{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:O2QP4L3XNUKKLDF77OM6EFLCLH","short_pith_number":"pith:O2QP4L3X","canonical_record":{"source":{"id":"2202.12219","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-24T17:31:08Z","cross_cats_sorted":[],"title_canon_sha256":"4b0d7f7d98e18f701de1c56422c1e7a1b17d0638c37e3e2365901dff6729b6be","abstract_canon_sha256":"1f76120c74e802c2d368debe2ef2bbd3948153ac098f46d74b958a80cd5026fd"},"schema_version":"1.0"},"canonical_sha256":"76a0fe2f776d14a58cbffb99e2156259cc5538d2320f50e5d75f7a3cc3994fe3","source":{"kind":"arxiv","id":"2202.12219","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.12219","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"arxiv_version","alias_value":"2202.12219v2","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.12219","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"pith_short_12","alias_value":"O2QP4L3XNUKK","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"pith_short_16","alias_value":"O2QP4L3XNUKKLDF7","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"pith_short_8","alias_value":"O2QP4L3X","created_at":"2026-07-05T04:09:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:O2QP4L3XNUKKLDF77OM6EFLCLH","target":"record","payload":{"canonical_record":{"source":{"id":"2202.12219","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-24T17:31:08Z","cross_cats_sorted":[],"title_canon_sha256":"4b0d7f7d98e18f701de1c56422c1e7a1b17d0638c37e3e2365901dff6729b6be","abstract_canon_sha256":"1f76120c74e802c2d368debe2ef2bbd3948153ac098f46d74b958a80cd5026fd"},"schema_version":"1.0"},"canonical_sha256":"76a0fe2f776d14a58cbffb99e2156259cc5538d2320f50e5d75f7a3cc3994fe3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:09:01.919443Z","signature_b64":"LQrbbyLueT4nMiGW95ZYw+7HcOc7Z5r3kkIkuxJtEbThBdV9Vf+PgnhwHUxsI2eYJWKpx7Jx0r7/FTPriQWIAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"76a0fe2f776d14a58cbffb99e2156259cc5538d2320f50e5d75f7a3cc3994fe3","last_reissued_at":"2026-07-05T04:09:01.918953Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:09:01.918953Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.12219","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:09:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bzaDCwMXtqmFv4ffkn6o+aKPwJ9dlLrSPhp99T8Im3IVgkYdIuNzRIanDhlq3f681z9KrJ9B3Y9bRoRsSSWDAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T05:28:23.817557Z"},"content_sha256":"b070470b7afba1fe04e98121a836381f0f221d9ab85a971805928556324ca675","schema_version":"1.0","event_id":"sha256:b070470b7afba1fe04e98121a836381f0f221d9ab85a971805928556324ca675"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:O2QP4L3XNUKKLDF77OM6EFLCLH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Debugging Differential Privacy: A Case Study for Privacy Auditing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Andreas Terzis, Florian Tramer, Matthew Jagielski, Nicholas Carlini, Shuang Song, Thomas Steinke","submitted_at":"2022-02-24T17:31:08Z","abstract_excerpt":"Differential Privacy can provide provable privacy guarantees for training data in machine learning. However, the presence of proofs does not preclude the presence of errors. Inspired by recent advances in auditing which have been used for estimating lower bounds on differentially private algorithms, here we show that auditing can also be used to find flaws in (purportedly) differentially private schemes. In this case study, we audit a recent open source implementation of a differentially private deep learning algorithm and find, with 99.99999999% confidence, that the implementation does not sa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.12219","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.12219/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:09:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M7V0lCbvKB+VyMVoISOWJLbly6KsbYA0Uxmq/Uh8tNLwkFwRXaBIAXmR6Ly8RPXh7jNLz4PPrQPiKNiMaxKzDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T05:28:23.818058Z"},"content_sha256":"a5da5e6549eb81707cd2eda41b685e53e7de88511698e430c15c86dfdd848050","schema_version":"1.0","event_id":"sha256:a5da5e6549eb81707cd2eda41b685e53e7de88511698e430c15c86dfdd848050"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O2QP4L3XNUKKLDF77OM6EFLCLH/bundle.json","state_url":"https://pith.science/pith/O2QP4L3XNUKKLDF77OM6EFLCLH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O2QP4L3XNUKKLDF77OM6EFLCLH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T05:28:23Z","links":{"resolver":"https://pith.science/pith/O2QP4L3XNUKKLDF77OM6EFLCLH","bundle":"https://pith.science/pith/O2QP4L3XNUKKLDF77OM6EFLCLH/bundle.json","state":"https://pith.science/pith/O2QP4L3XNUKKLDF77OM6EFLCLH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O2QP4L3XNUKKLDF77OM6EFLCLH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:O2QP4L3XNUKKLDF77OM6EFLCLH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f76120c74e802c2d368debe2ef2bbd3948153ac098f46d74b958a80cd5026fd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-24T17:31:08Z","title_canon_sha256":"4b0d7f7d98e18f701de1c56422c1e7a1b17d0638c37e3e2365901dff6729b6be"},"schema_version":"1.0","source":{"id":"2202.12219","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.12219","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"arxiv_version","alias_value":"2202.12219v2","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.12219","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"pith_short_12","alias_value":"O2QP4L3XNUKK","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"pith_short_16","alias_value":"O2QP4L3XNUKKLDF7","created_at":"2026-07-05T04:09:01Z"},{"alias_kind":"pith_short_8","alias_value":"O2QP4L3X","created_at":"2026-07-05T04:09:01Z"}],"graph_snapshots":[{"event_id":"sha256:a5da5e6549eb81707cd2eda41b685e53e7de88511698e430c15c86dfdd848050","target":"graph","created_at":"2026-07-05T04:09:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.12219/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Differential Privacy can provide provable privacy guarantees for training data in machine learning. However, the presence of proofs does not preclude the presence of errors. Inspired by recent advances in auditing which have been used for estimating lower bounds on differentially private algorithms, here we show that auditing can also be used to find flaws in (purportedly) differentially private schemes. In this case study, we audit a recent open source implementation of a differentially private deep learning algorithm and find, with 99.99999999% confidence, that the implementation does not sa","authors_text":"Andreas Terzis, Florian Tramer, Matthew Jagielski, Nicholas Carlini, Shuang Song, Thomas Steinke","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-24T17:31:08Z","title":"Debugging Differential Privacy: A Case Study for Privacy Auditing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.12219","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b070470b7afba1fe04e98121a836381f0f221d9ab85a971805928556324ca675","target":"record","created_at":"2026-07-05T04:09:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f76120c74e802c2d368debe2ef2bbd3948153ac098f46d74b958a80cd5026fd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-24T17:31:08Z","title_canon_sha256":"4b0d7f7d98e18f701de1c56422c1e7a1b17d0638c37e3e2365901dff6729b6be"},"schema_version":"1.0","source":{"id":"2202.12219","kind":"arxiv","version":2}},"canonical_sha256":"76a0fe2f776d14a58cbffb99e2156259cc5538d2320f50e5d75f7a3cc3994fe3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"76a0fe2f776d14a58cbffb99e2156259cc5538d2320f50e5d75f7a3cc3994fe3","first_computed_at":"2026-07-05T04:09:01.918953Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:09:01.918953Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LQrbbyLueT4nMiGW95ZYw+7HcOc7Z5r3kkIkuxJtEbThBdV9Vf+PgnhwHUxsI2eYJWKpx7Jx0r7/FTPriQWIAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:09:01.919443Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.12219","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b070470b7afba1fe04e98121a836381f0f221d9ab85a971805928556324ca675","sha256:a5da5e6549eb81707cd2eda41b685e53e7de88511698e430c15c86dfdd848050"],"state_sha256":"6c88f36919f60d9bc77c713817305d11bd474c61f2d8c3fd4eb3ee248027587e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r9tig28wShP6pwFaSyuHncMId67xKBxS1xOHPnWzfiDVyMvzfodLwtxXyp04kxV4OpKD2UrKymiZkjQmOEpXCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T05:28:23.822813Z","bundle_sha256":"c22094c6043404bf112e5b010f334b37228ce0a3566b499e92a4d4780f26f703"}}