{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LXSLZKMJ34CDQMI5IPTNJVF6NP","short_pith_number":"pith:LXSLZKMJ","canonical_record":{"source":{"id":"2506.05290","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-05T17:45:13Z","cross_cats_sorted":[],"title_canon_sha256":"8a38be34db7bb03da8639c3ad10c74893c2893c68f70d06d7376b0cff15702af","abstract_canon_sha256":"f1f8478edd3fa593e053866ac182a33c7871a13e4abe31d152c198d64cbda26d"},"schema_version":"1.0"},"canonical_sha256":"5de4bca989df0438311d43e6d4d4be6bed517eb9d18f85c535a0a77320dd5ee8","source":{"kind":"arxiv","id":"2506.05290","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.05290","created_at":"2026-05-17T23:39:17Z"},{"alias_kind":"arxiv_version","alias_value":"2506.05290v3","created_at":"2026-05-17T23:39:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.05290","created_at":"2026-05-17T23:39:17Z"},{"alias_kind":"pith_short_12","alias_value":"LXSLZKMJ34CD","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"LXSLZKMJ34CDQMI5","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"LXSLZKMJ","created_at":"2026-05-18T12:33:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LXSLZKMJ34CDQMI5IPTNJVF6NP","target":"record","payload":{"canonical_record":{"source":{"id":"2506.05290","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-05T17:45:13Z","cross_cats_sorted":[],"title_canon_sha256":"8a38be34db7bb03da8639c3ad10c74893c2893c68f70d06d7376b0cff15702af","abstract_canon_sha256":"f1f8478edd3fa593e053866ac182a33c7871a13e4abe31d152c198d64cbda26d"},"schema_version":"1.0"},"canonical_sha256":"5de4bca989df0438311d43e6d4d4be6bed517eb9d18f85c535a0a77320dd5ee8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:39:17.945687Z","signature_b64":"r4x9c3Up8+jOAXkBEXZq3oyTs4d1Y9m1HV/EqTyEhkutvGQZp/JVVLhizW5gE4ZBT4GkX5PgY4b1fUGxw58YBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5de4bca989df0438311d43e6d4d4be6bed517eb9d18f85c535a0a77320dd5ee8","last_reissued_at":"2026-05-17T23:39:17.945055Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:39:17.945055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.05290","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:39:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UNWWAiQ1tVp2Jlze00ZXrgNBecXJfTBOc9z6yF/PpZZ/xosRq9OTMXI4+O5u5gOS89E5FFzFs9iams3JN7GuDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-21T12:47:20.564026Z"},"content_sha256":"f81a9aa67fa3caf2ec680660d329f71fe279ce1f9c1921f29ef08c955645f3ad","schema_version":"1.0","event_id":"sha256:f81a9aa67fa3caf2ec680660d329f71fe279ce1f9c1921f29ef08c955645f3ad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LXSLZKMJ34CDQMI5IPTNJVF6NP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Big Bird: Resilient Privacy Budgeting Across Untrusted Web Domains","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alison Caulfield, Asaf Cidon, Benjamin Case, Giorgio Cavicchioli, Mark Chen, Martin Thomson, Mathias L\\'ecuyer, Pierre Tholoniat, Roxana Geambasu","submitted_at":"2025-06-05T17:45:13Z","abstract_excerpt":"The W3C Attribution API is an emerging standard for privacy-preserving advertising measurement. Its current privacy architecture enforces individual differential privacy (IDP) independently for each domain (e.g., an advertiser) issuing queries. We show that this guarantee is unsound under realistic system behavior: it fails under cross-querier data adaptivity and can also fail when shared limits are enforced across queriers. The issue is not the on-device accounting model itself -- device-epoch IDP -- but treating each querying domain in isolation.\n  We propose Big Bird, a privacy-budget manag"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.05290","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:39:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O3VlnVF4J5v+yN3A/0ZR4Gw5IchWYDqt6Fj+xizZ7GH3FbylFl02+Ik8T5HbFKEn65+sh7auI+5RDJmeS9KODw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-21T12:47:20.564385Z"},"content_sha256":"1be889a92a257d4a7248a06723e5fc9781e72ddc0e836e00d8f509c0efc800e7","schema_version":"1.0","event_id":"sha256:1be889a92a257d4a7248a06723e5fc9781e72ddc0e836e00d8f509c0efc800e7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LXSLZKMJ34CDQMI5IPTNJVF6NP/bundle.json","state_url":"https://pith.science/pith/LXSLZKMJ34CDQMI5IPTNJVF6NP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LXSLZKMJ34CDQMI5IPTNJVF6NP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-21T12:47:20Z","links":{"resolver":"https://pith.science/pith/LXSLZKMJ34CDQMI5IPTNJVF6NP","bundle":"https://pith.science/pith/LXSLZKMJ34CDQMI5IPTNJVF6NP/bundle.json","state":"https://pith.science/pith/LXSLZKMJ34CDQMI5IPTNJVF6NP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LXSLZKMJ34CDQMI5IPTNJVF6NP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LXSLZKMJ34CDQMI5IPTNJVF6NP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f1f8478edd3fa593e053866ac182a33c7871a13e4abe31d152c198d64cbda26d","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-05T17:45:13Z","title_canon_sha256":"8a38be34db7bb03da8639c3ad10c74893c2893c68f70d06d7376b0cff15702af"},"schema_version":"1.0","source":{"id":"2506.05290","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.05290","created_at":"2026-05-17T23:39:17Z"},{"alias_kind":"arxiv_version","alias_value":"2506.05290v3","created_at":"2026-05-17T23:39:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.05290","created_at":"2026-05-17T23:39:17Z"},{"alias_kind":"pith_short_12","alias_value":"LXSLZKMJ34CD","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"LXSLZKMJ34CDQMI5","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"LXSLZKMJ","created_at":"2026-05-18T12:33:37Z"}],"graph_snapshots":[{"event_id":"sha256:1be889a92a257d4a7248a06723e5fc9781e72ddc0e836e00d8f509c0efc800e7","target":"graph","created_at":"2026-05-17T23:39:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"The W3C Attribution API is an emerging standard for privacy-preserving advertising measurement. Its current privacy architecture enforces individual differential privacy (IDP) independently for each domain (e.g., an advertiser) issuing queries. We show that this guarantee is unsound under realistic system behavior: it fails under cross-querier data adaptivity and can also fail when shared limits are enforced across queriers. The issue is not the on-device accounting model itself -- device-epoch IDP -- but treating each querying domain in isolation.\n  We propose Big Bird, a privacy-budget manag","authors_text":"Alison Caulfield, Asaf Cidon, Benjamin Case, Giorgio Cavicchioli, Mark Chen, Martin Thomson, Mathias L\\'ecuyer, Pierre Tholoniat, Roxana Geambasu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-05T17:45:13Z","title":"Big Bird: Resilient Privacy Budgeting Across Untrusted Web Domains"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.05290","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f81a9aa67fa3caf2ec680660d329f71fe279ce1f9c1921f29ef08c955645f3ad","target":"record","created_at":"2026-05-17T23:39:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f1f8478edd3fa593e053866ac182a33c7871a13e4abe31d152c198d64cbda26d","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-05T17:45:13Z","title_canon_sha256":"8a38be34db7bb03da8639c3ad10c74893c2893c68f70d06d7376b0cff15702af"},"schema_version":"1.0","source":{"id":"2506.05290","kind":"arxiv","version":3}},"canonical_sha256":"5de4bca989df0438311d43e6d4d4be6bed517eb9d18f85c535a0a77320dd5ee8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5de4bca989df0438311d43e6d4d4be6bed517eb9d18f85c535a0a77320dd5ee8","first_computed_at":"2026-05-17T23:39:17.945055Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:39:17.945055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"r4x9c3Up8+jOAXkBEXZq3oyTs4d1Y9m1HV/EqTyEhkutvGQZp/JVVLhizW5gE4ZBT4GkX5PgY4b1fUGxw58YBw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:39:17.945687Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.05290","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f81a9aa67fa3caf2ec680660d329f71fe279ce1f9c1921f29ef08c955645f3ad","sha256:1be889a92a257d4a7248a06723e5fc9781e72ddc0e836e00d8f509c0efc800e7"],"state_sha256":"b89680aa0a138a64c82e6d7a627c20e59390dd9031f170ea51ed8e9c71482fdc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PDH/AoSVLRYMYZuy/mnGds659CM84HNsauWZz0NDRtV5QyeCWaFbZKCpO7GDcF3MtRmlbkNM2r9k0TZxmbRtDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-21T12:47:20.566563Z","bundle_sha256":"098000f11fdcf55880dcf60ec39ebd0e12f813846ad2aeb515094a9d3b1308ce"}}