{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:OCH4OQWFYOE3DOBZCUA7CH7GAO","short_pith_number":"pith:OCH4OQWF","canonical_record":{"source":{"id":"2411.11197","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-17T23:15:36Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c45558f907311c39eac12037841c105453af33f61e8af9811ccf0363bbd257c0","abstract_canon_sha256":"f02c5861c8af4d1176509444e54c9ff1a7c24001818b2f99d545afc1b8496b8c"},"schema_version":"1.0"},"canonical_sha256":"708fc742c5c389b1b8391501f11fe603ad5522815fdaa94097f5d9f8b6fb9a86","source":{"kind":"arxiv","id":"2411.11197","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.11197","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"arxiv_version","alias_value":"2411.11197v2","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.11197","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"pith_short_12","alias_value":"OCH4OQWFYOE3","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"pith_short_16","alias_value":"OCH4OQWFYOE3DOBZ","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"pith_short_8","alias_value":"OCH4OQWF","created_at":"2026-07-05T11:09:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:OCH4OQWFYOE3DOBZCUA7CH7GAO","target":"record","payload":{"canonical_record":{"source":{"id":"2411.11197","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-17T23:15:36Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c45558f907311c39eac12037841c105453af33f61e8af9811ccf0363bbd257c0","abstract_canon_sha256":"f02c5861c8af4d1176509444e54c9ff1a7c24001818b2f99d545afc1b8496b8c"},"schema_version":"1.0"},"canonical_sha256":"708fc742c5c389b1b8391501f11fe603ad5522815fdaa94097f5d9f8b6fb9a86","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:04.134942Z","signature_b64":"8NpQayp/gF9Jcl4hj2xqtTp9mRxxf6Ki3fFlC3EY4IrmmYMAH9+VRMYohS23IAP3WaAYtdi2Q/N6kbr6aYfUAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"708fc742c5c389b1b8391501f11fe603ad5522815fdaa94097f5d9f8b6fb9a86","last_reissued_at":"2026-07-05T11:09:04.134489Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:04.134489Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.11197","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EE84YjSRqTxSJRPxFqn0U27aAbhs8N3cQTfSTsEzMI2Crj00BNf/VJBzs6QzHz9BQ03XkmClMvCD21Pc9QCUBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T17:42:14.049867Z"},"content_sha256":"04114cbd9bc12b529d045656ca12532a1938e0fb9cb8e6328894cbf6d0bae4f4","schema_version":"1.0","event_id":"sha256:04114cbd9bc12b529d045656ca12532a1938e0fb9cb8e6328894cbf6d0bae4f4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:OCH4OQWFYOE3DOBZCUA7CH7GAO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stealing Training Graphs from Graph Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Enyan Dai, Jinyuan Jia, Junjie Xu, Minhua Lin, Suhang Wang, Xiang Zhang","submitted_at":"2024-11-17T23:15:36Z","abstract_excerpt":"Graph Neural Networks (GNNs) have shown promising results in modeling graphs in various tasks. The training of GNNs, especially on specialized tasks such as bioinformatics, demands extensive expert annotations, which are expensive and usually contain sensitive information of data providers. The trained GNN models are often shared for deployment in the real world. As neural networks can memorize the training samples, the model parameters of GNNs have a high risk of leaking private training data. Our theoretical analysis shows the strong connections between trained GNN parameters and the trainin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.11197","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.11197/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+/yxgXMSD5KmQJy82jSOoxU6hWTpAMurBuvgA19piN9u3r5HpJlS4iJ0AloZ+b5CSSqyF9x5yCiQUWzRQNUNCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T17:42:14.050510Z"},"content_sha256":"a000d0bfae212f9771e3f4d94f41ae43c3ea478a3a6f423809a41be282f474fd","schema_version":"1.0","event_id":"sha256:a000d0bfae212f9771e3f4d94f41ae43c3ea478a3a6f423809a41be282f474fd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OCH4OQWFYOE3DOBZCUA7CH7GAO/bundle.json","state_url":"https://pith.science/pith/OCH4OQWFYOE3DOBZCUA7CH7GAO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OCH4OQWFYOE3DOBZCUA7CH7GAO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T17:42:14Z","links":{"resolver":"https://pith.science/pith/OCH4OQWFYOE3DOBZCUA7CH7GAO","bundle":"https://pith.science/pith/OCH4OQWFYOE3DOBZCUA7CH7GAO/bundle.json","state":"https://pith.science/pith/OCH4OQWFYOE3DOBZCUA7CH7GAO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OCH4OQWFYOE3DOBZCUA7CH7GAO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:OCH4OQWFYOE3DOBZCUA7CH7GAO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f02c5861c8af4d1176509444e54c9ff1a7c24001818b2f99d545afc1b8496b8c","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-17T23:15:36Z","title_canon_sha256":"c45558f907311c39eac12037841c105453af33f61e8af9811ccf0363bbd257c0"},"schema_version":"1.0","source":{"id":"2411.11197","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.11197","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"arxiv_version","alias_value":"2411.11197v2","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.11197","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"pith_short_12","alias_value":"OCH4OQWFYOE3","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"pith_short_16","alias_value":"OCH4OQWFYOE3DOBZ","created_at":"2026-07-05T11:09:04Z"},{"alias_kind":"pith_short_8","alias_value":"OCH4OQWF","created_at":"2026-07-05T11:09:04Z"}],"graph_snapshots":[{"event_id":"sha256:a000d0bfae212f9771e3f4d94f41ae43c3ea478a3a6f423809a41be282f474fd","target":"graph","created_at":"2026-07-05T11:09:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.11197/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph Neural Networks (GNNs) have shown promising results in modeling graphs in various tasks. The training of GNNs, especially on specialized tasks such as bioinformatics, demands extensive expert annotations, which are expensive and usually contain sensitive information of data providers. The trained GNN models are often shared for deployment in the real world. As neural networks can memorize the training samples, the model parameters of GNNs have a high risk of leaking private training data. Our theoretical analysis shows the strong connections between trained GNN parameters and the trainin","authors_text":"Enyan Dai, Jinyuan Jia, Junjie Xu, Minhua Lin, Suhang Wang, Xiang Zhang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-17T23:15:36Z","title":"Stealing Training Graphs from Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.11197","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:04114cbd9bc12b529d045656ca12532a1938e0fb9cb8e6328894cbf6d0bae4f4","target":"record","created_at":"2026-07-05T11:09:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f02c5861c8af4d1176509444e54c9ff1a7c24001818b2f99d545afc1b8496b8c","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-17T23:15:36Z","title_canon_sha256":"c45558f907311c39eac12037841c105453af33f61e8af9811ccf0363bbd257c0"},"schema_version":"1.0","source":{"id":"2411.11197","kind":"arxiv","version":2}},"canonical_sha256":"708fc742c5c389b1b8391501f11fe603ad5522815fdaa94097f5d9f8b6fb9a86","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"708fc742c5c389b1b8391501f11fe603ad5522815fdaa94097f5d9f8b6fb9a86","first_computed_at":"2026-07-05T11:09:04.134489Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:04.134489Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8NpQayp/gF9Jcl4hj2xqtTp9mRxxf6Ki3fFlC3EY4IrmmYMAH9+VRMYohS23IAP3WaAYtdi2Q/N6kbr6aYfUAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:04.134942Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.11197","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:04114cbd9bc12b529d045656ca12532a1938e0fb9cb8e6328894cbf6d0bae4f4","sha256:a000d0bfae212f9771e3f4d94f41ae43c3ea478a3a6f423809a41be282f474fd"],"state_sha256":"16e32c01a88b515d9c25b0c97e881b311cdb997f418c8139e1459bb9304d7690"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5tsHjVr+wEjwWuVviyrsSScFyXqv+hZWSkND8WXIiEtsbYKw5cDU63gtyYNvcOOtLFN5iMmzUwBRnFsqxOG3Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T17:42:14.055231Z","bundle_sha256":"bfb2cd8deb3bd8055df678f43aca6f5985a1bb63def8ccc7672d355ff70b5176"}}