{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:NGSLS5ICYG4WRQXW6B3BVO2USJ","short_pith_number":"pith:NGSLS5IC","canonical_record":{"source":{"id":"2103.01379","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2021-03-02T00:37:11Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"5eac4528426905b60ffc5a3849ba86201684908e0cf425efa8fd8e91396925c5","abstract_canon_sha256":"7adf941b30a30b40e5f62fc6e060fa8b3cdcf7e25ef0335932967f025e5a71a8"},"schema_version":"1.0"},"canonical_sha256":"69a4b97502c1b968c2f6f0761abb54927b2d0872ea237408efa4cefe8134b0ae","source":{"kind":"arxiv","id":"2103.01379","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.01379","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"arxiv_version","alias_value":"2103.01379v2","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.01379","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"pith_short_12","alias_value":"NGSLS5ICYG4W","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"pith_short_16","alias_value":"NGSLS5ICYG4WRQXW","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"pith_short_8","alias_value":"NGSLS5IC","created_at":"2026-07-05T02:46:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:NGSLS5ICYG4WRQXW6B3BVO2USJ","target":"record","payload":{"canonical_record":{"source":{"id":"2103.01379","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2021-03-02T00:37:11Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"5eac4528426905b60ffc5a3849ba86201684908e0cf425efa8fd8e91396925c5","abstract_canon_sha256":"7adf941b30a30b40e5f62fc6e060fa8b3cdcf7e25ef0335932967f025e5a71a8"},"schema_version":"1.0"},"canonical_sha256":"69a4b97502c1b968c2f6f0761abb54927b2d0872ea237408efa4cefe8134b0ae","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:46:26.787059Z","signature_b64":"rGQh6OqMgtPQQGu8yBxdheTvFEs8xK9p8brsk0ryGkUMPaqIoJdasYaujpxYK9xlGLBaqYMK6FH5f8Ql++ZjDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"69a4b97502c1b968c2f6f0761abb54927b2d0872ea237408efa4cefe8134b0ae","last_reissued_at":"2026-07-05T02:46:26.786620Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:46:26.786620Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.01379","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:46:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+XNMtZfOxhHcMNj6/Yg+wNGwg8iMSYL2mudc/+dZ5ZkucVPsFf72NQ/RAWIaj062HAzEjqplsm5KXMfwH/n6Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:07:44.926164Z"},"content_sha256":"8292c9048e5441986832e496dd9ccddd04b85628a7cc5d23702b7fa273d6819e","schema_version":"1.0","event_id":"sha256:8292c9048e5441986832e496dd9ccddd04b85628a7cc5d23702b7fa273d6819e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:NGSLS5ICYG4WRQXW6B3BVO2USJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Practical Privacy Filters and Odometers with R\\'enyi Differential Privacy and Applications to Differentially Private Deep Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"stat.ML","authors_text":"Mathias L\\'ecuyer","submitted_at":"2021-03-02T00:37:11Z","abstract_excerpt":"Differential Privacy (DP) is the leading approach to privacy preserving deep learning. As such, there are multiple efforts to provide drop-in integration of DP into popular frameworks. These efforts, which add noise to each gradient computation to make it DP, rely on composition theorems to bound the total privacy loss incurred over this sequence of DP computations.\n  However, existing composition theorems present a tension between efficiency and flexibility. Most theorems require all computations in the sequence to have a predefined DP parameter, called the privacy budget. This prevents the d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.01379","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.01379/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:46:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"38XF5S7JYK0qJyX7Fc/VGMrYj+/stfiUfsmrI5UqD9qmoUw4sRL3zP28BulMlk8tP4gtZgPl+VemLWuR8zWKCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:07:44.926652Z"},"content_sha256":"0baadf0a0b991ae44250985e539348733ed016df2b6e12532759cc78d47ed86a","schema_version":"1.0","event_id":"sha256:0baadf0a0b991ae44250985e539348733ed016df2b6e12532759cc78d47ed86a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NGSLS5ICYG4WRQXW6B3BVO2USJ/bundle.json","state_url":"https://pith.science/pith/NGSLS5ICYG4WRQXW6B3BVO2USJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NGSLS5ICYG4WRQXW6B3BVO2USJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T23:07:44Z","links":{"resolver":"https://pith.science/pith/NGSLS5ICYG4WRQXW6B3BVO2USJ","bundle":"https://pith.science/pith/NGSLS5ICYG4WRQXW6B3BVO2USJ/bundle.json","state":"https://pith.science/pith/NGSLS5ICYG4WRQXW6B3BVO2USJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NGSLS5ICYG4WRQXW6B3BVO2USJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:NGSLS5ICYG4WRQXW6B3BVO2USJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7adf941b30a30b40e5f62fc6e060fa8b3cdcf7e25ef0335932967f025e5a71a8","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2021-03-02T00:37:11Z","title_canon_sha256":"5eac4528426905b60ffc5a3849ba86201684908e0cf425efa8fd8e91396925c5"},"schema_version":"1.0","source":{"id":"2103.01379","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.01379","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"arxiv_version","alias_value":"2103.01379v2","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.01379","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"pith_short_12","alias_value":"NGSLS5ICYG4W","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"pith_short_16","alias_value":"NGSLS5ICYG4WRQXW","created_at":"2026-07-05T02:46:26Z"},{"alias_kind":"pith_short_8","alias_value":"NGSLS5IC","created_at":"2026-07-05T02:46:26Z"}],"graph_snapshots":[{"event_id":"sha256:0baadf0a0b991ae44250985e539348733ed016df2b6e12532759cc78d47ed86a","target":"graph","created_at":"2026-07-05T02:46:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.01379/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Differential Privacy (DP) is the leading approach to privacy preserving deep learning. As such, there are multiple efforts to provide drop-in integration of DP into popular frameworks. These efforts, which add noise to each gradient computation to make it DP, rely on composition theorems to bound the total privacy loss incurred over this sequence of DP computations.\n  However, existing composition theorems present a tension between efficiency and flexibility. Most theorems require all computations in the sequence to have a predefined DP parameter, called the privacy budget. This prevents the d","authors_text":"Mathias L\\'ecuyer","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2021-03-02T00:37:11Z","title":"Practical Privacy Filters and Odometers with R\\'enyi Differential Privacy and Applications to Differentially Private Deep Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.01379","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8292c9048e5441986832e496dd9ccddd04b85628a7cc5d23702b7fa273d6819e","target":"record","created_at":"2026-07-05T02:46:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7adf941b30a30b40e5f62fc6e060fa8b3cdcf7e25ef0335932967f025e5a71a8","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2021-03-02T00:37:11Z","title_canon_sha256":"5eac4528426905b60ffc5a3849ba86201684908e0cf425efa8fd8e91396925c5"},"schema_version":"1.0","source":{"id":"2103.01379","kind":"arxiv","version":2}},"canonical_sha256":"69a4b97502c1b968c2f6f0761abb54927b2d0872ea237408efa4cefe8134b0ae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"69a4b97502c1b968c2f6f0761abb54927b2d0872ea237408efa4cefe8134b0ae","first_computed_at":"2026-07-05T02:46:26.786620Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:46:26.786620Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rGQh6OqMgtPQQGu8yBxdheTvFEs8xK9p8brsk0ryGkUMPaqIoJdasYaujpxYK9xlGLBaqYMK6FH5f8Ql++ZjDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:46:26.787059Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.01379","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8292c9048e5441986832e496dd9ccddd04b85628a7cc5d23702b7fa273d6819e","sha256:0baadf0a0b991ae44250985e539348733ed016df2b6e12532759cc78d47ed86a"],"state_sha256":"e7007dd52413f81d602da1edf271c0c4f37b490fbd9a2e343f27d44d621ca141"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yl4GURFM1N+wIb2olBRkrIJHb+WH5oSGMTBg0jlm1MPPJHzSP6pMrTwqAfLlNvq+Wfz5N2dzklm9jwtNy5zEAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T23:07:44.930479Z","bundle_sha256":"129139d096b403c345af9fd42570239e2944589378acf3d873ddb6048c05522f"}}