{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JLG3Z3M7DKO4XE2SNUZLZ7ZUF7","short_pith_number":"pith:JLG3Z3M7","canonical_record":{"source":{"id":"2501.15718","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-27T01:06:23Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b6d13285779d5ba13be6c2b46316239453a3f418993ca2314852e277062cdc6c","abstract_canon_sha256":"30ce85e408814a09fefb7c24577789d03b240dd891dd58a9ec9380602c437f82"},"schema_version":"1.0"},"canonical_sha256":"4acdbced9f1a9dcb93526d32bcff342fc0f3e0b227e3a3155b58964b22d9cef4","source":{"kind":"arxiv","id":"2501.15718","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.15718","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"arxiv_version","alias_value":"2501.15718v1","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.15718","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"pith_short_12","alias_value":"JLG3Z3M7DKO4","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"pith_short_16","alias_value":"JLG3Z3M7DKO4XE2S","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"pith_short_8","alias_value":"JLG3Z3M7","created_at":"2026-07-05T10:05:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JLG3Z3M7DKO4XE2SNUZLZ7ZUF7","target":"record","payload":{"canonical_record":{"source":{"id":"2501.15718","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-27T01:06:23Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b6d13285779d5ba13be6c2b46316239453a3f418993ca2314852e277062cdc6c","abstract_canon_sha256":"30ce85e408814a09fefb7c24577789d03b240dd891dd58a9ec9380602c437f82"},"schema_version":"1.0"},"canonical_sha256":"4acdbced9f1a9dcb93526d32bcff342fc0f3e0b227e3a3155b58964b22d9cef4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:05:33.338487Z","signature_b64":"6PUyB1WjDrBuNAc99WAkmQT/AR4PtF0yZdUxCqaa8uMR6KsMpTm1AN38bOGxMtsUa/+PT06gfMizr4/7r5JDBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4acdbced9f1a9dcb93526d32bcff342fc0f3e0b227e3a3155b58964b22d9cef4","last_reissued_at":"2026-07-05T10:05:33.337907Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:05:33.337907Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.15718","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZkFskKaLkHXtgSEtZosl+J+5vOWI8/SDqyN/GkmEZAAIYrzP3xNKtMf5nKD2JQHm2U7UIxf7nfm7B2zSxPihAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T10:15:56.088150Z"},"content_sha256":"81e94aba31e0b71eb5d19faa671dc625e30edf63cb497da212dbd77f8c32be06","schema_version":"1.0","event_id":"sha256:81e94aba31e0b71eb5d19faa671dc625e30edf63cb497da212dbd77f8c32be06"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JLG3Z3M7DKO4XE2SNUZLZ7ZUF7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Bruno Ribeiro, Guangyu Shen, Kaiyuan Zhang, Ninghui Li, Pin-Yu Chen, Shengwei An, Siyuan Cheng, Xiangyu Zhang","submitted_at":"2025-01-27T01:06:23Z","abstract_excerpt":"Federated learning collaboratively trains a neural network on a global server, where each local client receives the current global model weights and sends back parameter updates (gradients) based on its local private data. The process of sending these model updates may leak client's private data information. Existing gradient inversion attacks can exploit this vulnerability to recover private training instances from a client's gradient vectors. Recently, researchers have proposed advanced gradient inversion techniques that existing defenses struggle to handle effectively. In this work, we pres"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.15718","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.15718/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PQvmam1yYTXgQOe6F7B55fVffXJT71BApCdQ5sghOs7PeNW1uq7q0xQN06GHt26/T+/jkgXvH8HTdCeGCUr8Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T10:15:56.088505Z"},"content_sha256":"dba581a28b8951901ee89f4ead5154e9ccc780016895c7ecd8228ad8ea26096b","schema_version":"1.0","event_id":"sha256:dba581a28b8951901ee89f4ead5154e9ccc780016895c7ecd8228ad8ea26096b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JLG3Z3M7DKO4XE2SNUZLZ7ZUF7/bundle.json","state_url":"https://pith.science/pith/JLG3Z3M7DKO4XE2SNUZLZ7ZUF7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JLG3Z3M7DKO4XE2SNUZLZ7ZUF7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T10:15:56Z","links":{"resolver":"https://pith.science/pith/JLG3Z3M7DKO4XE2SNUZLZ7ZUF7","bundle":"https://pith.science/pith/JLG3Z3M7DKO4XE2SNUZLZ7ZUF7/bundle.json","state":"https://pith.science/pith/JLG3Z3M7DKO4XE2SNUZLZ7ZUF7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JLG3Z3M7DKO4XE2SNUZLZ7ZUF7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JLG3Z3M7DKO4XE2SNUZLZ7ZUF7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"30ce85e408814a09fefb7c24577789d03b240dd891dd58a9ec9380602c437f82","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-27T01:06:23Z","title_canon_sha256":"b6d13285779d5ba13be6c2b46316239453a3f418993ca2314852e277062cdc6c"},"schema_version":"1.0","source":{"id":"2501.15718","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.15718","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"arxiv_version","alias_value":"2501.15718v1","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.15718","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"pith_short_12","alias_value":"JLG3Z3M7DKO4","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"pith_short_16","alias_value":"JLG3Z3M7DKO4XE2S","created_at":"2026-07-05T10:05:33Z"},{"alias_kind":"pith_short_8","alias_value":"JLG3Z3M7","created_at":"2026-07-05T10:05:33Z"}],"graph_snapshots":[{"event_id":"sha256:dba581a28b8951901ee89f4ead5154e9ccc780016895c7ecd8228ad8ea26096b","target":"graph","created_at":"2026-07-05T10:05:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.15718/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning collaboratively trains a neural network on a global server, where each local client receives the current global model weights and sends back parameter updates (gradients) based on its local private data. The process of sending these model updates may leak client's private data information. Existing gradient inversion attacks can exploit this vulnerability to recover private training instances from a client's gradient vectors. Recently, researchers have proposed advanced gradient inversion techniques that existing defenses struggle to handle effectively. In this work, we pres","authors_text":"Bruno Ribeiro, Guangyu Shen, Kaiyuan Zhang, Ninghui Li, Pin-Yu Chen, Shengwei An, Siyuan Cheng, Xiangyu Zhang","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-27T01:06:23Z","title":"CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.15718","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:81e94aba31e0b71eb5d19faa671dc625e30edf63cb497da212dbd77f8c32be06","target":"record","created_at":"2026-07-05T10:05:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"30ce85e408814a09fefb7c24577789d03b240dd891dd58a9ec9380602c437f82","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-27T01:06:23Z","title_canon_sha256":"b6d13285779d5ba13be6c2b46316239453a3f418993ca2314852e277062cdc6c"},"schema_version":"1.0","source":{"id":"2501.15718","kind":"arxiv","version":1}},"canonical_sha256":"4acdbced9f1a9dcb93526d32bcff342fc0f3e0b227e3a3155b58964b22d9cef4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4acdbced9f1a9dcb93526d32bcff342fc0f3e0b227e3a3155b58964b22d9cef4","first_computed_at":"2026-07-05T10:05:33.337907Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:05:33.337907Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6PUyB1WjDrBuNAc99WAkmQT/AR4PtF0yZdUxCqaa8uMR6KsMpTm1AN38bOGxMtsUa/+PT06gfMizr4/7r5JDBg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:05:33.338487Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.15718","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:81e94aba31e0b71eb5d19faa671dc625e30edf63cb497da212dbd77f8c32be06","sha256:dba581a28b8951901ee89f4ead5154e9ccc780016895c7ecd8228ad8ea26096b"],"state_sha256":"aaf4fc6dc0101dc004a66f62c0c0d5e21d6ceea412e1d086c82483ff8de2eedd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OetkNyS/PqdbQbF5N2q0AsZhGsfi90Kj1s6nsKr69wtI58F0BLT8T3GDCE2Ss40jwR5g/jdDxHxAbqoJRuEgDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T10:15:56.092345Z","bundle_sha256":"aa8a2cc39223325d7f99ffdb2297ff5c91f86d739d2f8bb0f920090853b80529"}}