{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:PZ3PEIFGWX5N3BMX35RBSWDEWB","short_pith_number":"pith:PZ3PEIFG","canonical_record":{"source":{"id":"2502.19405","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-26T18:53:31Z","cross_cats_sorted":[],"title_canon_sha256":"a44215f92f8ef5626574005ac26e1ec0fadbaa8640cc2390553c7de2b61d2041","abstract_canon_sha256":"97549f623ecfebb0751cc5a5655fc5a98ebf2d7dd5bff2970eb2afdba5c7b9ea"},"schema_version":"1.0"},"canonical_sha256":"7e76f220a6b5fadd8597df62195864b0478a5199cf2b85197db2926112986cc2","source":{"kind":"arxiv","id":"2502.19405","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19405","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19405v1","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19405","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"pith_short_12","alias_value":"PZ3PEIFGWX5N","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"pith_short_16","alias_value":"PZ3PEIFGWX5N3BMX","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"pith_short_8","alias_value":"PZ3PEIFG","created_at":"2026-07-05T10:20:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:PZ3PEIFGWX5N3BMX35RBSWDEWB","target":"record","payload":{"canonical_record":{"source":{"id":"2502.19405","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-26T18:53:31Z","cross_cats_sorted":[],"title_canon_sha256":"a44215f92f8ef5626574005ac26e1ec0fadbaa8640cc2390553c7de2b61d2041","abstract_canon_sha256":"97549f623ecfebb0751cc5a5655fc5a98ebf2d7dd5bff2970eb2afdba5c7b9ea"},"schema_version":"1.0"},"canonical_sha256":"7e76f220a6b5fadd8597df62195864b0478a5199cf2b85197db2926112986cc2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:20:31.775995Z","signature_b64":"EzhUGdnrwkF5wUVTUypm8+fTsPw6S26CvlNixM5omGd3FDdaffIpLnKVHETwD42osDGeOQsv0V1iy8tSmE8DAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7e76f220a6b5fadd8597df62195864b0478a5199cf2b85197db2926112986cc2","last_reissued_at":"2026-07-05T10:20:31.775500Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:20:31.775500Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.19405","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:20:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Di3wVrqLV+Ao0GBEK4Knt6/2QEzy40Qe5AVYC+j0PmU1VWGZyUKAJ1/6d2RmCc1najVpVipzfrkQJrdSzTGWBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:51:06.537727Z"},"content_sha256":"00632fc60314372d5bef230f94a06d6e26285cfca5dbe75137ed5d060143c0ed","schema_version":"1.0","event_id":"sha256:00632fc60314372d5bef230f94a06d6e26285cfca5dbe75137ed5d060143c0ed"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:PZ3PEIFGWX5N3BMX35RBSWDEWB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Verde: Verification via Refereed Delegation for Machine Learning Programs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Adam St. Arnaud, Alexey Titov, Arasu Arun, Ben Fielding, Brian Wilcox, Joseph Bonneau, Marc Brinkmann, Oguzhan Ersoy, Viktor Kolobaric","submitted_at":"2025-02-26T18:53:31Z","abstract_excerpt":"Machine learning programs, such as those performing inference, fine-tuning, and training of LLMs, are commonly delegated to untrusted compute providers. To provide correctness guarantees for the client, we propose adapting the cryptographic notion of refereed delegation to the machine learning setting. This approach enables a computationally limited client to delegate a program to multiple untrusted compute providers, with a guarantee of obtaining the correct result if at least one of them is honest. Refereed delegation of ML programs poses two technical hurdles: (1) an arbitration protocol to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19405","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.19405/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:20:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wLHnRIyVtzeA/NNu2xiZwljhLow58acDMvd/5AHp2wP2f5qGw8M4mV69inGNBX6Hen/F1OwttIwCbJYny2eZCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:51:06.538325Z"},"content_sha256":"ca88054d2fe8d698d99745c9b7c30a98ce3bc0b91f9e60c278a36f9e88b576f4","schema_version":"1.0","event_id":"sha256:ca88054d2fe8d698d99745c9b7c30a98ce3bc0b91f9e60c278a36f9e88b576f4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PZ3PEIFGWX5N3BMX35RBSWDEWB/bundle.json","state_url":"https://pith.science/pith/PZ3PEIFGWX5N3BMX35RBSWDEWB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PZ3PEIFGWX5N3BMX35RBSWDEWB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T11:51:06Z","links":{"resolver":"https://pith.science/pith/PZ3PEIFGWX5N3BMX35RBSWDEWB","bundle":"https://pith.science/pith/PZ3PEIFGWX5N3BMX35RBSWDEWB/bundle.json","state":"https://pith.science/pith/PZ3PEIFGWX5N3BMX35RBSWDEWB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PZ3PEIFGWX5N3BMX35RBSWDEWB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PZ3PEIFGWX5N3BMX35RBSWDEWB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"97549f623ecfebb0751cc5a5655fc5a98ebf2d7dd5bff2970eb2afdba5c7b9ea","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-26T18:53:31Z","title_canon_sha256":"a44215f92f8ef5626574005ac26e1ec0fadbaa8640cc2390553c7de2b61d2041"},"schema_version":"1.0","source":{"id":"2502.19405","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19405","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19405v1","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19405","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"pith_short_12","alias_value":"PZ3PEIFGWX5N","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"pith_short_16","alias_value":"PZ3PEIFGWX5N3BMX","created_at":"2026-07-05T10:20:31Z"},{"alias_kind":"pith_short_8","alias_value":"PZ3PEIFG","created_at":"2026-07-05T10:20:31Z"}],"graph_snapshots":[{"event_id":"sha256:ca88054d2fe8d698d99745c9b7c30a98ce3bc0b91f9e60c278a36f9e88b576f4","target":"graph","created_at":"2026-07-05T10:20:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.19405/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning programs, such as those performing inference, fine-tuning, and training of LLMs, are commonly delegated to untrusted compute providers. To provide correctness guarantees for the client, we propose adapting the cryptographic notion of refereed delegation to the machine learning setting. This approach enables a computationally limited client to delegate a program to multiple untrusted compute providers, with a guarantee of obtaining the correct result if at least one of them is honest. Refereed delegation of ML programs poses two technical hurdles: (1) an arbitration protocol to","authors_text":"Adam St. Arnaud, Alexey Titov, Arasu Arun, Ben Fielding, Brian Wilcox, Joseph Bonneau, Marc Brinkmann, Oguzhan Ersoy, Viktor Kolobaric","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-26T18:53:31Z","title":"Verde: Verification via Refereed Delegation for Machine Learning Programs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19405","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:00632fc60314372d5bef230f94a06d6e26285cfca5dbe75137ed5d060143c0ed","target":"record","created_at":"2026-07-05T10:20:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"97549f623ecfebb0751cc5a5655fc5a98ebf2d7dd5bff2970eb2afdba5c7b9ea","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-26T18:53:31Z","title_canon_sha256":"a44215f92f8ef5626574005ac26e1ec0fadbaa8640cc2390553c7de2b61d2041"},"schema_version":"1.0","source":{"id":"2502.19405","kind":"arxiv","version":1}},"canonical_sha256":"7e76f220a6b5fadd8597df62195864b0478a5199cf2b85197db2926112986cc2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7e76f220a6b5fadd8597df62195864b0478a5199cf2b85197db2926112986cc2","first_computed_at":"2026-07-05T10:20:31.775500Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:20:31.775500Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EzhUGdnrwkF5wUVTUypm8+fTsPw6S26CvlNixM5omGd3FDdaffIpLnKVHETwD42osDGeOQsv0V1iy8tSmE8DAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:20:31.775995Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.19405","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:00632fc60314372d5bef230f94a06d6e26285cfca5dbe75137ed5d060143c0ed","sha256:ca88054d2fe8d698d99745c9b7c30a98ce3bc0b91f9e60c278a36f9e88b576f4"],"state_sha256":"e6cbd922a8a3dae9f3df12d5b7c80b721ee11dcaa8c0c26f8e7dfbbf84c261b4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UdztZyc6JuusoP+HZi4ArVh3n9y56cwX/bmIIREAvm88QHT7nDDyXkMso0E6YGLqfQQz2y+E6QiW2DRpc/B/DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T11:51:06.542472Z","bundle_sha256":"2a5a8f2b71ab4e91d0faf2409b4f6611dedcbef71086bbedb57b6d61f34a9a1a"}}