{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:NYEEJDD6743GNGWHHSXIG2UCJ2","short_pith_number":"pith:NYEEJDD6","canonical_record":{"source":{"id":"2009.05683","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T23:15:05Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"785b22ba669a7d4c2d580479e647db8a7e2713e328a1e9574de523393c092774","abstract_canon_sha256":"91aa61bcb6289355c68ee9062f5665f8e77c4a611b2194aa32082061d3bf062c"},"schema_version":"1.0"},"canonical_sha256":"6e08448c7eff36669ac73cae836a824eafcb42bcdf06d1bf044faebaafdd9eba","source":{"kind":"arxiv","id":"2009.05683","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.05683","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"arxiv_version","alias_value":"2009.05683v5","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.05683","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"pith_short_12","alias_value":"NYEEJDD6743G","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"pith_short_16","alias_value":"NYEEJDD6743GNGWH","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"pith_short_8","alias_value":"NYEEJDD6","created_at":"2026-07-05T05:05:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:NYEEJDD6743GNGWHHSXIG2UCJ2","target":"record","payload":{"canonical_record":{"source":{"id":"2009.05683","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T23:15:05Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"785b22ba669a7d4c2d580479e647db8a7e2713e328a1e9574de523393c092774","abstract_canon_sha256":"91aa61bcb6289355c68ee9062f5665f8e77c4a611b2194aa32082061d3bf062c"},"schema_version":"1.0"},"canonical_sha256":"6e08448c7eff36669ac73cae836a824eafcb42bcdf06d1bf044faebaafdd9eba","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:05:42.863792Z","signature_b64":"c5ChFWuUJrrFrg78pI9JmR583zHZIRFHq428JTDm3WeSge0NPYp8J8XS0o2fXMkIOKwZZR0T+q/sz1HqG1HKDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6e08448c7eff36669ac73cae836a824eafcb42bcdf06d1bf044faebaafdd9eba","last_reissued_at":"2026-07-05T05:05:42.863020Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:05:42.863020Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.05683","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:05:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6jgYSRo1D9NRz7ag5w0Hkp2soIUzy1Uw6EgUirR9H+i09Sx86No7snTIfp3+J9z0NwCGxXKc4iwETGUwHWfsBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:10:48.505238Z"},"content_sha256":"ae4f3ebbfec8849837f92f62015607f56b90c28c9645d2bc60fdbcfb9a617815","schema_version":"1.0","event_id":"sha256:ae4f3ebbfec8849837f92f62015607f56b90c28c9645d2bc60fdbcfb9a617815"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:NYEEJDD6743GNGWHHSXIG2UCJ2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Juan Lavista Ferres, Rahul Dodhia, Shruti Tople, Sumit Mukherjee, Xiyang Liu, Yixi Xu","submitted_at":"2020-09-11T23:15:05Z","abstract_excerpt":"Generative machine learning models are being increasingly viewed as a way to share sensitive data between institutions. While there has been work on developing differentially private generative modeling approaches, these approaches generally lead to sub-par sample quality, limiting their use in real world applications. Another line of work has focused on developing generative models which lead to higher quality samples but currently lack any formal privacy guarantees. In this work, we propose the first formal framework for membership privacy estimation in generative models. We formulate the me"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.05683","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.05683/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:05:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OPG7GgVb7TQAqKeqqxm2ixgTpsSvHYVMykp656NOrk75tUmceoJPvEOKA2FwXeTE65PVNiahgqUBZk6FRnZOCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:10:48.505663Z"},"content_sha256":"a60a5e88ac71f697c223e52c26a2e4a3fa057b6e6ebf9dda283a55d1b0687048","schema_version":"1.0","event_id":"sha256:a60a5e88ac71f697c223e52c26a2e4a3fa057b6e6ebf9dda283a55d1b0687048"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NYEEJDD6743GNGWHHSXIG2UCJ2/bundle.json","state_url":"https://pith.science/pith/NYEEJDD6743GNGWHHSXIG2UCJ2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NYEEJDD6743GNGWHHSXIG2UCJ2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:10:48Z","links":{"resolver":"https://pith.science/pith/NYEEJDD6743GNGWHHSXIG2UCJ2","bundle":"https://pith.science/pith/NYEEJDD6743GNGWHHSXIG2UCJ2/bundle.json","state":"https://pith.science/pith/NYEEJDD6743GNGWHHSXIG2UCJ2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NYEEJDD6743GNGWHHSXIG2UCJ2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:NYEEJDD6743GNGWHHSXIG2UCJ2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"91aa61bcb6289355c68ee9062f5665f8e77c4a611b2194aa32082061d3bf062c","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T23:15:05Z","title_canon_sha256":"785b22ba669a7d4c2d580479e647db8a7e2713e328a1e9574de523393c092774"},"schema_version":"1.0","source":{"id":"2009.05683","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.05683","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"arxiv_version","alias_value":"2009.05683v5","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.05683","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"pith_short_12","alias_value":"NYEEJDD6743G","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"pith_short_16","alias_value":"NYEEJDD6743GNGWH","created_at":"2026-07-05T05:05:42Z"},{"alias_kind":"pith_short_8","alias_value":"NYEEJDD6","created_at":"2026-07-05T05:05:42Z"}],"graph_snapshots":[{"event_id":"sha256:a60a5e88ac71f697c223e52c26a2e4a3fa057b6e6ebf9dda283a55d1b0687048","target":"graph","created_at":"2026-07-05T05:05:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.05683/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Generative machine learning models are being increasingly viewed as a way to share sensitive data between institutions. While there has been work on developing differentially private generative modeling approaches, these approaches generally lead to sub-par sample quality, limiting their use in real world applications. Another line of work has focused on developing generative models which lead to higher quality samples but currently lack any formal privacy guarantees. In this work, we propose the first formal framework for membership privacy estimation in generative models. We formulate the me","authors_text":"Juan Lavista Ferres, Rahul Dodhia, Shruti Tople, Sumit Mukherjee, Xiyang Liu, Yixi Xu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T23:15:05Z","title":"MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.05683","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ae4f3ebbfec8849837f92f62015607f56b90c28c9645d2bc60fdbcfb9a617815","target":"record","created_at":"2026-07-05T05:05:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"91aa61bcb6289355c68ee9062f5665f8e77c4a611b2194aa32082061d3bf062c","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T23:15:05Z","title_canon_sha256":"785b22ba669a7d4c2d580479e647db8a7e2713e328a1e9574de523393c092774"},"schema_version":"1.0","source":{"id":"2009.05683","kind":"arxiv","version":5}},"canonical_sha256":"6e08448c7eff36669ac73cae836a824eafcb42bcdf06d1bf044faebaafdd9eba","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6e08448c7eff36669ac73cae836a824eafcb42bcdf06d1bf044faebaafdd9eba","first_computed_at":"2026-07-05T05:05:42.863020Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:05:42.863020Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"c5ChFWuUJrrFrg78pI9JmR583zHZIRFHq428JTDm3WeSge0NPYp8J8XS0o2fXMkIOKwZZR0T+q/sz1HqG1HKDg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:05:42.863792Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.05683","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ae4f3ebbfec8849837f92f62015607f56b90c28c9645d2bc60fdbcfb9a617815","sha256:a60a5e88ac71f697c223e52c26a2e4a3fa057b6e6ebf9dda283a55d1b0687048"],"state_sha256":"86c9ee1e304c72afffd90f60754c062371bd3dc6564f1a9954105120233a5e0e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GV5Ske4Ysn9r+/miMfVAmgjRJr1WEbh25JX05nR08znKcMgC0QMOJwNukH3c75UvVSD3UDBg+x+57ExDSmDEDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:10:48.507856Z","bundle_sha256":"1865070981d78358c7828d5bfaa5745064227968bf595287f2b8f74741dfa8b8"}}