{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:PVZYUQNO3IDKY24BGABZBUQECR","short_pith_number":"pith:PVZYUQNO","canonical_record":{"source":{"id":"2504.00366","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"quant-ph","submitted_at":"2025-04-01T02:30:44Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"d8e67f27fc84a1e25c48756d0cbcd149cb761cef9028915c2d83a57b3e54fc68","abstract_canon_sha256":"b557c039b33e03cf8f24e124d74bbeaedccdad957b2e77558c1bd3f100459a07"},"schema_version":"1.0"},"canonical_sha256":"7d738a41aeda06ac6b81300390d2041470c0ae1a2c7c2c31f5079f1022412837","source":{"kind":"arxiv","id":"2504.00366","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.00366","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"arxiv_version","alias_value":"2504.00366v1","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.00366","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"pith_short_12","alias_value":"PVZYUQNO3IDK","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"pith_short_16","alias_value":"PVZYUQNO3IDKY24B","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"pith_short_8","alias_value":"PVZYUQNO","created_at":"2026-07-05T10:42:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:PVZYUQNO3IDKY24BGABZBUQECR","target":"record","payload":{"canonical_record":{"source":{"id":"2504.00366","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"quant-ph","submitted_at":"2025-04-01T02:30:44Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"d8e67f27fc84a1e25c48756d0cbcd149cb761cef9028915c2d83a57b3e54fc68","abstract_canon_sha256":"b557c039b33e03cf8f24e124d74bbeaedccdad957b2e77558c1bd3f100459a07"},"schema_version":"1.0"},"canonical_sha256":"7d738a41aeda06ac6b81300390d2041470c0ae1a2c7c2c31f5079f1022412837","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:42:25.066124Z","signature_b64":"QLd7iSOAlk+TKf1iacxPA2oCpoKmPxDOWbL6zqdGnikDeRkzJLfzsLAI9JOwDe9iJgU3W4+7yiDNS/IicBGRBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7d738a41aeda06ac6b81300390d2041470c0ae1a2c7c2c31f5079f1022412837","last_reissued_at":"2026-07-05T10:42:25.065659Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:42:25.065659Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.00366","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:42:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uVcsvhgRHpusYSCUuASiDNHT1bWw1Ko82iZ+T3l311a2Y32wdpHhFIT7FIOlVxSx35KgnBYbKGfEEw5eo8NrCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T14:48:25.057011Z"},"content_sha256":"c18475b97cd85bc2c67be581ff72df2551299b18acd4cfa3d0cb2b3873297d2f","schema_version":"1.0","event_id":"sha256:c18475b97cd85bc2c67be581ff72df2551299b18acd4cfa3d0cb2b3873297d2f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:PVZYUQNO3IDKY24BGABZBUQECR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CopyQNN: Quantum Neural Network Extraction Attack under Varying Quantum Noise","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"quant-ph","authors_text":"Fan Chen, Gang Huang, Leyi Zhao, Xuhong Zhang, Yilun Xu, Zhenxiao Fu","submitted_at":"2025-04-01T02:30:44Z","abstract_excerpt":"Quantum Neural Networks (QNNs) have shown significant value across domains, with well-trained QNNs representing critical intellectual property often deployed via cloud-based QNN-as-a-Service (QNNaaS) platforms. Recent work has examined QNN model extraction attacks using classical and emerging quantum strategies. These attacks involve adversaries querying QNNaaS platforms to obtain labeled data for training local substitute QNNs that replicate the functionality of cloud-based models. However, existing approaches have largely overlooked the impact of varying quantum noise inherent in noisy inter"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.00366","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.00366/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:42:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PJaJE1KPHsk4GCHcGVty8ClY+Uf8XFzUMrxZgNqiFb9+5RjrcXg+RKSKPmK/QlgDiFGK5NvROphDzX6Nzd/tDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T14:48:25.057868Z"},"content_sha256":"b8169aaaabb8b7d57b4167a6f736f3c4b325be2517fa4649048387762e0332bc","schema_version":"1.0","event_id":"sha256:b8169aaaabb8b7d57b4167a6f736f3c4b325be2517fa4649048387762e0332bc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PVZYUQNO3IDKY24BGABZBUQECR/bundle.json","state_url":"https://pith.science/pith/PVZYUQNO3IDKY24BGABZBUQECR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PVZYUQNO3IDKY24BGABZBUQECR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T14:48:25Z","links":{"resolver":"https://pith.science/pith/PVZYUQNO3IDKY24BGABZBUQECR","bundle":"https://pith.science/pith/PVZYUQNO3IDKY24BGABZBUQECR/bundle.json","state":"https://pith.science/pith/PVZYUQNO3IDKY24BGABZBUQECR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PVZYUQNO3IDKY24BGABZBUQECR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PVZYUQNO3IDKY24BGABZBUQECR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b557c039b33e03cf8f24e124d74bbeaedccdad957b2e77558c1bd3f100459a07","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"quant-ph","submitted_at":"2025-04-01T02:30:44Z","title_canon_sha256":"d8e67f27fc84a1e25c48756d0cbcd149cb761cef9028915c2d83a57b3e54fc68"},"schema_version":"1.0","source":{"id":"2504.00366","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.00366","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"arxiv_version","alias_value":"2504.00366v1","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.00366","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"pith_short_12","alias_value":"PVZYUQNO3IDK","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"pith_short_16","alias_value":"PVZYUQNO3IDKY24B","created_at":"2026-07-05T10:42:25Z"},{"alias_kind":"pith_short_8","alias_value":"PVZYUQNO","created_at":"2026-07-05T10:42:25Z"}],"graph_snapshots":[{"event_id":"sha256:b8169aaaabb8b7d57b4167a6f736f3c4b325be2517fa4649048387762e0332bc","target":"graph","created_at":"2026-07-05T10:42:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.00366/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Quantum Neural Networks (QNNs) have shown significant value across domains, with well-trained QNNs representing critical intellectual property often deployed via cloud-based QNN-as-a-Service (QNNaaS) platforms. Recent work has examined QNN model extraction attacks using classical and emerging quantum strategies. These attacks involve adversaries querying QNNaaS platforms to obtain labeled data for training local substitute QNNs that replicate the functionality of cloud-based models. However, existing approaches have largely overlooked the impact of varying quantum noise inherent in noisy inter","authors_text":"Fan Chen, Gang Huang, Leyi Zhao, Xuhong Zhang, Yilun Xu, Zhenxiao Fu","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"quant-ph","submitted_at":"2025-04-01T02:30:44Z","title":"CopyQNN: Quantum Neural Network Extraction Attack under Varying Quantum Noise"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.00366","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c18475b97cd85bc2c67be581ff72df2551299b18acd4cfa3d0cb2b3873297d2f","target":"record","created_at":"2026-07-05T10:42:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b557c039b33e03cf8f24e124d74bbeaedccdad957b2e77558c1bd3f100459a07","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"quant-ph","submitted_at":"2025-04-01T02:30:44Z","title_canon_sha256":"d8e67f27fc84a1e25c48756d0cbcd149cb761cef9028915c2d83a57b3e54fc68"},"schema_version":"1.0","source":{"id":"2504.00366","kind":"arxiv","version":1}},"canonical_sha256":"7d738a41aeda06ac6b81300390d2041470c0ae1a2c7c2c31f5079f1022412837","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7d738a41aeda06ac6b81300390d2041470c0ae1a2c7c2c31f5079f1022412837","first_computed_at":"2026-07-05T10:42:25.065659Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:42:25.065659Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QLd7iSOAlk+TKf1iacxPA2oCpoKmPxDOWbL6zqdGnikDeRkzJLfzsLAI9JOwDe9iJgU3W4+7yiDNS/IicBGRBw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:42:25.066124Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.00366","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c18475b97cd85bc2c67be581ff72df2551299b18acd4cfa3d0cb2b3873297d2f","sha256:b8169aaaabb8b7d57b4167a6f736f3c4b325be2517fa4649048387762e0332bc"],"state_sha256":"352b398836362c343535ce06e6428d3cf2e09376a8fd0b34bec5e45323c0f474"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eNY5FBGQseV1mpTmMZZ3myraRvMjsmROwpu36wa63WTHf1oWvR/f6jWvRkP0wkTByl/ucd72t8XSu96z6RQIDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T14:48:25.065472Z","bundle_sha256":"2cb7f4e1a7f757ba093f575834de65c7032bfc88d68e7a4bca6eb22e6c64671a"}}