{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KNPRSWBUWCE76WOLNCA33DHNUP","short_pith_number":"pith:KNPRSWBU","canonical_record":{"source":{"id":"2406.00999","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-03T05:15:04Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"8f3e9425c8fb05e38a20298f9db9b75260c086c5233b80aa1ccb5fc6780e6bd9","abstract_canon_sha256":"59bf74a85c334b09ac899f97a4aea2b716b453a7bf4e3e85c00f50bcc9838cdf"},"schema_version":"1.0"},"canonical_sha256":"535f195834b089ff59cb6881bd8ceda3eacedbee52520c64eaada2a3e259dd18","source":{"kind":"arxiv","id":"2406.00999","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.00999","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"arxiv_version","alias_value":"2406.00999v2","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.00999","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"pith_short_12","alias_value":"KNPRSWBUWCE7","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"pith_short_16","alias_value":"KNPRSWBUWCE76WOL","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"pith_short_8","alias_value":"KNPRSWBU","created_at":"2026-07-05T09:15:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KNPRSWBUWCE76WOLNCA33DHNUP","target":"record","payload":{"canonical_record":{"source":{"id":"2406.00999","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-03T05:15:04Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"8f3e9425c8fb05e38a20298f9db9b75260c086c5233b80aa1ccb5fc6780e6bd9","abstract_canon_sha256":"59bf74a85c334b09ac899f97a4aea2b716b453a7bf4e3e85c00f50bcc9838cdf"},"schema_version":"1.0"},"canonical_sha256":"535f195834b089ff59cb6881bd8ceda3eacedbee52520c64eaada2a3e259dd18","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:15:33.227303Z","signature_b64":"dA9mSWCEY++FUV1/sjh4eRi5D5yWyWJE2gjPZVNLaYyTVPkikkjTwOC6ykX6Sw05jY3XPKmZ9HwRs4UcNn7uCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"535f195834b089ff59cb6881bd8ceda3eacedbee52520c64eaada2a3e259dd18","last_reissued_at":"2026-07-05T09:15:33.226714Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:15:33.226714Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.00999","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:15:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OcLhAvKUFlD/jpAPkTk167Mm+ruU1YwFK/PX5wsomUvMhMwPcMKO9QnSeYDRpr8idYqs3dqrHBlG7LhNrBlxCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:42:37.540582Z"},"content_sha256":"46a2e2da02d1668ae2878737e7642142c364b547348ace77311ce3adc8c29091","schema_version":"1.0","event_id":"sha256:46a2e2da02d1668ae2878737e7642142c364b547348ace77311ce3adc8c29091"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KNPRSWBUWCE76WOLNCA33DHNUP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Seeing the Forest through the Trees: Data Leakage from Partial Transformer Gradients","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Mark Dras, Qiongkai Xu, Weijun Li","submitted_at":"2024-06-03T05:15:04Z","abstract_excerpt":"Recent studies have shown that distributed machine learning is vulnerable to gradient inversion attacks, where private training data can be reconstructed by analyzing the gradients of the models shared in training. Previous attacks established that such reconstructions are possible using gradients from all parameters in the entire models. However, we hypothesize that most of the involved modules, or even their sub-modules, are at risk of training data leakage, and we validate such vulnerabilities in various intermediate layers of language models. Our extensive experiments reveal that gradients"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.00999","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.00999/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:15:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OMOPsAvmLEPlZ6/yuFmiOkWZrEQ9nDCux/IVwuJ/Qq9JQy+OCz7C/izS9JfVGWItV5V9IYYTZ8o1WQjy3VMuAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:42:37.541110Z"},"content_sha256":"b1990b5dbe7c3bd7e8a190d0d9077364d5e9eab66ce5b14aa7ad1209c025a3ca","schema_version":"1.0","event_id":"sha256:b1990b5dbe7c3bd7e8a190d0d9077364d5e9eab66ce5b14aa7ad1209c025a3ca"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KNPRSWBUWCE76WOLNCA33DHNUP/bundle.json","state_url":"https://pith.science/pith/KNPRSWBUWCE76WOLNCA33DHNUP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KNPRSWBUWCE76WOLNCA33DHNUP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T12:42:37Z","links":{"resolver":"https://pith.science/pith/KNPRSWBUWCE76WOLNCA33DHNUP","bundle":"https://pith.science/pith/KNPRSWBUWCE76WOLNCA33DHNUP/bundle.json","state":"https://pith.science/pith/KNPRSWBUWCE76WOLNCA33DHNUP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KNPRSWBUWCE76WOLNCA33DHNUP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KNPRSWBUWCE76WOLNCA33DHNUP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"59bf74a85c334b09ac899f97a4aea2b716b453a7bf4e3e85c00f50bcc9838cdf","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-03T05:15:04Z","title_canon_sha256":"8f3e9425c8fb05e38a20298f9db9b75260c086c5233b80aa1ccb5fc6780e6bd9"},"schema_version":"1.0","source":{"id":"2406.00999","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.00999","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"arxiv_version","alias_value":"2406.00999v2","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.00999","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"pith_short_12","alias_value":"KNPRSWBUWCE7","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"pith_short_16","alias_value":"KNPRSWBUWCE76WOL","created_at":"2026-07-05T09:15:33Z"},{"alias_kind":"pith_short_8","alias_value":"KNPRSWBU","created_at":"2026-07-05T09:15:33Z"}],"graph_snapshots":[{"event_id":"sha256:b1990b5dbe7c3bd7e8a190d0d9077364d5e9eab66ce5b14aa7ad1209c025a3ca","target":"graph","created_at":"2026-07-05T09:15:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.00999/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have shown that distributed machine learning is vulnerable to gradient inversion attacks, where private training data can be reconstructed by analyzing the gradients of the models shared in training. Previous attacks established that such reconstructions are possible using gradients from all parameters in the entire models. However, we hypothesize that most of the involved modules, or even their sub-modules, are at risk of training data leakage, and we validate such vulnerabilities in various intermediate layers of language models. Our extensive experiments reveal that gradients","authors_text":"Mark Dras, Qiongkai Xu, Weijun Li","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-03T05:15:04Z","title":"Seeing the Forest through the Trees: Data Leakage from Partial Transformer Gradients"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.00999","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:46a2e2da02d1668ae2878737e7642142c364b547348ace77311ce3adc8c29091","target":"record","created_at":"2026-07-05T09:15:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"59bf74a85c334b09ac899f97a4aea2b716b453a7bf4e3e85c00f50bcc9838cdf","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-03T05:15:04Z","title_canon_sha256":"8f3e9425c8fb05e38a20298f9db9b75260c086c5233b80aa1ccb5fc6780e6bd9"},"schema_version":"1.0","source":{"id":"2406.00999","kind":"arxiv","version":2}},"canonical_sha256":"535f195834b089ff59cb6881bd8ceda3eacedbee52520c64eaada2a3e259dd18","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"535f195834b089ff59cb6881bd8ceda3eacedbee52520c64eaada2a3e259dd18","first_computed_at":"2026-07-05T09:15:33.226714Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:15:33.226714Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dA9mSWCEY++FUV1/sjh4eRi5D5yWyWJE2gjPZVNLaYyTVPkikkjTwOC6ykX6Sw05jY3XPKmZ9HwRs4UcNn7uCw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:15:33.227303Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.00999","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:46a2e2da02d1668ae2878737e7642142c364b547348ace77311ce3adc8c29091","sha256:b1990b5dbe7c3bd7e8a190d0d9077364d5e9eab66ce5b14aa7ad1209c025a3ca"],"state_sha256":"d3a5fe173ffa2cf1acbc02270b1035cfbbad39757750caeb928c678fc1a15475"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cP+HJAxGlgXuZDyn1izZR2aqHKjSwX5AFCNMPNI+GBgEiFnGfywUkg7eoewomiW0DYEzMNVFz9yHMR6026hBAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T12:42:37.545442Z","bundle_sha256":"250fa5f9740b392b83943731a22f8a3237b6fb8f5e90c743fa05ff92419971db"}}