{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:NFSEJWANYCOVSSRX3EKQBQ3LR3","short_pith_number":"pith:NFSEJWAN","canonical_record":{"source":{"id":"2309.02672","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-06T02:45:08Z","cross_cats_sorted":["cs.IT","math.IT"],"title_canon_sha256":"35262bbeedde5347eaf2ae5d0958c9e1bb816f04c380f5838ece5efc097a6c05","abstract_canon_sha256":"88f326a39341a40d542233fda89bd1211ee10da15e60a5e5fd4452fff54b6462"},"schema_version":"1.0"},"canonical_sha256":"696444d80dc09d594a37d91500c36b8eda61ae65270e2b6801473485bbaf3283","source":{"kind":"arxiv","id":"2309.02672","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.02672","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"arxiv_version","alias_value":"2309.02672v2","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.02672","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"pith_short_12","alias_value":"NFSEJWANYCOV","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"pith_short_16","alias_value":"NFSEJWANYCOVSSRX","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"pith_short_8","alias_value":"NFSEJWAN","created_at":"2026-07-05T06:55:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:NFSEJWANYCOVSSRX3EKQBQ3LR3","target":"record","payload":{"canonical_record":{"source":{"id":"2309.02672","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-06T02:45:08Z","cross_cats_sorted":["cs.IT","math.IT"],"title_canon_sha256":"35262bbeedde5347eaf2ae5d0958c9e1bb816f04c380f5838ece5efc097a6c05","abstract_canon_sha256":"88f326a39341a40d542233fda89bd1211ee10da15e60a5e5fd4452fff54b6462"},"schema_version":"1.0"},"canonical_sha256":"696444d80dc09d594a37d91500c36b8eda61ae65270e2b6801473485bbaf3283","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:55:05.802642Z","signature_b64":"OpbfBMMtPPSZ7eyMHDfueTQsGk5VdrYNzB0corZZQd2MyeZr35YIt6YHKR8y7KipGDPL7fKtxXALL5Xy3OTDCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"696444d80dc09d594a37d91500c36b8eda61ae65270e2b6801473485bbaf3283","last_reissued_at":"2026-07-05T06:55:05.802092Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:55:05.802092Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.02672","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:55:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XhU5CIMh4NmjD621f5xWFarZP1BnIt1Jp5EdNdlmDjg0VrjWOYwmXaKuARu1kbA2gRY4C9MwPG9EtMTc1sh0Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:12:38.536741Z"},"content_sha256":"ff5943acced8bad9e86000c91c6783c131227c757bcb4a992ec92194efadb2ef","schema_version":"1.0","event_id":"sha256:ff5943acced8bad9e86000c91c6783c131227c757bcb4a992ec92194efadb2ef"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:NFSEJWANYCOVSSRX3EKQBQ3LR3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Geometry of Sensitivity: Twice Sampling and Hybrid Clipping in Differential Privacy with Optimal Gaussian Noise and Application to Deep Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.IT","math.IT"],"primary_cat":"cs.CR","authors_text":"Hanshen Xiao, Jun Wan, Srinivas Devadas","submitted_at":"2023-09-06T02:45:08Z","abstract_excerpt":"We study the fundamental problem of the construction of optimal randomization in Differential Privacy. Depending on the clipping strategy or additional properties of the processing function, the corresponding sensitivity set theoretically determines the necessary randomization to produce the required security parameters. Towards the optimal utility-privacy tradeoff, finding the minimal perturbation for properly-selected sensitivity sets stands as a central problem in DP research. In practice, l_2/l_1-norm clippings with Gaussian/Laplace noise mechanisms are among the most common setups. Howeve"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.02672","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.02672/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:55:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rieHfUD6FvfsT4YmY9j/YCF8hbsaZbVe/OuZPhZtIQLGsIIZRqagI8CdIP6HqzpmHjBb7UwNEOoHlv+b/+UuAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:12:38.537291Z"},"content_sha256":"474a56222380572965e489c27fb7b4d47e1580b3f4d49c733cc4551476d15a57","schema_version":"1.0","event_id":"sha256:474a56222380572965e489c27fb7b4d47e1580b3f4d49c733cc4551476d15a57"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NFSEJWANYCOVSSRX3EKQBQ3LR3/bundle.json","state_url":"https://pith.science/pith/NFSEJWANYCOVSSRX3EKQBQ3LR3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NFSEJWANYCOVSSRX3EKQBQ3LR3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T06:12:38Z","links":{"resolver":"https://pith.science/pith/NFSEJWANYCOVSSRX3EKQBQ3LR3","bundle":"https://pith.science/pith/NFSEJWANYCOVSSRX3EKQBQ3LR3/bundle.json","state":"https://pith.science/pith/NFSEJWANYCOVSSRX3EKQBQ3LR3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NFSEJWANYCOVSSRX3EKQBQ3LR3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NFSEJWANYCOVSSRX3EKQBQ3LR3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"88f326a39341a40d542233fda89bd1211ee10da15e60a5e5fd4452fff54b6462","cross_cats_sorted":["cs.IT","math.IT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-06T02:45:08Z","title_canon_sha256":"35262bbeedde5347eaf2ae5d0958c9e1bb816f04c380f5838ece5efc097a6c05"},"schema_version":"1.0","source":{"id":"2309.02672","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.02672","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"arxiv_version","alias_value":"2309.02672v2","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.02672","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"pith_short_12","alias_value":"NFSEJWANYCOV","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"pith_short_16","alias_value":"NFSEJWANYCOVSSRX","created_at":"2026-07-05T06:55:05Z"},{"alias_kind":"pith_short_8","alias_value":"NFSEJWAN","created_at":"2026-07-05T06:55:05Z"}],"graph_snapshots":[{"event_id":"sha256:474a56222380572965e489c27fb7b4d47e1580b3f4d49c733cc4551476d15a57","target":"graph","created_at":"2026-07-05T06:55:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.02672/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study the fundamental problem of the construction of optimal randomization in Differential Privacy. Depending on the clipping strategy or additional properties of the processing function, the corresponding sensitivity set theoretically determines the necessary randomization to produce the required security parameters. Towards the optimal utility-privacy tradeoff, finding the minimal perturbation for properly-selected sensitivity sets stands as a central problem in DP research. In practice, l_2/l_1-norm clippings with Gaussian/Laplace noise mechanisms are among the most common setups. Howeve","authors_text":"Hanshen Xiao, Jun Wan, Srinivas Devadas","cross_cats":["cs.IT","math.IT"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-06T02:45:08Z","title":"Geometry of Sensitivity: Twice Sampling and Hybrid Clipping in Differential Privacy with Optimal Gaussian Noise and Application to Deep Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.02672","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ff5943acced8bad9e86000c91c6783c131227c757bcb4a992ec92194efadb2ef","target":"record","created_at":"2026-07-05T06:55:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"88f326a39341a40d542233fda89bd1211ee10da15e60a5e5fd4452fff54b6462","cross_cats_sorted":["cs.IT","math.IT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-06T02:45:08Z","title_canon_sha256":"35262bbeedde5347eaf2ae5d0958c9e1bb816f04c380f5838ece5efc097a6c05"},"schema_version":"1.0","source":{"id":"2309.02672","kind":"arxiv","version":2}},"canonical_sha256":"696444d80dc09d594a37d91500c36b8eda61ae65270e2b6801473485bbaf3283","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"696444d80dc09d594a37d91500c36b8eda61ae65270e2b6801473485bbaf3283","first_computed_at":"2026-07-05T06:55:05.802092Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:55:05.802092Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OpbfBMMtPPSZ7eyMHDfueTQsGk5VdrYNzB0corZZQd2MyeZr35YIt6YHKR8y7KipGDPL7fKtxXALL5Xy3OTDCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:55:05.802642Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.02672","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ff5943acced8bad9e86000c91c6783c131227c757bcb4a992ec92194efadb2ef","sha256:474a56222380572965e489c27fb7b4d47e1580b3f4d49c733cc4551476d15a57"],"state_sha256":"0e6d4f39379975c77ce0441ef1c4e6c1cb84b7d38023ea8a16e5f903fc41165b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TcjjXs+pQnJz7f4fmbfhYXDhL3aKYhWZt5/1CF6Bet8nmZloRjuXFkomb/lrjuSoa1AV79QSjOvsy7+Dk3iGBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T06:12:38.542222Z","bundle_sha256":"a76b8f6411516707ba35944fadb2ba440b324f60d973837062d1d3507dd8b18e"}}