{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:N7GUVH24CS5QS37TX5JUZHTPMQ","short_pith_number":"pith:N7GUVH24","canonical_record":{"source":{"id":"2509.03341","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-03T14:18:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"77254920485693998a1cc31c8595001bfaec53c4e934b00afe75534ea1c506b0","abstract_canon_sha256":"cdf17ece8a5da5e1c0e1ec71255791f617914b53877bd3372376652829e2cb6b"},"schema_version":"1.0"},"canonical_sha256":"6fcd4a9f5c14bb096ff3bf534c9e6f6425f76289077c07880d3313cff20cda4b","source":{"kind":"arxiv","id":"2509.03341","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.03341","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"arxiv_version","alias_value":"2509.03341v1","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.03341","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"pith_short_12","alias_value":"N7GUVH24CS5Q","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"pith_short_16","alias_value":"N7GUVH24CS5QS37T","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"pith_short_8","alias_value":"N7GUVH24","created_at":"2026-07-05T12:04:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:N7GUVH24CS5QS37TX5JUZHTPMQ","target":"record","payload":{"canonical_record":{"source":{"id":"2509.03341","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-03T14:18:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"77254920485693998a1cc31c8595001bfaec53c4e934b00afe75534ea1c506b0","abstract_canon_sha256":"cdf17ece8a5da5e1c0e1ec71255791f617914b53877bd3372376652829e2cb6b"},"schema_version":"1.0"},"canonical_sha256":"6fcd4a9f5c14bb096ff3bf534c9e6f6425f76289077c07880d3313cff20cda4b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:04:20.730717Z","signature_b64":"ufrOap/WdMRvWBe1nGEa15+7B6Q9HPbF3JLigL4zd6ZNoIx1rgXSQcjL3AWDRl9QmOEWt5u1bYWTErI5hJhlCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6fcd4a9f5c14bb096ff3bf534c9e6f6425f76289077c07880d3313cff20cda4b","last_reissued_at":"2026-07-05T12:04:20.730292Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:04:20.730292Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.03341","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:04:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HnMT1oiBj6P/UXQveCT3ChoXxb5WEMTF9bgZwFHBe+vkox3F+6DAPFYxcRexb00++cK5YWCOcd7nmxyFNwb4Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T14:51:14.161156Z"},"content_sha256":"c450df3d5ca3fb29f5504373d666b990ad8b0c36635f603627eba88fe8af8417","schema_version":"1.0","event_id":"sha256:c450df3d5ca3fb29f5504373d666b990ad8b0c36635f603627eba88fe8af8417"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:N7GUVH24CS5QS37TX5JUZHTPMQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Alain Rakotomamonjy, Alexandre Allauzen, Ilana Sebag, Jamal Atif, Jean-Yves Franceschi","submitted_at":"2025-09-03T14:18:22Z","abstract_excerpt":"Generative Adversarial Networks (GANs) and diffusion models have emerged as leading approaches for high-quality image synthesis. While both can be trained under differential privacy (DP) to protect sensitive data, their sensitivity to membership inference attacks (MIAs), a key threat to data confidentiality, remains poorly understood. In this work, we present the first unified theoretical and empirical analysis of the privacy risks faced by differentially private generative models. We begin by showing, through a stability-based analysis, that GANs exhibit fundamentally lower sensitivity to dat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.03341","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.03341/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:04:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z16c9gyJa4haovcVaE1EFOkUv4an99vPu+utuB1H5yk6iq6h5w2lmGrGtGnDVrPgwpreLoKKRhL24Wqmdg2fDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T14:51:14.161720Z"},"content_sha256":"f0086c1d36fe0ef8b5ea3e9b9b766a96dc6884979c67c797b562ce25f0eba2c6","schema_version":"1.0","event_id":"sha256:f0086c1d36fe0ef8b5ea3e9b9b766a96dc6884979c67c797b562ce25f0eba2c6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N7GUVH24CS5QS37TX5JUZHTPMQ/bundle.json","state_url":"https://pith.science/pith/N7GUVH24CS5QS37TX5JUZHTPMQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N7GUVH24CS5QS37TX5JUZHTPMQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T14:51:14Z","links":{"resolver":"https://pith.science/pith/N7GUVH24CS5QS37TX5JUZHTPMQ","bundle":"https://pith.science/pith/N7GUVH24CS5QS37TX5JUZHTPMQ/bundle.json","state":"https://pith.science/pith/N7GUVH24CS5QS37TX5JUZHTPMQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N7GUVH24CS5QS37TX5JUZHTPMQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:N7GUVH24CS5QS37TX5JUZHTPMQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cdf17ece8a5da5e1c0e1ec71255791f617914b53877bd3372376652829e2cb6b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-03T14:18:22Z","title_canon_sha256":"77254920485693998a1cc31c8595001bfaec53c4e934b00afe75534ea1c506b0"},"schema_version":"1.0","source":{"id":"2509.03341","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.03341","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"arxiv_version","alias_value":"2509.03341v1","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.03341","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"pith_short_12","alias_value":"N7GUVH24CS5Q","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"pith_short_16","alias_value":"N7GUVH24CS5QS37T","created_at":"2026-07-05T12:04:20Z"},{"alias_kind":"pith_short_8","alias_value":"N7GUVH24","created_at":"2026-07-05T12:04:20Z"}],"graph_snapshots":[{"event_id":"sha256:f0086c1d36fe0ef8b5ea3e9b9b766a96dc6884979c67c797b562ce25f0eba2c6","target":"graph","created_at":"2026-07-05T12:04:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.03341/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Generative Adversarial Networks (GANs) and diffusion models have emerged as leading approaches for high-quality image synthesis. While both can be trained under differential privacy (DP) to protect sensitive data, their sensitivity to membership inference attacks (MIAs), a key threat to data confidentiality, remains poorly understood. In this work, we present the first unified theoretical and empirical analysis of the privacy risks faced by differentially private generative models. We begin by showing, through a stability-based analysis, that GANs exhibit fundamentally lower sensitivity to dat","authors_text":"Alain Rakotomamonjy, Alexandre Allauzen, Ilana Sebag, Jamal Atif, Jean-Yves Franceschi","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-03T14:18:22Z","title":"On the MIA Vulnerability Gap Between Private GANs and Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.03341","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c450df3d5ca3fb29f5504373d666b990ad8b0c36635f603627eba88fe8af8417","target":"record","created_at":"2026-07-05T12:04:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cdf17ece8a5da5e1c0e1ec71255791f617914b53877bd3372376652829e2cb6b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-03T14:18:22Z","title_canon_sha256":"77254920485693998a1cc31c8595001bfaec53c4e934b00afe75534ea1c506b0"},"schema_version":"1.0","source":{"id":"2509.03341","kind":"arxiv","version":1}},"canonical_sha256":"6fcd4a9f5c14bb096ff3bf534c9e6f6425f76289077c07880d3313cff20cda4b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6fcd4a9f5c14bb096ff3bf534c9e6f6425f76289077c07880d3313cff20cda4b","first_computed_at":"2026-07-05T12:04:20.730292Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:04:20.730292Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ufrOap/WdMRvWBe1nGEa15+7B6Q9HPbF3JLigL4zd6ZNoIx1rgXSQcjL3AWDRl9QmOEWt5u1bYWTErI5hJhlCw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:04:20.730717Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.03341","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c450df3d5ca3fb29f5504373d666b990ad8b0c36635f603627eba88fe8af8417","sha256:f0086c1d36fe0ef8b5ea3e9b9b766a96dc6884979c67c797b562ce25f0eba2c6"],"state_sha256":"1cdef8e3cfbf2fc853855eb79ab1a2482a2a4a705a585572fdc59b463f88e284"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TECUeT9FfE41gFsod5apQz1FFycmxzCBmgO/gnZvRuy172xdkrf/74yTk/wWFS3KkWTItP8g8hd7UFUsCXXECQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T14:51:14.165877Z","bundle_sha256":"af7eac95684c366d956f6037e69908c0d26f739be5da6f01e76ba5b11e408bfe"}}