{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:KOJS2O7Z6RVV6K34RV2XN2KHET","short_pith_number":"pith:KOJS2O7Z","canonical_record":{"source":{"id":"2605.21185","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T13:50:26Z","cross_cats_sorted":["cs.IT","math.IT"],"title_canon_sha256":"4fb696035c853dd2887faa81b57b6b471613f61399c8519ee96bd783b55c7538","abstract_canon_sha256":"a607a872acb04e1633e97565c3cf8927431d0d0788c2df8529548492c8f808f5"},"schema_version":"1.0"},"canonical_sha256":"53932d3bf9f46b5f2b7c8d7576e94724e8ea350761d06eebbf9bbfef0a06c849","source":{"kind":"arxiv","id":"2605.21185","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.21185","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"arxiv_version","alias_value":"2605.21185v1","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.21185","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"pith_short_12","alias_value":"KOJS2O7Z6RVV","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"pith_short_16","alias_value":"KOJS2O7Z6RVV6K34","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"pith_short_8","alias_value":"KOJS2O7Z","created_at":"2026-05-21T01:05:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:KOJS2O7Z6RVV6K34RV2XN2KHET","target":"record","payload":{"canonical_record":{"source":{"id":"2605.21185","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T13:50:26Z","cross_cats_sorted":["cs.IT","math.IT"],"title_canon_sha256":"4fb696035c853dd2887faa81b57b6b471613f61399c8519ee96bd783b55c7538","abstract_canon_sha256":"a607a872acb04e1633e97565c3cf8927431d0d0788c2df8529548492c8f808f5"},"schema_version":"1.0"},"canonical_sha256":"53932d3bf9f46b5f2b7c8d7576e94724e8ea350761d06eebbf9bbfef0a06c849","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-21T01:05:42.340659Z","signature_b64":"ZM7qosypM9BzyeDYjlbb8RPLIBUB9M2vgP5WtipyWJ2vraUM1y7HY5CLB4G+Dc/M3I5YlWxUfYrdQWNHtriYDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"53932d3bf9f46b5f2b7c8d7576e94724e8ea350761d06eebbf9bbfef0a06c849","last_reissued_at":"2026-05-21T01:05:42.340140Z","signature_status":"signed_v1","first_computed_at":"2026-05-21T01:05:42.340140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.21185","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-21T01:05:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S+Z88tKi6LzTSsUeTPOn6fduKfrVfuw6gH4lN99p7C2Fqo4ReIsw5kp31q1UYlbVTAtwkGyjLJZEP7k54cvKBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T19:24:01.644582Z"},"content_sha256":"73a79e68f5619a58597e3bad79f0afaa2a4a32caa709a1790e319698a1147770","schema_version":"1.0","event_id":"sha256:73a79e68f5619a58597e3bad79f0afaa2a4a32caa709a1790e319698a1147770"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:KOJS2O7Z6RVV6K34RV2XN2KHET","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Information Leakage Envelopes","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IT","math.IT"],"primary_cat":"cs.CR","authors_text":"2), (2) Inria Saclay, 3), 3) ((1) KTH Royal Institute of Technology, (3) \\'Ecole Polytechnique), Carlos Pinz\\'on (2, Catuscia Palamidessi (2, Sara Saeidian (1","submitted_at":"2026-05-20T13:50:26Z","abstract_excerpt":"We study privacy guarantees in the framework of pointwise maximal leakage (PML) that satisfy two requirements: they are robust under post-processing and upper bound the failure probability, i.e., the probability that the information leakage exceeds a given threshold. We first examine two candidate definitions inspired by (approximate) differential privacy and show that neither one satisfies both requirements simultaneously. We then introduce the notion of the PML envelope, which quantifies the largest amount of information leakage about a secret after arbitrary post-processing of a mechanism's"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.21185","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.21185/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-21T01:05:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3BayEyRR2N8I55Zh0vkv4YhTn6YrP/38MwGVrhv1oo7BXTYldr/gl8VRhfgp4LIOgLtsOKijOveSbwVGEir2Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T19:24:01.645404Z"},"content_sha256":"a8d6b8d28910f97f7bfad3ea404b88e5534503ac365e8eb6d5d8fbfa0d30ebc2","schema_version":"1.0","event_id":"sha256:a8d6b8d28910f97f7bfad3ea404b88e5534503ac365e8eb6d5d8fbfa0d30ebc2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KOJS2O7Z6RVV6K34RV2XN2KHET/bundle.json","state_url":"https://pith.science/pith/KOJS2O7Z6RVV6K34RV2XN2KHET/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KOJS2O7Z6RVV6K34RV2XN2KHET/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T19:24:01Z","links":{"resolver":"https://pith.science/pith/KOJS2O7Z6RVV6K34RV2XN2KHET","bundle":"https://pith.science/pith/KOJS2O7Z6RVV6K34RV2XN2KHET/bundle.json","state":"https://pith.science/pith/KOJS2O7Z6RVV6K34RV2XN2KHET/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KOJS2O7Z6RVV6K34RV2XN2KHET/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:KOJS2O7Z6RVV6K34RV2XN2KHET","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a607a872acb04e1633e97565c3cf8927431d0d0788c2df8529548492c8f808f5","cross_cats_sorted":["cs.IT","math.IT"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T13:50:26Z","title_canon_sha256":"4fb696035c853dd2887faa81b57b6b471613f61399c8519ee96bd783b55c7538"},"schema_version":"1.0","source":{"id":"2605.21185","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.21185","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"arxiv_version","alias_value":"2605.21185v1","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.21185","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"pith_short_12","alias_value":"KOJS2O7Z6RVV","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"pith_short_16","alias_value":"KOJS2O7Z6RVV6K34","created_at":"2026-05-21T01:05:42Z"},{"alias_kind":"pith_short_8","alias_value":"KOJS2O7Z","created_at":"2026-05-21T01:05:42Z"}],"graph_snapshots":[{"event_id":"sha256:a8d6b8d28910f97f7bfad3ea404b88e5534503ac365e8eb6d5d8fbfa0d30ebc2","target":"graph","created_at":"2026-05-21T01:05:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.21185/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study privacy guarantees in the framework of pointwise maximal leakage (PML) that satisfy two requirements: they are robust under post-processing and upper bound the failure probability, i.e., the probability that the information leakage exceeds a given threshold. We first examine two candidate definitions inspired by (approximate) differential privacy and show that neither one satisfies both requirements simultaneously. We then introduce the notion of the PML envelope, which quantifies the largest amount of information leakage about a secret after arbitrary post-processing of a mechanism's","authors_text":"2), (2) Inria Saclay, 3), 3) ((1) KTH Royal Institute of Technology, (3) \\'Ecole Polytechnique), Carlos Pinz\\'on (2, Catuscia Palamidessi (2, Sara Saeidian (1","cross_cats":["cs.IT","math.IT"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T13:50:26Z","title":"Information Leakage Envelopes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.21185","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:73a79e68f5619a58597e3bad79f0afaa2a4a32caa709a1790e319698a1147770","target":"record","created_at":"2026-05-21T01:05:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a607a872acb04e1633e97565c3cf8927431d0d0788c2df8529548492c8f808f5","cross_cats_sorted":["cs.IT","math.IT"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T13:50:26Z","title_canon_sha256":"4fb696035c853dd2887faa81b57b6b471613f61399c8519ee96bd783b55c7538"},"schema_version":"1.0","source":{"id":"2605.21185","kind":"arxiv","version":1}},"canonical_sha256":"53932d3bf9f46b5f2b7c8d7576e94724e8ea350761d06eebbf9bbfef0a06c849","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"53932d3bf9f46b5f2b7c8d7576e94724e8ea350761d06eebbf9bbfef0a06c849","first_computed_at":"2026-05-21T01:05:42.340140Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-21T01:05:42.340140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZM7qosypM9BzyeDYjlbb8RPLIBUB9M2vgP5WtipyWJ2vraUM1y7HY5CLB4G+Dc/M3I5YlWxUfYrdQWNHtriYDA==","signature_status":"signed_v1","signed_at":"2026-05-21T01:05:42.340659Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.21185","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:73a79e68f5619a58597e3bad79f0afaa2a4a32caa709a1790e319698a1147770","sha256:a8d6b8d28910f97f7bfad3ea404b88e5534503ac365e8eb6d5d8fbfa0d30ebc2"],"state_sha256":"b73ea8c3d8782a79b4d9d51920558f50da7039cdc979995781f3f46f0e67035b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u0+cpZ7PyUWP4lyddTBSBmBFqVpX5eivsGmMjiXN5GG1/FLsD8lB/MP3QVsRFowW3J+zBX3P3sktTh9ppQ2ACg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T19:24:01.649210Z","bundle_sha256":"49593e86c9e58eb25717802013871eccd982b3235232e84543f453bd0959cad0"}}