{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QPXYGEMLNMC53BQH4A2AGH54KI","short_pith_number":"pith:QPXYGEML","canonical_record":{"source":{"id":"2304.11511","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"quant-ph","submitted_at":"2023-04-23T01:17:43Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"7ed42a28b041aa560fd6d72dbc0e70bd8f25fa9612ea4e06c2196ed06c3f31f4","abstract_canon_sha256":"4003b711e62144b77024c01bff0e5aca40d12977f5d311073ca71fbf4decf24e"},"schema_version":"1.0"},"canonical_sha256":"83ef83118b6b05dd8607e034031fbc52394611a9d5b152a11b462d5e15195568","source":{"kind":"arxiv","id":"2304.11511","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.11511","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"arxiv_version","alias_value":"2304.11511v2","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.11511","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_12","alias_value":"QPXYGEMLNMC5","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_16","alias_value":"QPXYGEMLNMC53BQH","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_8","alias_value":"QPXYGEML","created_at":"2026-07-05T07:00:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QPXYGEMLNMC53BQH4A2AGH54KI","target":"record","payload":{"canonical_record":{"source":{"id":"2304.11511","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"quant-ph","submitted_at":"2023-04-23T01:17:43Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"7ed42a28b041aa560fd6d72dbc0e70bd8f25fa9612ea4e06c2196ed06c3f31f4","abstract_canon_sha256":"4003b711e62144b77024c01bff0e5aca40d12977f5d311073ca71fbf4decf24e"},"schema_version":"1.0"},"canonical_sha256":"83ef83118b6b05dd8607e034031fbc52394611a9d5b152a11b462d5e15195568","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:00:44.273475Z","signature_b64":"alcguG+ouwjAU2qFx4jhz0K2CBV8+Wz3EJ9s977vG62J44atzKqW/1Nesqui2ZRz+ORmQ1iPX7lcEyW6hSu5AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"83ef83118b6b05dd8607e034031fbc52394611a9d5b152a11b462d5e15195568","last_reissued_at":"2026-07-05T07:00:44.272970Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:00:44.272970Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.11511","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lNukwW4n3+hczLVXWqfbqIXPIOtl74R0i+sxinCy+EXaKD9x3lNZT/q70NjyKszFvjQZ5P2qdtVWiwzuIXMqBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:57:46.887842Z"},"content_sha256":"0a6e649121b8d02e75f42359984a9363a7b956d78752140870506008eb890c56","schema_version":"1.0","event_id":"sha256:0a6e649121b8d02e75f42359984a9363a7b956d78752140870506008eb890c56"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QPXYGEMLNMC53BQH4A2AGH54KI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"QuMoS: A Framework for Preserving Security of Quantum Machine Learning Model","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"quant-ph","authors_text":"Blake Gage, Elizabeth Iwasawa, Jinyang Li, Weiwen Jiang, Zhepeng Wang, Zhirui Hu","submitted_at":"2023-04-23T01:17:43Z","abstract_excerpt":"Security has always been a critical issue in machine learning (ML) applications. Due to the high cost of model training -- such as collecting relevant samples, labeling data, and consuming computing power -- model-stealing attack is one of the most fundamental but vitally important issues. When it comes to quantum computing, such a quantum machine learning (QML) model-stealing attack also exists and is even more severe because the traditional encryption method, such as homomorphic encryption can hardly be directly applied to quantum computation. On the other hand, due to the limited quantum co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.11511","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.11511/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Cwm0vcAw4LVqyps7Btt/E7SP5DSXpJfqO5IOSN8XCAgC3ef5hPgXts2MfiG4JwDFUP1mXQH3YxPa5PKzaSS4Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:57:46.888351Z"},"content_sha256":"09dee15e32ef1ab175e6b06b383e536a4331a729bd684b2382448fc56e76bc4b","schema_version":"1.0","event_id":"sha256:09dee15e32ef1ab175e6b06b383e536a4331a729bd684b2382448fc56e76bc4b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QPXYGEMLNMC53BQH4A2AGH54KI/bundle.json","state_url":"https://pith.science/pith/QPXYGEMLNMC53BQH4A2AGH54KI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QPXYGEMLNMC53BQH4A2AGH54KI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T07:57:46Z","links":{"resolver":"https://pith.science/pith/QPXYGEMLNMC53BQH4A2AGH54KI","bundle":"https://pith.science/pith/QPXYGEMLNMC53BQH4A2AGH54KI/bundle.json","state":"https://pith.science/pith/QPXYGEMLNMC53BQH4A2AGH54KI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QPXYGEMLNMC53BQH4A2AGH54KI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QPXYGEMLNMC53BQH4A2AGH54KI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4003b711e62144b77024c01bff0e5aca40d12977f5d311073ca71fbf4decf24e","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"quant-ph","submitted_at":"2023-04-23T01:17:43Z","title_canon_sha256":"7ed42a28b041aa560fd6d72dbc0e70bd8f25fa9612ea4e06c2196ed06c3f31f4"},"schema_version":"1.0","source":{"id":"2304.11511","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.11511","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"arxiv_version","alias_value":"2304.11511v2","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.11511","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_12","alias_value":"QPXYGEMLNMC5","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_16","alias_value":"QPXYGEMLNMC53BQH","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_8","alias_value":"QPXYGEML","created_at":"2026-07-05T07:00:44Z"}],"graph_snapshots":[{"event_id":"sha256:09dee15e32ef1ab175e6b06b383e536a4331a729bd684b2382448fc56e76bc4b","target":"graph","created_at":"2026-07-05T07:00:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.11511/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security has always been a critical issue in machine learning (ML) applications. Due to the high cost of model training -- such as collecting relevant samples, labeling data, and consuming computing power -- model-stealing attack is one of the most fundamental but vitally important issues. When it comes to quantum computing, such a quantum machine learning (QML) model-stealing attack also exists and is even more severe because the traditional encryption method, such as homomorphic encryption can hardly be directly applied to quantum computation. On the other hand, due to the limited quantum co","authors_text":"Blake Gage, Elizabeth Iwasawa, Jinyang Li, Weiwen Jiang, Zhepeng Wang, Zhirui Hu","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"quant-ph","submitted_at":"2023-04-23T01:17:43Z","title":"QuMoS: A Framework for Preserving Security of Quantum Machine Learning Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.11511","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0a6e649121b8d02e75f42359984a9363a7b956d78752140870506008eb890c56","target":"record","created_at":"2026-07-05T07:00:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4003b711e62144b77024c01bff0e5aca40d12977f5d311073ca71fbf4decf24e","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"quant-ph","submitted_at":"2023-04-23T01:17:43Z","title_canon_sha256":"7ed42a28b041aa560fd6d72dbc0e70bd8f25fa9612ea4e06c2196ed06c3f31f4"},"schema_version":"1.0","source":{"id":"2304.11511","kind":"arxiv","version":2}},"canonical_sha256":"83ef83118b6b05dd8607e034031fbc52394611a9d5b152a11b462d5e15195568","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"83ef83118b6b05dd8607e034031fbc52394611a9d5b152a11b462d5e15195568","first_computed_at":"2026-07-05T07:00:44.272970Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:00:44.272970Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"alcguG+ouwjAU2qFx4jhz0K2CBV8+Wz3EJ9s977vG62J44atzKqW/1Nesqui2ZRz+ORmQ1iPX7lcEyW6hSu5AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:00:44.273475Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.11511","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0a6e649121b8d02e75f42359984a9363a7b956d78752140870506008eb890c56","sha256:09dee15e32ef1ab175e6b06b383e536a4331a729bd684b2382448fc56e76bc4b"],"state_sha256":"d65e48f4fa3f3a78df23917f38f27dea2273df4c39dd9d861ed133a788768371"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JrWe2Ysm4rGs/3tGpBDhsTlBmnz3SMCUoU8og5X1IAB3BoUup9iivuvH21TaECQFjDAz6+pS4donclwj2sHbAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T07:57:46.892146Z","bundle_sha256":"41551dfb905c0072e3e7d3592993745a1853f2ff6c738efdc923123211df0276"}}