{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:PACY5DPFMDAVGOZU5MUXI6APCR","short_pith_number":"pith:PACY5DPF","canonical_record":{"source":{"id":"2304.08566","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-17T19:06:56Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"30029472313f71ab3a0f10d473c89127806d4ee331e523b55304ab3473ff2c3b","abstract_canon_sha256":"a9cd176f2956cdeafe5cbcfe8a5d8d87a73ed106883ecde88b3f551cd0c7dbd2"},"schema_version":"1.0"},"canonical_sha256":"78058e8de560c1533b34eb2974780f145bd34294fefbd5efeb7a6153c22ed4d1","source":{"kind":"arxiv","id":"2304.08566","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.08566","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"arxiv_version","alias_value":"2304.08566v2","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.08566","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"pith_short_12","alias_value":"PACY5DPFMDAV","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"pith_short_16","alias_value":"PACY5DPFMDAVGOZU","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"pith_short_8","alias_value":"PACY5DPF","created_at":"2026-07-05T06:47:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:PACY5DPFMDAVGOZU5MUXI6APCR","target":"record","payload":{"canonical_record":{"source":{"id":"2304.08566","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-17T19:06:56Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"30029472313f71ab3a0f10d473c89127806d4ee331e523b55304ab3473ff2c3b","abstract_canon_sha256":"a9cd176f2956cdeafe5cbcfe8a5d8d87a73ed106883ecde88b3f551cd0c7dbd2"},"schema_version":"1.0"},"canonical_sha256":"78058e8de560c1533b34eb2974780f145bd34294fefbd5efeb7a6153c22ed4d1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:47:01.529258Z","signature_b64":"ZWHDnB+Mp1Dd1Ir2/U2yaWcv1kCntJbHrYSxW5K07m/yO9X5SZ+Qwu4Je8HBxvczqDBsK1StCz+XUyRnGcdCDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"78058e8de560c1533b34eb2974780f145bd34294fefbd5efeb7a6153c22ed4d1","last_reissued_at":"2026-07-05T06:47:01.528864Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:47:01.528864Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.08566","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5RHv89W5vEnKcm/o99gqyydOgRESQ/IV+RnRy/G7JNGrVumr8YNvurfKrBf3hAxwczW0OANuqheDpUxN7CWnCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T22:31:07.108576Z"},"content_sha256":"5b4869497bca5f76e438cc8f1920d3b46668f0fd012976cc8f14410d9a9f108d","schema_version":"1.0","event_id":"sha256:5b4869497bca5f76e438cc8f1920d3b46668f0fd012976cc8f14410d9a9f108d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:PACY5DPFMDAVGOZU5MUXI6APCR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Asim Waheed, N. Asokan, Vasisht Duddu","submitted_at":"2023-04-17T19:06:56Z","abstract_excerpt":"Graph neural networks (GNNs) have emerged as a state-of-the-art approach to model and draw inferences from large scale graph-structured data in various application settings such as social networking. The primary goal of a GNN is to learn an embedding for each graph node in a dataset that encodes both the node features and the local graph structure around the node. Embeddings generated by a GNN for a graph node are unique to that GNN. Prior work has shown that GNNs are prone to model extraction attacks. Model extraction attacks and defenses have been explored extensively in other non-graph sett"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.08566","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.08566/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LvJ9fjDY/J6ntnuudvWTWQiyZeDKPXVyIFWGXps5o6OVMhjlRrXc2xRMg48BVq4TG8eXtnuRt+gVROw5v4KSCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T22:31:07.109465Z"},"content_sha256":"b8d8ebe0e55120eb80a956326184dca5b4c936a1e824e39e9468fd0821163787","schema_version":"1.0","event_id":"sha256:b8d8ebe0e55120eb80a956326184dca5b4c936a1e824e39e9468fd0821163787"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PACY5DPFMDAVGOZU5MUXI6APCR/bundle.json","state_url":"https://pith.science/pith/PACY5DPFMDAVGOZU5MUXI6APCR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PACY5DPFMDAVGOZU5MUXI6APCR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T22:31:07Z","links":{"resolver":"https://pith.science/pith/PACY5DPFMDAVGOZU5MUXI6APCR","bundle":"https://pith.science/pith/PACY5DPFMDAVGOZU5MUXI6APCR/bundle.json","state":"https://pith.science/pith/PACY5DPFMDAVGOZU5MUXI6APCR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PACY5DPFMDAVGOZU5MUXI6APCR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:PACY5DPFMDAVGOZU5MUXI6APCR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a9cd176f2956cdeafe5cbcfe8a5d8d87a73ed106883ecde88b3f551cd0c7dbd2","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-17T19:06:56Z","title_canon_sha256":"30029472313f71ab3a0f10d473c89127806d4ee331e523b55304ab3473ff2c3b"},"schema_version":"1.0","source":{"id":"2304.08566","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.08566","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"arxiv_version","alias_value":"2304.08566v2","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.08566","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"pith_short_12","alias_value":"PACY5DPFMDAV","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"pith_short_16","alias_value":"PACY5DPFMDAVGOZU","created_at":"2026-07-05T06:47:01Z"},{"alias_kind":"pith_short_8","alias_value":"PACY5DPF","created_at":"2026-07-05T06:47:01Z"}],"graph_snapshots":[{"event_id":"sha256:b8d8ebe0e55120eb80a956326184dca5b4c936a1e824e39e9468fd0821163787","target":"graph","created_at":"2026-07-05T06:47:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.08566/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph neural networks (GNNs) have emerged as a state-of-the-art approach to model and draw inferences from large scale graph-structured data in various application settings such as social networking. The primary goal of a GNN is to learn an embedding for each graph node in a dataset that encodes both the node features and the local graph structure around the node. Embeddings generated by a GNN for a graph node are unique to that GNN. Prior work has shown that GNNs are prone to model extraction attacks. Model extraction attacks and defenses have been explored extensively in other non-graph sett","authors_text":"Asim Waheed, N. Asokan, Vasisht Duddu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-17T19:06:56Z","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.08566","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5b4869497bca5f76e438cc8f1920d3b46668f0fd012976cc8f14410d9a9f108d","target":"record","created_at":"2026-07-05T06:47:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a9cd176f2956cdeafe5cbcfe8a5d8d87a73ed106883ecde88b3f551cd0c7dbd2","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-17T19:06:56Z","title_canon_sha256":"30029472313f71ab3a0f10d473c89127806d4ee331e523b55304ab3473ff2c3b"},"schema_version":"1.0","source":{"id":"2304.08566","kind":"arxiv","version":2}},"canonical_sha256":"78058e8de560c1533b34eb2974780f145bd34294fefbd5efeb7a6153c22ed4d1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"78058e8de560c1533b34eb2974780f145bd34294fefbd5efeb7a6153c22ed4d1","first_computed_at":"2026-07-05T06:47:01.528864Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:47:01.528864Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZWHDnB+Mp1Dd1Ir2/U2yaWcv1kCntJbHrYSxW5K07m/yO9X5SZ+Qwu4Je8HBxvczqDBsK1StCz+XUyRnGcdCDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:47:01.529258Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.08566","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5b4869497bca5f76e438cc8f1920d3b46668f0fd012976cc8f14410d9a9f108d","sha256:b8d8ebe0e55120eb80a956326184dca5b4c936a1e824e39e9468fd0821163787"],"state_sha256":"2a7df211f4a92811a1fa91b62cbd272ab47274a1a2cc68d285f801e230d51c73"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HfbZdGjkHqYiZ5gb5Nt30Fuwe8/yDZPm1xP28mWwjbAUi2l6zRUamFse1/5xaYPu91jNbBRMkEOF3CTeVXvBBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T22:31:07.117125Z","bundle_sha256":"4034f13c469706900dbeb43dc671e8fccc6378e0f3dde970e552c5d4917d6037"}}