{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:IVVECR3VPGURH6JANSBJ5PPJJW","short_pith_number":"pith:IVVECR3V","canonical_record":{"source":{"id":"2210.08418","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-16T02:52:18Z","cross_cats_sorted":[],"title_canon_sha256":"f8f624114a655d3d3132b03e14ac1c89ae95da76c43cd50896a84f61907405eb","abstract_canon_sha256":"b53ef602a2e47adc9170f38760f482611714a76a19f58e30af026b8ab08c9906"},"schema_version":"1.0"},"canonical_sha256":"456a41477579a913f9206c829ebde94dadababacbc8844796a1a7de47064aee1","source":{"kind":"arxiv","id":"2210.08418","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.08418","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"arxiv_version","alias_value":"2210.08418v1","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.08418","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"pith_short_12","alias_value":"IVVECR3VPGUR","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"pith_short_16","alias_value":"IVVECR3VPGURH6JA","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"pith_short_8","alias_value":"IVVECR3V","created_at":"2026-07-05T05:07:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:IVVECR3VPGURH6JANSBJ5PPJJW","target":"record","payload":{"canonical_record":{"source":{"id":"2210.08418","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-16T02:52:18Z","cross_cats_sorted":[],"title_canon_sha256":"f8f624114a655d3d3132b03e14ac1c89ae95da76c43cd50896a84f61907405eb","abstract_canon_sha256":"b53ef602a2e47adc9170f38760f482611714a76a19f58e30af026b8ab08c9906"},"schema_version":"1.0"},"canonical_sha256":"456a41477579a913f9206c829ebde94dadababacbc8844796a1a7de47064aee1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:07:10.717035Z","signature_b64":"bTFAsOZXDGIG8XcXZiTcllfGM61YfnbHxQ5NkGAl0MSLvhZdOLKCqiXCTNBr1TZRVJ7EEj4OZhaE331+sl8gCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"456a41477579a913f9206c829ebde94dadababacbc8844796a1a7de47064aee1","last_reissued_at":"2026-07-05T05:07:10.716661Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:07:10.716661Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.08418","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rHeA3JoX78kYW/vLIQjPzyDDV7byMJnQ6Qrb/2CwyStHHz+SiBmZ9PuVJoYEIh9obd33jjOYeJ87BdStoTxZAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:24:24.482908Z"},"content_sha256":"48127cf726c917ab762eda4c318242e0851ce9cb5ef9812a1cfc90ef53e43053","schema_version":"1.0","event_id":"sha256:48127cf726c917ab762eda4c318242e0851ce9cb5ef9812a1cfc90ef53e43053"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:IVVECR3VPGURH6JANSBJ5PPJJW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VerifyML: Obliviously Checking Model Fairness Resilient to Malicious Model Holder","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Anjia Yang, Gelei Deng, Guowen Xu, Hongwei Li, Jianting Ning, Shengmin Xu, Tianwei Zhang, Xingshuo Han","submitted_at":"2022-10-16T02:52:18Z","abstract_excerpt":"In this paper, we present VerifyML, the first secure inference framework to check the fairness degree of a given Machine learning (ML) model. VerifyML is generic and is immune to any obstruction by the malicious model holder during the verification process. We rely on secure two-party computation (2PC) technology to implement VerifyML, and carefully customize a series of optimization methods to boost its performance for both linear and nonlinear layer execution. Specifically, (1) VerifyML allows the vast majority of the overhead to be performed offline, thus meeting the low latency requirement"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.08418","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.08418/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"skCa22d4XdZV/kklfNP/cgYBUeWlS/QbsU/sM5LSz40igiRi0cLYfBSIwBORxQMuhBYXAlDBk591CPpuvUi2BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:24:24.483433Z"},"content_sha256":"10ee644085468ad41dbcffd6970146fc1109058aab3267bbede916f735c6bf51","schema_version":"1.0","event_id":"sha256:10ee644085468ad41dbcffd6970146fc1109058aab3267bbede916f735c6bf51"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IVVECR3VPGURH6JANSBJ5PPJJW/bundle.json","state_url":"https://pith.science/pith/IVVECR3VPGURH6JANSBJ5PPJJW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IVVECR3VPGURH6JANSBJ5PPJJW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T20:24:24Z","links":{"resolver":"https://pith.science/pith/IVVECR3VPGURH6JANSBJ5PPJJW","bundle":"https://pith.science/pith/IVVECR3VPGURH6JANSBJ5PPJJW/bundle.json","state":"https://pith.science/pith/IVVECR3VPGURH6JANSBJ5PPJJW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IVVECR3VPGURH6JANSBJ5PPJJW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:IVVECR3VPGURH6JANSBJ5PPJJW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b53ef602a2e47adc9170f38760f482611714a76a19f58e30af026b8ab08c9906","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-16T02:52:18Z","title_canon_sha256":"f8f624114a655d3d3132b03e14ac1c89ae95da76c43cd50896a84f61907405eb"},"schema_version":"1.0","source":{"id":"2210.08418","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.08418","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"arxiv_version","alias_value":"2210.08418v1","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.08418","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"pith_short_12","alias_value":"IVVECR3VPGUR","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"pith_short_16","alias_value":"IVVECR3VPGURH6JA","created_at":"2026-07-05T05:07:10Z"},{"alias_kind":"pith_short_8","alias_value":"IVVECR3V","created_at":"2026-07-05T05:07:10Z"}],"graph_snapshots":[{"event_id":"sha256:10ee644085468ad41dbcffd6970146fc1109058aab3267bbede916f735c6bf51","target":"graph","created_at":"2026-07-05T05:07:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.08418/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we present VerifyML, the first secure inference framework to check the fairness degree of a given Machine learning (ML) model. VerifyML is generic and is immune to any obstruction by the malicious model holder during the verification process. We rely on secure two-party computation (2PC) technology to implement VerifyML, and carefully customize a series of optimization methods to boost its performance for both linear and nonlinear layer execution. Specifically, (1) VerifyML allows the vast majority of the overhead to be performed offline, thus meeting the low latency requirement","authors_text":"Anjia Yang, Gelei Deng, Guowen Xu, Hongwei Li, Jianting Ning, Shengmin Xu, Tianwei Zhang, Xingshuo Han","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-16T02:52:18Z","title":"VerifyML: Obliviously Checking Model Fairness Resilient to Malicious Model Holder"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.08418","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:48127cf726c917ab762eda4c318242e0851ce9cb5ef9812a1cfc90ef53e43053","target":"record","created_at":"2026-07-05T05:07:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b53ef602a2e47adc9170f38760f482611714a76a19f58e30af026b8ab08c9906","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-16T02:52:18Z","title_canon_sha256":"f8f624114a655d3d3132b03e14ac1c89ae95da76c43cd50896a84f61907405eb"},"schema_version":"1.0","source":{"id":"2210.08418","kind":"arxiv","version":1}},"canonical_sha256":"456a41477579a913f9206c829ebde94dadababacbc8844796a1a7de47064aee1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"456a41477579a913f9206c829ebde94dadababacbc8844796a1a7de47064aee1","first_computed_at":"2026-07-05T05:07:10.716661Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:07:10.716661Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bTFAsOZXDGIG8XcXZiTcllfGM61YfnbHxQ5NkGAl0MSLvhZdOLKCqiXCTNBr1TZRVJ7EEj4OZhaE331+sl8gCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:07:10.717035Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.08418","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:48127cf726c917ab762eda4c318242e0851ce9cb5ef9812a1cfc90ef53e43053","sha256:10ee644085468ad41dbcffd6970146fc1109058aab3267bbede916f735c6bf51"],"state_sha256":"7ad605231c09a9943b90630f074dec41155df5f3aa2f6edd66c6e2f58ed5a094"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o5fGcYiMtphvVaqk7+JrLgHchylzN+Ve0bEs4jnOomqPwm73UzcN3r43w3DQQSqGWo+QSvfZRMDE6sBj9Od7AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T20:24:24.488506Z","bundle_sha256":"13a2e945bcd25f917c2fbd977fdbf44af57bb6582bce1af1462ffb3d987522ce"}}