{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:LI5FCC7YV53DHO32OJOJ7NXR7Q","short_pith_number":"pith:LI5FCC7Y","canonical_record":{"source":{"id":"2302.03098","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T19:58:28Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"13d056b84c99cb4b8c716911a9b00c2e80925108bde50d40124e69bc1ee39e4d","abstract_canon_sha256":"e1d60a00d1cb66bfcd17513eddbaf124a1de237a78a95dc6bf7b7a093fd76cc7"},"schema_version":"1.0"},"canonical_sha256":"5a3a510bf8af7633bb7a725c9fb6f1fc322f0939e51eab79973ec02bc4be4884","source":{"kind":"arxiv","id":"2302.03098","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.03098","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"arxiv_version","alias_value":"2302.03098v5","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.03098","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"pith_short_12","alias_value":"LI5FCC7YV53D","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"pith_short_16","alias_value":"LI5FCC7YV53DHO32","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"pith_short_8","alias_value":"LI5FCC7Y","created_at":"2026-07-05T08:09:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:LI5FCC7YV53DHO32OJOJ7NXR7Q","target":"record","payload":{"canonical_record":{"source":{"id":"2302.03098","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T19:58:28Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"13d056b84c99cb4b8c716911a9b00c2e80925108bde50d40124e69bc1ee39e4d","abstract_canon_sha256":"e1d60a00d1cb66bfcd17513eddbaf124a1de237a78a95dc6bf7b7a093fd76cc7"},"schema_version":"1.0"},"canonical_sha256":"5a3a510bf8af7633bb7a725c9fb6f1fc322f0939e51eab79973ec02bc4be4884","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:09:23.117693Z","signature_b64":"2RIdFJ5BusFasjCbZ9dmF7AGfpmB+WOZ1szGHUb5LcDli3SFytHitSaliZIUHLkvE4bvR4yNbjHlqARaxghlAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5a3a510bf8af7633bb7a725c9fb6f1fc322f0939e51eab79973ec02bc4be4884","last_reissued_at":"2026-07-05T08:09:23.117225Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:09:23.117225Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.03098","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qZn0ej/h9IyEPFCVQFPgTRVve41oqwW6jJ3GBXWRUU8omMXZZKH32d8c4vaFxGrTUTDvnm44x+70gNpIgUABBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T16:26:29.606267Z"},"content_sha256":"6733ad8a55dc457de80171789d4ca7e0127ab93e18819072cd549cac1e16b686","schema_version":"1.0","event_id":"sha256:6733ad8a55dc457de80171789d4ca7e0127ab93e18819072cd549cac1e16b686"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:LI5FCC7YV53DHO32OJOJ7NXR7Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"One-shot Empirical Privacy Estimation for Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Alina Oprea, Galen Andrew, H. Brendan McMahan, Peter Kairouz, Sewoong Oh, Vinith M. Suriyakumar","submitted_at":"2023-02-06T19:58:28Z","abstract_excerpt":"Privacy estimation techniques for differentially private (DP) algorithms are useful for comparing against analytical bounds, or to empirically measure privacy loss in settings where known analytical bounds are not tight. However, existing privacy auditing techniques usually make strong assumptions on the adversary (e.g., knowledge of intermediate model iterates or the training data distribution), are tailored to specific tasks, model architectures, or DP algorithm, and/or require retraining the model many times (typically on the order of thousands). These shortcomings make deploying such techn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.03098","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.03098/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AVIDJJTRNoPFv+xt9tG6fgnnK2KUKRS8uioEWRzeKektc5AZpoIGix5QjLsboKtII96W3kVw2MBhgVd1FcADBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T16:26:29.606665Z"},"content_sha256":"58c355107df140f09831ef7f6a082e4e871edb488ff6b1232bda3dbbe4759392","schema_version":"1.0","event_id":"sha256:58c355107df140f09831ef7f6a082e4e871edb488ff6b1232bda3dbbe4759392"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LI5FCC7YV53DHO32OJOJ7NXR7Q/bundle.json","state_url":"https://pith.science/pith/LI5FCC7YV53DHO32OJOJ7NXR7Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LI5FCC7YV53DHO32OJOJ7NXR7Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T16:26:29Z","links":{"resolver":"https://pith.science/pith/LI5FCC7YV53DHO32OJOJ7NXR7Q","bundle":"https://pith.science/pith/LI5FCC7YV53DHO32OJOJ7NXR7Q/bundle.json","state":"https://pith.science/pith/LI5FCC7YV53DHO32OJOJ7NXR7Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LI5FCC7YV53DHO32OJOJ7NXR7Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:LI5FCC7YV53DHO32OJOJ7NXR7Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e1d60a00d1cb66bfcd17513eddbaf124a1de237a78a95dc6bf7b7a093fd76cc7","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T19:58:28Z","title_canon_sha256":"13d056b84c99cb4b8c716911a9b00c2e80925108bde50d40124e69bc1ee39e4d"},"schema_version":"1.0","source":{"id":"2302.03098","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.03098","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"arxiv_version","alias_value":"2302.03098v5","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.03098","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"pith_short_12","alias_value":"LI5FCC7YV53D","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"pith_short_16","alias_value":"LI5FCC7YV53DHO32","created_at":"2026-07-05T08:09:23Z"},{"alias_kind":"pith_short_8","alias_value":"LI5FCC7Y","created_at":"2026-07-05T08:09:23Z"}],"graph_snapshots":[{"event_id":"sha256:58c355107df140f09831ef7f6a082e4e871edb488ff6b1232bda3dbbe4759392","target":"graph","created_at":"2026-07-05T08:09:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.03098/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Privacy estimation techniques for differentially private (DP) algorithms are useful for comparing against analytical bounds, or to empirically measure privacy loss in settings where known analytical bounds are not tight. However, existing privacy auditing techniques usually make strong assumptions on the adversary (e.g., knowledge of intermediate model iterates or the training data distribution), are tailored to specific tasks, model architectures, or DP algorithm, and/or require retraining the model many times (typically on the order of thousands). These shortcomings make deploying such techn","authors_text":"Alina Oprea, Galen Andrew, H. Brendan McMahan, Peter Kairouz, Sewoong Oh, Vinith M. Suriyakumar","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T19:58:28Z","title":"One-shot Empirical Privacy Estimation for Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.03098","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6733ad8a55dc457de80171789d4ca7e0127ab93e18819072cd549cac1e16b686","target":"record","created_at":"2026-07-05T08:09:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e1d60a00d1cb66bfcd17513eddbaf124a1de237a78a95dc6bf7b7a093fd76cc7","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T19:58:28Z","title_canon_sha256":"13d056b84c99cb4b8c716911a9b00c2e80925108bde50d40124e69bc1ee39e4d"},"schema_version":"1.0","source":{"id":"2302.03098","kind":"arxiv","version":5}},"canonical_sha256":"5a3a510bf8af7633bb7a725c9fb6f1fc322f0939e51eab79973ec02bc4be4884","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5a3a510bf8af7633bb7a725c9fb6f1fc322f0939e51eab79973ec02bc4be4884","first_computed_at":"2026-07-05T08:09:23.117225Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:09:23.117225Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2RIdFJ5BusFasjCbZ9dmF7AGfpmB+WOZ1szGHUb5LcDli3SFytHitSaliZIUHLkvE4bvR4yNbjHlqARaxghlAw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:09:23.117693Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.03098","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6733ad8a55dc457de80171789d4ca7e0127ab93e18819072cd549cac1e16b686","sha256:58c355107df140f09831ef7f6a082e4e871edb488ff6b1232bda3dbbe4759392"],"state_sha256":"918f4dc790eac6c0435fe9e356e95fb2ebf97860eaf647c55d8f7179feaf83e0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hyN+1HFpgxlwFl58EFooBXh4AcZVAZ/vnOD8SWFrrIQuNOUNddvQul3c2tmBVC8sVNPzH8fUtm5waU3Cfj25Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T16:26:29.608668Z","bundle_sha256":"9038d934accdc942b916c7ec17cb9dc98f24951409f59281d71fe307934733d5"}}