{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:N2EWAA3AHKBW3QXKVD7M6RD2OY","short_pith_number":"pith:N2EWAA3A","canonical_record":{"source":{"id":"2505.09004","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-05-13T22:39:24Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"21f2375e751d8909bc4dadf4f0e25c91e5bf9ead421627ced430431ff6aff16f","abstract_canon_sha256":"99ad3441fca0ea8e6423e878c64fa4929a973ab751ebfbb6067d9b85be97b1bd"},"schema_version":"1.0"},"canonical_sha256":"6e896003603a836dc2eaa8fecf447a761abb6de17c4f03693f5fa850c52131ff","source":{"kind":"arxiv","id":"2505.09004","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.09004","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"arxiv_version","alias_value":"2505.09004v1","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.09004","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"pith_short_12","alias_value":"N2EWAA3AHKBW","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"pith_short_16","alias_value":"N2EWAA3AHKBW3QXK","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"pith_short_8","alias_value":"N2EWAA3A","created_at":"2026-07-05T11:02:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:N2EWAA3AHKBW3QXKVD7M6RD2OY","target":"record","payload":{"canonical_record":{"source":{"id":"2505.09004","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-05-13T22:39:24Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"21f2375e751d8909bc4dadf4f0e25c91e5bf9ead421627ced430431ff6aff16f","abstract_canon_sha256":"99ad3441fca0ea8e6423e878c64fa4929a973ab751ebfbb6067d9b85be97b1bd"},"schema_version":"1.0"},"canonical_sha256":"6e896003603a836dc2eaa8fecf447a761abb6de17c4f03693f5fa850c52131ff","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:02:48.652258Z","signature_b64":"32RExT/pahBIWhL9Yf+oe+46WPvr1R/JIyrONluzs9EL+F47kwbV/16Uz1+JgIJ3zrruWNzv1cfIPtm8JLgmCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6e896003603a836dc2eaa8fecf447a761abb6de17c4f03693f5fa850c52131ff","last_reissued_at":"2026-07-05T11:02:48.651794Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:02:48.651794Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.09004","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TtJGf9T+FXTPT3ae4e0PcU5+rPr+zmInKAppm/4SuMMfAZXZ+1qlq9g/WFx0KVMkZZBRGU1PC+tpl5DXZJjnDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T16:08:14.502314Z"},"content_sha256":"7793fc56fc7bb119072158f513d51596daa4ebdd1b92402f03c527783237e3ec","schema_version":"1.0","event_id":"sha256:7793fc56fc7bb119072158f513d51596daa4ebdd1b92402f03c527783237e3ec"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:N2EWAA3AHKBW3QXKVD7M6RD2OY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Lower Bounds on the MMSE of Adversarially Inferring Sensitive Features","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"stat.ML","authors_text":"Lalitha Sankar, Mario Diaz, Monica Welfert, Nathan Stromberg","submitted_at":"2025-05-13T22:39:24Z","abstract_excerpt":"We propose an adversarial evaluation framework for sensitive feature inference based on minimum mean-squared error (MMSE) estimation with a finite sample size and linear predictive models. Our approach establishes theoretical lower bounds on the true MMSE of inferring sensitive features from noisy observations of other correlated features. These bounds are expressed in terms of the empirical MMSE under a restricted hypothesis class and a non-negative error term. The error term captures both the estimation error due to finite number of samples and the approximation error from using a restricted"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.09004","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.09004/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bfafVVvJBMy9ZnsipEIHugoQ51tY259MaL2UNRdbCs/i70dieDSOLXZobGNiKbezw+R6xubzNd8Dy21pjSQ7Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T16:08:14.502836Z"},"content_sha256":"923d56f95a346fae82c432bff2e0c7a096b393b93e4da975b7ce5760e2f2ba57","schema_version":"1.0","event_id":"sha256:923d56f95a346fae82c432bff2e0c7a096b393b93e4da975b7ce5760e2f2ba57"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N2EWAA3AHKBW3QXKVD7M6RD2OY/bundle.json","state_url":"https://pith.science/pith/N2EWAA3AHKBW3QXKVD7M6RD2OY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N2EWAA3AHKBW3QXKVD7M6RD2OY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T16:08:14Z","links":{"resolver":"https://pith.science/pith/N2EWAA3AHKBW3QXKVD7M6RD2OY","bundle":"https://pith.science/pith/N2EWAA3AHKBW3QXKVD7M6RD2OY/bundle.json","state":"https://pith.science/pith/N2EWAA3AHKBW3QXKVD7M6RD2OY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N2EWAA3AHKBW3QXKVD7M6RD2OY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:N2EWAA3AHKBW3QXKVD7M6RD2OY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"99ad3441fca0ea8e6423e878c64fa4929a973ab751ebfbb6067d9b85be97b1bd","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-05-13T22:39:24Z","title_canon_sha256":"21f2375e751d8909bc4dadf4f0e25c91e5bf9ead421627ced430431ff6aff16f"},"schema_version":"1.0","source":{"id":"2505.09004","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.09004","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"arxiv_version","alias_value":"2505.09004v1","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.09004","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"pith_short_12","alias_value":"N2EWAA3AHKBW","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"pith_short_16","alias_value":"N2EWAA3AHKBW3QXK","created_at":"2026-07-05T11:02:48Z"},{"alias_kind":"pith_short_8","alias_value":"N2EWAA3A","created_at":"2026-07-05T11:02:48Z"}],"graph_snapshots":[{"event_id":"sha256:923d56f95a346fae82c432bff2e0c7a096b393b93e4da975b7ce5760e2f2ba57","target":"graph","created_at":"2026-07-05T11:02:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.09004/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose an adversarial evaluation framework for sensitive feature inference based on minimum mean-squared error (MMSE) estimation with a finite sample size and linear predictive models. Our approach establishes theoretical lower bounds on the true MMSE of inferring sensitive features from noisy observations of other correlated features. These bounds are expressed in terms of the empirical MMSE under a restricted hypothesis class and a non-negative error term. The error term captures both the estimation error due to finite number of samples and the approximation error from using a restricted","authors_text":"Lalitha Sankar, Mario Diaz, Monica Welfert, Nathan Stromberg","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-05-13T22:39:24Z","title":"Lower Bounds on the MMSE of Adversarially Inferring Sensitive Features"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.09004","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7793fc56fc7bb119072158f513d51596daa4ebdd1b92402f03c527783237e3ec","target":"record","created_at":"2026-07-05T11:02:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"99ad3441fca0ea8e6423e878c64fa4929a973ab751ebfbb6067d9b85be97b1bd","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-05-13T22:39:24Z","title_canon_sha256":"21f2375e751d8909bc4dadf4f0e25c91e5bf9ead421627ced430431ff6aff16f"},"schema_version":"1.0","source":{"id":"2505.09004","kind":"arxiv","version":1}},"canonical_sha256":"6e896003603a836dc2eaa8fecf447a761abb6de17c4f03693f5fa850c52131ff","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6e896003603a836dc2eaa8fecf447a761abb6de17c4f03693f5fa850c52131ff","first_computed_at":"2026-07-05T11:02:48.651794Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:02:48.651794Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"32RExT/pahBIWhL9Yf+oe+46WPvr1R/JIyrONluzs9EL+F47kwbV/16Uz1+JgIJ3zrruWNzv1cfIPtm8JLgmCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:02:48.652258Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.09004","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7793fc56fc7bb119072158f513d51596daa4ebdd1b92402f03c527783237e3ec","sha256:923d56f95a346fae82c432bff2e0c7a096b393b93e4da975b7ce5760e2f2ba57"],"state_sha256":"6ee77a24c46d41c9eb8030220377e142aa8a5c0fd10cbd074f237942c03b119d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P4vnGCiZt9cghR4q4RX5cjf9mpDRaZVQv0JXMNZCIE+ALKv+nPRV9MlLZpoPyCjeJlZOocMzAJPk1R6pnGNhDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T16:08:14.506984Z","bundle_sha256":"f3e84a188145b479009b3774fefc41f96733046be781390c11cd5d7824ddc880"}}