{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KSSHDWSEEZVJAW7RXN6PMSGRCA","short_pith_number":"pith:KSSHDWSE","canonical_record":{"source":{"id":"2508.18671","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-26T04:29:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9329db9a4376e87bfe9d461d54a1088ed13fafcbb49c45174f68a83ee1c7455e","abstract_canon_sha256":"cb3f214ccea517cfe34fba71c0d1dc15206f32ca5a78b3d683dea8de8fe8b844"},"schema_version":"1.0"},"canonical_sha256":"54a471da44266a905bf1bb7cf648d1101ea89cffbb388d00eed4156417b28cc9","source":{"kind":"arxiv","id":"2508.18671","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.18671","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"arxiv_version","alias_value":"2508.18671v1","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.18671","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"pith_short_12","alias_value":"KSSHDWSEEZVJ","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"pith_short_16","alias_value":"KSSHDWSEEZVJAW7R","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"pith_short_8","alias_value":"KSSHDWSE","created_at":"2026-07-05T11:59:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KSSHDWSEEZVJAW7RXN6PMSGRCA","target":"record","payload":{"canonical_record":{"source":{"id":"2508.18671","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-26T04:29:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9329db9a4376e87bfe9d461d54a1088ed13fafcbb49c45174f68a83ee1c7455e","abstract_canon_sha256":"cb3f214ccea517cfe34fba71c0d1dc15206f32ca5a78b3d683dea8de8fe8b844"},"schema_version":"1.0"},"canonical_sha256":"54a471da44266a905bf1bb7cf648d1101ea89cffbb388d00eed4156417b28cc9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:59:29.068587Z","signature_b64":"OpY6ivQZZ3FB31tZPpU46mVEmltGoJ/w3QnSDFmaqmxGrvIeQav3+t51BU4Yw+pSOmgjMm2FfW/sXVgJB+SoBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"54a471da44266a905bf1bb7cf648d1101ea89cffbb388d00eed4156417b28cc9","last_reissued_at":"2026-07-05T11:59:29.068157Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:59:29.068157Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.18671","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:59:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TaNomsh6YU8ft5pG/kMIPKX0gaZmvQXJrJvW9V96R0Na9u7q1CUNwLWjy7qcaFG4WG7hJsDdyXjM2tiqd5LdCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:17:55.589848Z"},"content_sha256":"6a196c81e4184edd0ee947f06bfb1b57cb9e2af1a7777f9d26089e324f3815e5","schema_version":"1.0","event_id":"sha256:6a196c81e4184edd0ee947f06bfb1b57cb9e2af1a7777f9d26089e324f3815e5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KSSHDWSEEZVJAW7RXN6PMSGRCA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Auditing Approximate Machine Unlearning for Differentially Private Models","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Jiajie He, Keke Chen, Yuechun Gu","submitted_at":"2025-08-26T04:29:33Z","abstract_excerpt":"Approximate machine unlearning aims to remove the effect of specific data from trained models to ensure individuals' privacy. Existing methods focus on the removed records and assume the retained ones are unaffected. However, recent studies on the \\emph{privacy onion effect} indicate this assumption might be incorrect. Especially when the model is differentially private, no study has explored whether the retained ones still meet the differential privacy (DP) criterion under existing machine unlearning methods. This paper takes a holistic approach to auditing both unlearned and retained samples"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.18671","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.18671/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:59:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y3Lcig9S+tJ0Pt4T28saIkignMCJcqtHKnlBEkh2Rw2Ft1nkw0/RIruYh42Hp/cRYAO5d+Freqb4fPRs36/0Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:17:55.590760Z"},"content_sha256":"082e92c8ee781f6942832cc955af3f7477baccb77aaed5d4790e1b485a07489d","schema_version":"1.0","event_id":"sha256:082e92c8ee781f6942832cc955af3f7477baccb77aaed5d4790e1b485a07489d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KSSHDWSEEZVJAW7RXN6PMSGRCA/bundle.json","state_url":"https://pith.science/pith/KSSHDWSEEZVJAW7RXN6PMSGRCA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KSSHDWSEEZVJAW7RXN6PMSGRCA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T09:17:55Z","links":{"resolver":"https://pith.science/pith/KSSHDWSEEZVJAW7RXN6PMSGRCA","bundle":"https://pith.science/pith/KSSHDWSEEZVJAW7RXN6PMSGRCA/bundle.json","state":"https://pith.science/pith/KSSHDWSEEZVJAW7RXN6PMSGRCA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KSSHDWSEEZVJAW7RXN6PMSGRCA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KSSHDWSEEZVJAW7RXN6PMSGRCA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cb3f214ccea517cfe34fba71c0d1dc15206f32ca5a78b3d683dea8de8fe8b844","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-26T04:29:33Z","title_canon_sha256":"9329db9a4376e87bfe9d461d54a1088ed13fafcbb49c45174f68a83ee1c7455e"},"schema_version":"1.0","source":{"id":"2508.18671","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.18671","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"arxiv_version","alias_value":"2508.18671v1","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.18671","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"pith_short_12","alias_value":"KSSHDWSEEZVJ","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"pith_short_16","alias_value":"KSSHDWSEEZVJAW7R","created_at":"2026-07-05T11:59:29Z"},{"alias_kind":"pith_short_8","alias_value":"KSSHDWSE","created_at":"2026-07-05T11:59:29Z"}],"graph_snapshots":[{"event_id":"sha256:082e92c8ee781f6942832cc955af3f7477baccb77aaed5d4790e1b485a07489d","target":"graph","created_at":"2026-07-05T11:59:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.18671/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Approximate machine unlearning aims to remove the effect of specific data from trained models to ensure individuals' privacy. Existing methods focus on the removed records and assume the retained ones are unaffected. However, recent studies on the \\emph{privacy onion effect} indicate this assumption might be incorrect. Especially when the model is differentially private, no study has explored whether the retained ones still meet the differential privacy (DP) criterion under existing machine unlearning methods. This paper takes a holistic approach to auditing both unlearned and retained samples","authors_text":"Jiajie He, Keke Chen, Yuechun Gu","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-26T04:29:33Z","title":"Auditing Approximate Machine Unlearning for Differentially Private Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.18671","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6a196c81e4184edd0ee947f06bfb1b57cb9e2af1a7777f9d26089e324f3815e5","target":"record","created_at":"2026-07-05T11:59:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cb3f214ccea517cfe34fba71c0d1dc15206f32ca5a78b3d683dea8de8fe8b844","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-26T04:29:33Z","title_canon_sha256":"9329db9a4376e87bfe9d461d54a1088ed13fafcbb49c45174f68a83ee1c7455e"},"schema_version":"1.0","source":{"id":"2508.18671","kind":"arxiv","version":1}},"canonical_sha256":"54a471da44266a905bf1bb7cf648d1101ea89cffbb388d00eed4156417b28cc9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"54a471da44266a905bf1bb7cf648d1101ea89cffbb388d00eed4156417b28cc9","first_computed_at":"2026-07-05T11:59:29.068157Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:59:29.068157Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OpY6ivQZZ3FB31tZPpU46mVEmltGoJ/w3QnSDFmaqmxGrvIeQav3+t51BU4Yw+pSOmgjMm2FfW/sXVgJB+SoBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:59:29.068587Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.18671","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6a196c81e4184edd0ee947f06bfb1b57cb9e2af1a7777f9d26089e324f3815e5","sha256:082e92c8ee781f6942832cc955af3f7477baccb77aaed5d4790e1b485a07489d"],"state_sha256":"2b0f8af089754ff3cc97b1007eba0deccbb7d35400279aef7b1506d8530196d1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YxRFsPn+uZBtDu48dTAH0vcETGPfTHEAob54m3EWz9d6kmgKI424MsVks/+7D9hhxBoCemnUswq64nj2mmHfDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T09:17:55.598347Z","bundle_sha256":"fe8a103b07cd74c44f9f2dcee3e3a6216bccdab67012b017c8ea4227fd771f05"}}