{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LK2MUL5IAEOGOHKOKHBJ3KAUC5","short_pith_number":"pith:LK2MUL5I","canonical_record":{"source":{"id":"2507.09602","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-13T12:16:43Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e5e80224ead478acc1cc75e273a5eaac1e4d4faff41e7401b3244ee4733c8f69","abstract_canon_sha256":"e4baba67c2fd40ca018f75756c6dd62058f781fd6ac741953b0be3d3f5b6ee88"},"schema_version":"1.0"},"canonical_sha256":"5ab4ca2fa8011c671d4e51c29da8141746b7ea626488d1b381403a2736348c88","source":{"kind":"arxiv","id":"2507.09602","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.09602","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"arxiv_version","alias_value":"2507.09602v1","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.09602","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"pith_short_12","alias_value":"LK2MUL5IAEOG","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"pith_short_16","alias_value":"LK2MUL5IAEOGOHKO","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"pith_short_8","alias_value":"LK2MUL5I","created_at":"2026-07-05T11:36:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LK2MUL5IAEOGOHKOKHBJ3KAUC5","target":"record","payload":{"canonical_record":{"source":{"id":"2507.09602","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-13T12:16:43Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e5e80224ead478acc1cc75e273a5eaac1e4d4faff41e7401b3244ee4733c8f69","abstract_canon_sha256":"e4baba67c2fd40ca018f75756c6dd62058f781fd6ac741953b0be3d3f5b6ee88"},"schema_version":"1.0"},"canonical_sha256":"5ab4ca2fa8011c671d4e51c29da8141746b7ea626488d1b381403a2736348c88","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:36:36.649555Z","signature_b64":"O9MnSnv51+09N3IO8lXhngAMdQDnrYFpdATM4pKELs/+nKCjB9ENk5xdrzBzs4nCp+qW4hY5nxwUQ9NDFdjVAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5ab4ca2fa8011c671d4e51c29da8141746b7ea626488d1b381403a2736348c88","last_reissued_at":"2026-07-05T11:36:36.649085Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:36:36.649085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.09602","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:36:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0hMSlzXevzQZhf3tEPFKYT3qM5+/qXnNWCSdFVQkBTw7Lov35f2voZvQIYpVkdIQkB7tJZyBmDoG3nQBDMSgCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:16:42.338642Z"},"content_sha256":"169d12a9e3c3e0d60abf2f6a16ea9c86b0c35558b27dfadba86678f18a0de12b","schema_version":"1.0","event_id":"sha256:169d12a9e3c3e0d60abf2f6a16ea9c86b0c35558b27dfadba86678f18a0de12b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LK2MUL5IAEOGOHKOKHBJ3KAUC5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differences","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Bocheng Ju, Jiaqi Liu, Junchao Fan, Xiaolin Chang","submitted_at":"2025-07-13T12:16:43Z","abstract_excerpt":"Federated learning enables collaborative machine learning while preserving data privacy. However, the rise of federated unlearning, designed to allow clients to erase their data from the global model, introduces new privacy concerns. Specifically, the gradient exchanges during the unlearning process can leak sensitive information about deleted data. In this paper, we introduce DRAGD, a novel attack that exploits gradient discrepancies before and after unlearning to reconstruct forgotten data. We also present DRAGDP, an enhanced version of DRAGD that leverages publicly available prior data to i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.09602","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.09602/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:36:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iv5sCtDdjjmLNl9i8MT1adjce9311a8WE11MnvLaSBruLxrk30+nFflA7dBNzI8EI7wKQXwrkNGBeiVHy11OBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:16:42.339163Z"},"content_sha256":"1411a34a212a446ead64009904f5305a957d0bd1c7d16329f20c50585820e418","schema_version":"1.0","event_id":"sha256:1411a34a212a446ead64009904f5305a957d0bd1c7d16329f20c50585820e418"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LK2MUL5IAEOGOHKOKHBJ3KAUC5/bundle.json","state_url":"https://pith.science/pith/LK2MUL5IAEOGOHKOKHBJ3KAUC5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LK2MUL5IAEOGOHKOKHBJ3KAUC5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:16:42Z","links":{"resolver":"https://pith.science/pith/LK2MUL5IAEOGOHKOKHBJ3KAUC5","bundle":"https://pith.science/pith/LK2MUL5IAEOGOHKOKHBJ3KAUC5/bundle.json","state":"https://pith.science/pith/LK2MUL5IAEOGOHKOKHBJ3KAUC5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LK2MUL5IAEOGOHKOKHBJ3KAUC5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LK2MUL5IAEOGOHKOKHBJ3KAUC5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4baba67c2fd40ca018f75756c6dd62058f781fd6ac741953b0be3d3f5b6ee88","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-13T12:16:43Z","title_canon_sha256":"e5e80224ead478acc1cc75e273a5eaac1e4d4faff41e7401b3244ee4733c8f69"},"schema_version":"1.0","source":{"id":"2507.09602","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.09602","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"arxiv_version","alias_value":"2507.09602v1","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.09602","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"pith_short_12","alias_value":"LK2MUL5IAEOG","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"pith_short_16","alias_value":"LK2MUL5IAEOGOHKO","created_at":"2026-07-05T11:36:36Z"},{"alias_kind":"pith_short_8","alias_value":"LK2MUL5I","created_at":"2026-07-05T11:36:36Z"}],"graph_snapshots":[{"event_id":"sha256:1411a34a212a446ead64009904f5305a957d0bd1c7d16329f20c50585820e418","target":"graph","created_at":"2026-07-05T11:36:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.09602/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning enables collaborative machine learning while preserving data privacy. However, the rise of federated unlearning, designed to allow clients to erase their data from the global model, introduces new privacy concerns. Specifically, the gradient exchanges during the unlearning process can leak sensitive information about deleted data. In this paper, we introduce DRAGD, a novel attack that exploits gradient discrepancies before and after unlearning to reconstruct forgotten data. We also present DRAGDP, an enhanced version of DRAGD that leverages publicly available prior data to i","authors_text":"Bocheng Ju, Jiaqi Liu, Junchao Fan, Xiaolin Chang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-13T12:16:43Z","title":"DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differences"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.09602","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:169d12a9e3c3e0d60abf2f6a16ea9c86b0c35558b27dfadba86678f18a0de12b","target":"record","created_at":"2026-07-05T11:36:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4baba67c2fd40ca018f75756c6dd62058f781fd6ac741953b0be3d3f5b6ee88","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-13T12:16:43Z","title_canon_sha256":"e5e80224ead478acc1cc75e273a5eaac1e4d4faff41e7401b3244ee4733c8f69"},"schema_version":"1.0","source":{"id":"2507.09602","kind":"arxiv","version":1}},"canonical_sha256":"5ab4ca2fa8011c671d4e51c29da8141746b7ea626488d1b381403a2736348c88","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5ab4ca2fa8011c671d4e51c29da8141746b7ea626488d1b381403a2736348c88","first_computed_at":"2026-07-05T11:36:36.649085Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:36:36.649085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"O9MnSnv51+09N3IO8lXhngAMdQDnrYFpdATM4pKELs/+nKCjB9ENk5xdrzBzs4nCp+qW4hY5nxwUQ9NDFdjVAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:36:36.649555Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.09602","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:169d12a9e3c3e0d60abf2f6a16ea9c86b0c35558b27dfadba86678f18a0de12b","sha256:1411a34a212a446ead64009904f5305a957d0bd1c7d16329f20c50585820e418"],"state_sha256":"c1f0fe0bcc579498b0eff8cd9eecc9cc147c835bfe6b0ab6b4af6df92f8c89ca"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gYh1cRqjkgJXM84DDKDEc3Mv1IlQwAd+cQ6Qdgabuts8BCWKFFgdw74nms5mopFBpQIiKOkpuM4ivb/kCdPjBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:16:42.342913Z","bundle_sha256":"f6447093410c196529cfbcd36e84eb661521cbbc527cff74934728a51dc67762"}}