{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:KZJ4Y6FGLVI43TFMFV5JMUUSJZ","short_pith_number":"pith:KZJ4Y6FG","canonical_record":{"source":{"id":"2008.11632","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-26T15:43:50Z","cross_cats_sorted":["cs.AR","cs.LG"],"title_canon_sha256":"642b6f5529e9f09a4163129046e329271ff5f60e076e6d4f8ecbcdc06452e0d1","abstract_canon_sha256":"718240353ae6bff1e5c0d1229b08866fd3aad8c8e1d885c1165d81d152c95702"},"schema_version":"1.0"},"canonical_sha256":"5653cc78a65d51cdccac2d7a9652924e72563f46e35529713f197eb33b962756","source":{"kind":"arxiv","id":"2008.11632","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2008.11632","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"arxiv_version","alias_value":"2008.11632v2","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2008.11632","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"pith_short_12","alias_value":"KZJ4Y6FGLVI4","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"pith_short_16","alias_value":"KZJ4Y6FGLVI43TFM","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"pith_short_8","alias_value":"KZJ4Y6FG","created_at":"2026-07-05T04:26:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:KZJ4Y6FGLVI43TFMFV5JMUUSJZ","target":"record","payload":{"canonical_record":{"source":{"id":"2008.11632","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-26T15:43:50Z","cross_cats_sorted":["cs.AR","cs.LG"],"title_canon_sha256":"642b6f5529e9f09a4163129046e329271ff5f60e076e6d4f8ecbcdc06452e0d1","abstract_canon_sha256":"718240353ae6bff1e5c0d1229b08866fd3aad8c8e1d885c1165d81d152c95702"},"schema_version":"1.0"},"canonical_sha256":"5653cc78a65d51cdccac2d7a9652924e72563f46e35529713f197eb33b962756","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:26:18.178864Z","signature_b64":"R/WAr8LJHuoMwvd2d2KIB3gbDEzOwA1Tt0D8Pqi9CeoWw/E9A0o8ChLj6OXXOxvAU+85lK3MF4VaEnOvyCNTCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5653cc78a65d51cdccac2d7a9652924e72563f46e35529713f197eb33b962756","last_reissued_at":"2026-07-05T04:26:18.178294Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:26:18.178294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2008.11632","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:26:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wdSc7AdPN7PRROosc6DXLGdb2i+GT5pFWWPFogPnhuP7sJI44SXXQqqPVbdqLEtwXTigDGNqbVxlneARonxzBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:31:24.918431Z"},"content_sha256":"86cf3fc9fc6acfb9b3f0cb59262831adab841ed1203ac261b26bfbae4d6d9268","schema_version":"1.0","event_id":"sha256:86cf3fc9fc6acfb9b3f0cb59262831adab841ed1203ac261b26bfbae4d6d9268"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:KZJ4Y6FGLVI43TFMFV5JMUUSJZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"GuardNN: Secure Accelerator Architecture for Privacy-Preserving Deep Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AR","cs.LG"],"primary_cat":"cs.CR","authors_text":"G. Edward Suh, Muhammad Umar, Weizhe Hua, Zhiru Zhang","submitted_at":"2020-08-26T15:43:50Z","abstract_excerpt":"This paper proposes GuardNN, a secure DNN accelerator that provides hardware-based protection for user data and model parameters even in an untrusted environment. GuardNN shows that the architecture and protection can be customized for a specific application to provide strong confidentiality and integrity guarantees with negligible overhead. The design of the GuardNN instruction set reduces the TCB to just the accelerator and allows confidentiality protection even when the instructions from a host cannot be trusted. GuardNN minimizes the overhead of memory encryption and integrity verification"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2008.11632","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2008.11632/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:26:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"If+8SW0iqiQSOGGfBdAmhk7ehwAaWdD+drFpyDsmQ5D753yq3Tpxf9BC63bXzhzcQUlYqepZZ67R8OJeuaR/BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:31:24.918810Z"},"content_sha256":"9ef84cd1bde19a0517f7458f6c2207426834d70acf88288b8640cc8549fa234b","schema_version":"1.0","event_id":"sha256:9ef84cd1bde19a0517f7458f6c2207426834d70acf88288b8640cc8549fa234b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KZJ4Y6FGLVI43TFMFV5JMUUSJZ/bundle.json","state_url":"https://pith.science/pith/KZJ4Y6FGLVI43TFMFV5JMUUSJZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KZJ4Y6FGLVI43TFMFV5JMUUSJZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:31:24Z","links":{"resolver":"https://pith.science/pith/KZJ4Y6FGLVI43TFMFV5JMUUSJZ","bundle":"https://pith.science/pith/KZJ4Y6FGLVI43TFMFV5JMUUSJZ/bundle.json","state":"https://pith.science/pith/KZJ4Y6FGLVI43TFMFV5JMUUSJZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KZJ4Y6FGLVI43TFMFV5JMUUSJZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:KZJ4Y6FGLVI43TFMFV5JMUUSJZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"718240353ae6bff1e5c0d1229b08866fd3aad8c8e1d885c1165d81d152c95702","cross_cats_sorted":["cs.AR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-26T15:43:50Z","title_canon_sha256":"642b6f5529e9f09a4163129046e329271ff5f60e076e6d4f8ecbcdc06452e0d1"},"schema_version":"1.0","source":{"id":"2008.11632","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2008.11632","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"arxiv_version","alias_value":"2008.11632v2","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2008.11632","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"pith_short_12","alias_value":"KZJ4Y6FGLVI4","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"pith_short_16","alias_value":"KZJ4Y6FGLVI43TFM","created_at":"2026-07-05T04:26:18Z"},{"alias_kind":"pith_short_8","alias_value":"KZJ4Y6FG","created_at":"2026-07-05T04:26:18Z"}],"graph_snapshots":[{"event_id":"sha256:9ef84cd1bde19a0517f7458f6c2207426834d70acf88288b8640cc8549fa234b","target":"graph","created_at":"2026-07-05T04:26:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2008.11632/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper proposes GuardNN, a secure DNN accelerator that provides hardware-based protection for user data and model parameters even in an untrusted environment. GuardNN shows that the architecture and protection can be customized for a specific application to provide strong confidentiality and integrity guarantees with negligible overhead. The design of the GuardNN instruction set reduces the TCB to just the accelerator and allows confidentiality protection even when the instructions from a host cannot be trusted. GuardNN minimizes the overhead of memory encryption and integrity verification","authors_text":"G. Edward Suh, Muhammad Umar, Weizhe Hua, Zhiru Zhang","cross_cats":["cs.AR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-26T15:43:50Z","title":"GuardNN: Secure Accelerator Architecture for Privacy-Preserving Deep Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2008.11632","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:86cf3fc9fc6acfb9b3f0cb59262831adab841ed1203ac261b26bfbae4d6d9268","target":"record","created_at":"2026-07-05T04:26:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"718240353ae6bff1e5c0d1229b08866fd3aad8c8e1d885c1165d81d152c95702","cross_cats_sorted":["cs.AR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-08-26T15:43:50Z","title_canon_sha256":"642b6f5529e9f09a4163129046e329271ff5f60e076e6d4f8ecbcdc06452e0d1"},"schema_version":"1.0","source":{"id":"2008.11632","kind":"arxiv","version":2}},"canonical_sha256":"5653cc78a65d51cdccac2d7a9652924e72563f46e35529713f197eb33b962756","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5653cc78a65d51cdccac2d7a9652924e72563f46e35529713f197eb33b962756","first_computed_at":"2026-07-05T04:26:18.178294Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:26:18.178294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"R/WAr8LJHuoMwvd2d2KIB3gbDEzOwA1Tt0D8Pqi9CeoWw/E9A0o8ChLj6OXXOxvAU+85lK3MF4VaEnOvyCNTCA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:26:18.178864Z","signed_message":"canonical_sha256_bytes"},"source_id":"2008.11632","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:86cf3fc9fc6acfb9b3f0cb59262831adab841ed1203ac261b26bfbae4d6d9268","sha256:9ef84cd1bde19a0517f7458f6c2207426834d70acf88288b8640cc8549fa234b"],"state_sha256":"5598f34ced362d5784eceba993c0c6af1ddce972b14e08646710b39f6146042c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wlNsfSN/AMJ55FcZe5X/pV9uTJ5CLag1vrXh9sWSUnK56Cfy6Jgbp7sNyFIqxDGJ0LP5I/j0mQCY1oxp4fYuDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:31:24.920835Z","bundle_sha256":"083bcb509787132428ab8a5d731a9d5887b659f04968292fc4c4d4be04ec9a77"}}