWIID7N4T3JWFKOJ4WRN5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HOQXQGWIID7N4T3JWFKOJ4WRN5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HOQXQGWIID7N4T3JWFKOJ4WRN5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c5c77395d240a1c40be161f44c5d2fd7a3f2fe4312de0dc443270078b8cdc41","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-02T18:44:07Z","title_canon_sha256":"0653c50abd03f6e0623a841729d40d689d882ecde17e6dccc98bfa8dfd914e49"},"schema_version":"1.0","source":{"id":"2509.05350","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05350","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05350v1","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05350","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"pith_short_12","alias_value":"HOQXQGWIID7N","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"pith_short_16","alias_value":"HOQXQGWIID7N4T3J","created_at":"2026-07-05T12:05:45Z"},{"alias_kind":"pith_short_8","alias_value":"HOQXQGWI","created_at":"2026-07-05T12:05:45Z"}],"graph_snapshots":[{"event_id":"sha256:811d8fd33f4788462029c33972e2a5c1446c180bc60f1903201257e3f8e131d4","target":"graph","created_at":"2026-07-05T12:05:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.05350/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership Inference Attacks (MIAs) have emerged as a principled framework for auditing the privacy of synthetic data generated by tabular generative models, where many diverse methods have been proposed that each exploit different privacy leakage signals. However, in realistic threat scenarios, an adversary must choose a single method without a priori guarantee that it will be the empirically highest performing option. We study this challenge as a decision theoretic problem under uncertainty and conduct the largest synthetic data privacy benchmark to date. Here, we find that no MIA constitute","authors_text":"Chi-Hua Wang, Guang Cheng, Joshua Ward, Yuxuan Yang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-02T18:44:07Z","title":"Ensembling Membership Inference Attacks Against Tabular Generative Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05350","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e713a196261b6c0020f7f2aecfd084ccc5905524dce7323658d19a6cc1ed9232","target":"record","created_at":"2026-07-05T12:05:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c5c77395d240a1c40be161f44c5d2fd7a3f2fe4312de0dc443270078b8cdc41","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-02T18:44:07Z","title_canon_sha256":"0653c50abd03f6e0623a841729d40d689d882ecde17e6dccc98bfa8dfd914e49"},"schema_version":"1.0","source":{"id":"2509.05350","kind":"arxiv","version":1}},"canonical_sha256":"3ba1781ac840fede4f69b154e4f2d16f4662dc2555be336a5460f85afb6bdef4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ba1781ac840fede4f69b154e4f2d16f4662dc2555be336a5460f85afb6bdef4","first_computed_at":"2026-07-05T12:05:45.676031Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:05:45.676031Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+bGnD7AQQuogDGTvdx19soMQgwTiJ2q7PfwL5gwj1cqHQyWnKGR3zgtaHa4VGIHPtDyWCDqfQN+/nx49y7AhBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:05:45.676555Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.05350","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e713a196261b6c0020f7f2aecfd084ccc5905524dce7323658d19a6cc1ed9232","sha256:811d8fd33f4788462029c33972e2a5c1446c180bc60f1903201257e3f8e131d4"],"state_sha256":"9d9feb60b08e7045884fb356e4617b1bd3dde1228150ecc5b1623246877034c1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OgRQyV7p2KHdzM5wjVo/N6xOPcUoYDLqjGLKsUeFreRtxJxM9D4OVjtD2thhkX+vSxxHg1T+QjvIWwvUYuV3CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T23:26:11.937591Z","bundle_sha256":"602f035fc5a909ea5d6661252cbac1c659ba31adb3f4c9c55c51229101ba014d"}}