{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:O3P5Z7L6U5TLXBBLYTWJ6YIWQO","short_pith_number":"pith:O3P5Z7L6","canonical_record":{"source":{"id":"2202.03460","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T19:02:58Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ce3d64b1c571ed0443cd1c4d82a60db372fe4229d90491bf240565ee6421fecc","abstract_canon_sha256":"cee3a5e1407f93a52d38ad69fa9063ef5d9c8ad1abb9129e0e84dfa497b606e7"},"schema_version":"1.0"},"canonical_sha256":"76dfdcfd7ea766bb842bc4ec9f611683a89a1a5c25f385965e7025f5d0d4ce0f","source":{"kind":"arxiv","id":"2202.03460","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.03460","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"arxiv_version","alias_value":"2202.03460v1","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.03460","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_12","alias_value":"O3P5Z7L6U5TL","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_16","alias_value":"O3P5Z7L6U5TLXBBL","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_8","alias_value":"O3P5Z7L6","created_at":"2026-07-05T03:54:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:O3P5Z7L6U5TLXBBLYTWJ6YIWQO","target":"record","payload":{"canonical_record":{"source":{"id":"2202.03460","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T19:02:58Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ce3d64b1c571ed0443cd1c4d82a60db372fe4229d90491bf240565ee6421fecc","abstract_canon_sha256":"cee3a5e1407f93a52d38ad69fa9063ef5d9c8ad1abb9129e0e84dfa497b606e7"},"schema_version":"1.0"},"canonical_sha256":"76dfdcfd7ea766bb842bc4ec9f611683a89a1a5c25f385965e7025f5d0d4ce0f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:54:44.526685Z","signature_b64":"H4XKQIq0zJMQ1wbUMoIKnJtxvw7mFEQtLCOvb/0yz2QGKgLYT9An3kaT7u9OD3RJhSgoGRb/hXR2RLj3Eva7Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"76dfdcfd7ea766bb842bc4ec9f611683a89a1a5c25f385965e7025f5d0d4ce0f","last_reissued_at":"2026-07-05T03:54:44.526088Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:54:44.526088Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.03460","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:54:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+39ysGkEgsxJ9DVSu05yGTKsVhAgqDPAVZFRvZ0lkHaAR8wxyhSLbP5iOYmFrlTD54s9p8n67XLbjtXf35XUCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:15:32.413118Z"},"content_sha256":"f17320a2d7ba726546a8518cb371cc780302152661bb88486ece8b9a04a4b374","schema_version":"1.0","event_id":"sha256:f17320a2d7ba726546a8518cb371cc780302152661bb88486ece8b9a04a4b374"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:O3P5Z7L6U5TLXBBLYTWJ6YIWQO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Deletion Inference, Reconstruction, and Compliance in Machine (Un)Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Ji Gao, Mohammad Mahmoody, Prashant Nalini Vasudevan, Sanjam Garg","submitted_at":"2022-02-07T19:02:58Z","abstract_excerpt":"Privacy attacks on machine learning models aim to identify the data that is used to train such models. Such attacks, traditionally, are studied on static models that are trained once and are accessible by the adversary. Motivated to meet new legal requirements, many machine learning methods are recently extended to support machine unlearning, i.e., updating models as if certain examples are removed from their training sets, and meet new legal requirements. However, privacy attacks could potentially become more devastating in this new setting, since an attacker could now access both the origina"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.03460","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.03460/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:54:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WX6zKwcf0Jxndwq/+QVFuy7iR28ORvFfl9H3a94M2Xu5sVlb+tebmj5wROL0AIzkPCHvYWQJNhk5eTDy5ayLAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:15:32.413847Z"},"content_sha256":"10025e229a6b58ad17f8342b57822d47deb760124b7a0968fedcb0899bcf985f","schema_version":"1.0","event_id":"sha256:10025e229a6b58ad17f8342b57822d47deb760124b7a0968fedcb0899bcf985f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O3P5Z7L6U5TLXBBLYTWJ6YIWQO/bundle.json","state_url":"https://pith.science/pith/O3P5Z7L6U5TLXBBLYTWJ6YIWQO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O3P5Z7L6U5TLXBBLYTWJ6YIWQO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T02:15:32Z","links":{"resolver":"https://pith.science/pith/O3P5Z7L6U5TLXBBLYTWJ6YIWQO","bundle":"https://pith.science/pith/O3P5Z7L6U5TLXBBLYTWJ6YIWQO/bundle.json","state":"https://pith.science/pith/O3P5Z7L6U5TLXBBLYTWJ6YIWQO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O3P5Z7L6U5TLXBBLYTWJ6YIWQO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:O3P5Z7L6U5TLXBBLYTWJ6YIWQO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cee3a5e1407f93a52d38ad69fa9063ef5d9c8ad1abb9129e0e84dfa497b606e7","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T19:02:58Z","title_canon_sha256":"ce3d64b1c571ed0443cd1c4d82a60db372fe4229d90491bf240565ee6421fecc"},"schema_version":"1.0","source":{"id":"2202.03460","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.03460","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"arxiv_version","alias_value":"2202.03460v1","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.03460","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_12","alias_value":"O3P5Z7L6U5TL","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_16","alias_value":"O3P5Z7L6U5TLXBBL","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_8","alias_value":"O3P5Z7L6","created_at":"2026-07-05T03:54:44Z"}],"graph_snapshots":[{"event_id":"sha256:10025e229a6b58ad17f8342b57822d47deb760124b7a0968fedcb0899bcf985f","target":"graph","created_at":"2026-07-05T03:54:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.03460/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Privacy attacks on machine learning models aim to identify the data that is used to train such models. Such attacks, traditionally, are studied on static models that are trained once and are accessible by the adversary. Motivated to meet new legal requirements, many machine learning methods are recently extended to support machine unlearning, i.e., updating models as if certain examples are removed from their training sets, and meet new legal requirements. However, privacy attacks could potentially become more devastating in this new setting, since an attacker could now access both the origina","authors_text":"Ji Gao, Mohammad Mahmoody, Prashant Nalini Vasudevan, Sanjam Garg","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T19:02:58Z","title":"Deletion Inference, Reconstruction, and Compliance in Machine (Un)Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.03460","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f17320a2d7ba726546a8518cb371cc780302152661bb88486ece8b9a04a4b374","target":"record","created_at":"2026-07-05T03:54:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cee3a5e1407f93a52d38ad69fa9063ef5d9c8ad1abb9129e0e84dfa497b606e7","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T19:02:58Z","title_canon_sha256":"ce3d64b1c571ed0443cd1c4d82a60db372fe4229d90491bf240565ee6421fecc"},"schema_version":"1.0","source":{"id":"2202.03460","kind":"arxiv","version":1}},"canonical_sha256":"76dfdcfd7ea766bb842bc4ec9f611683a89a1a5c25f385965e7025f5d0d4ce0f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"76dfdcfd7ea766bb842bc4ec9f611683a89a1a5c25f385965e7025f5d0d4ce0f","first_computed_at":"2026-07-05T03:54:44.526088Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:54:44.526088Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"H4XKQIq0zJMQ1wbUMoIKnJtxvw7mFEQtLCOvb/0yz2QGKgLYT9An3kaT7u9OD3RJhSgoGRb/hXR2RLj3Eva7Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:54:44.526685Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.03460","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f17320a2d7ba726546a8518cb371cc780302152661bb88486ece8b9a04a4b374","sha256:10025e229a6b58ad17f8342b57822d47deb760124b7a0968fedcb0899bcf985f"],"state_sha256":"748510b82e2e3c05312b506e5015fdb0b779aaebaed073295240e688a43c2bb3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d+q+2dz2cv3rX4PPcYUOKoLWSvsQhdlNpk1nFTKzQ4vczqW8wmR6DCNOfUoMIULZzrpITrOs5330MxgYhGTpAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T02:15:32.417751Z","bundle_sha256":"31b2c73efece2dd963039c51f64ce820e749dfc4c914aa23c689af9be972bf27"}}