{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QQDDYYTTWZHUGGJNEO7PFD3CMJ","short_pith_number":"pith:QQDDYYTT","canonical_record":{"source":{"id":"2505.20074","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-26T14:52:52Z","cross_cats_sorted":[],"title_canon_sha256":"1bc91b789797bf141eadbb5f5dfd830ab02507dad7693230e84345274f5d782b","abstract_canon_sha256":"5dc9f46a20ba7c94d5bc4bc7c4acfdb8f47251cebd46c1a542717f20a0ab3970"},"schema_version":"1.0"},"canonical_sha256":"84063c6273b64f43192d23bef28f626241d088d52588a1d541add2231180c63c","source":{"kind":"arxiv","id":"2505.20074","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.20074","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"arxiv_version","alias_value":"2505.20074v1","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.20074","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"pith_short_12","alias_value":"QQDDYYTTWZHU","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"pith_short_16","alias_value":"QQDDYYTTWZHUGGJN","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"pith_short_8","alias_value":"QQDDYYTT","created_at":"2026-07-05T11:09:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QQDDYYTTWZHUGGJNEO7PFD3CMJ","target":"record","payload":{"canonical_record":{"source":{"id":"2505.20074","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-26T14:52:52Z","cross_cats_sorted":[],"title_canon_sha256":"1bc91b789797bf141eadbb5f5dfd830ab02507dad7693230e84345274f5d782b","abstract_canon_sha256":"5dc9f46a20ba7c94d5bc4bc7c4acfdb8f47251cebd46c1a542717f20a0ab3970"},"schema_version":"1.0"},"canonical_sha256":"84063c6273b64f43192d23bef28f626241d088d52588a1d541add2231180c63c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:52.404679Z","signature_b64":"RjU9thdlHUO4ZalPHJX1nmmi5pOBMODhc9sf+yp3cyI+NVj7SBaotqlbQ7SAqgtcA1SzrToaP6IMbaXCzC4lCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"84063c6273b64f43192d23bef28f626241d088d52588a1d541add2231180c63c","last_reissued_at":"2026-07-05T11:09:52.404164Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:52.404164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.20074","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4x8U05NXlbIYMRDJnyPJFgZRJpamMhKGzUsaSjZPMw7gcKB5TRs88zSQ9hiH3MX8tFtOntCw2fWSOzwlZgOmCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T16:22:15.245145Z"},"content_sha256":"6973b4602ab65cf4532069325c03429fcd2360b5ce82142629ef49dcd2def67d","schema_version":"1.0","event_id":"sha256:6973b4602ab65cf4532069325c03429fcd2360b5ce82142629ef49dcd2def67d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QQDDYYTTWZHUGGJNEO7PFD3CMJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Out-Of-Distribution Membership Inference Attack Approach for Cross-Domain Graph Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Chenhao Guo, Jiaxuan Si, Jinyan Wang, Liu Yang, Qingyun Sun, Xianxian Li, Xingcheng Fu, Yuecen Wei","submitted_at":"2025-05-26T14:52:52Z","abstract_excerpt":"Graph Neural Network-based methods face privacy leakage risks due to the introduction of topological structures about the targets, which allows attackers to bypass the target's prior knowledge of the sensitive attributes and realize membership inference attacks (MIA) by observing and analyzing the topology distribution. As privacy concerns grow, the assumption of MIA, which presumes that attackers can obtain an auxiliary dataset with the same distribution, is increasingly deviating from reality. In this paper, we categorize the distribution diversity issue in real-world MIA scenarios as an Out"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.20074","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.20074/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RnaoMjQPAQE89gmMFDikF6dWf4ZuVr44gh3NIjVMd1gzvKL9SFbft+V3CJ0obuQCP8d/QIkpt1bf0quwedy3CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T16:22:15.245534Z"},"content_sha256":"8b9bfc66e106c2d01832d232dc88c5c72039a431b9effd305dc8cbc543e6d30a","schema_version":"1.0","event_id":"sha256:8b9bfc66e106c2d01832d232dc88c5c72039a431b9effd305dc8cbc543e6d30a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QQDDYYTTWZHUGGJNEO7PFD3CMJ/bundle.json","state_url":"https://pith.science/pith/QQDDYYTTWZHUGGJNEO7PFD3CMJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QQDDYYTTWZHUGGJNEO7PFD3CMJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-18T16:22:15Z","links":{"resolver":"https://pith.science/pith/QQDDYYTTWZHUGGJNEO7PFD3CMJ","bundle":"https://pith.science/pith/QQDDYYTTWZHUGGJNEO7PFD3CMJ/bundle.json","state":"https://pith.science/pith/QQDDYYTTWZHUGGJNEO7PFD3CMJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QQDDYYTTWZHUGGJNEO7PFD3CMJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QQDDYYTTWZHUGGJNEO7PFD3CMJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5dc9f46a20ba7c94d5bc4bc7c4acfdb8f47251cebd46c1a542717f20a0ab3970","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-26T14:52:52Z","title_canon_sha256":"1bc91b789797bf141eadbb5f5dfd830ab02507dad7693230e84345274f5d782b"},"schema_version":"1.0","source":{"id":"2505.20074","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.20074","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"arxiv_version","alias_value":"2505.20074v1","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.20074","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"pith_short_12","alias_value":"QQDDYYTTWZHU","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"pith_short_16","alias_value":"QQDDYYTTWZHUGGJN","created_at":"2026-07-05T11:09:52Z"},{"alias_kind":"pith_short_8","alias_value":"QQDDYYTT","created_at":"2026-07-05T11:09:52Z"}],"graph_snapshots":[{"event_id":"sha256:8b9bfc66e106c2d01832d232dc88c5c72039a431b9effd305dc8cbc543e6d30a","target":"graph","created_at":"2026-07-05T11:09:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.20074/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph Neural Network-based methods face privacy leakage risks due to the introduction of topological structures about the targets, which allows attackers to bypass the target's prior knowledge of the sensitive attributes and realize membership inference attacks (MIA) by observing and analyzing the topology distribution. As privacy concerns grow, the assumption of MIA, which presumes that attackers can obtain an auxiliary dataset with the same distribution, is increasingly deviating from reality. In this paper, we categorize the distribution diversity issue in real-world MIA scenarios as an Out","authors_text":"Chenhao Guo, Jiaxuan Si, Jinyan Wang, Liu Yang, Qingyun Sun, Xianxian Li, Xingcheng Fu, Yuecen Wei","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-26T14:52:52Z","title":"An Out-Of-Distribution Membership Inference Attack Approach for Cross-Domain Graph Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.20074","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6973b4602ab65cf4532069325c03429fcd2360b5ce82142629ef49dcd2def67d","target":"record","created_at":"2026-07-05T11:09:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5dc9f46a20ba7c94d5bc4bc7c4acfdb8f47251cebd46c1a542717f20a0ab3970","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-26T14:52:52Z","title_canon_sha256":"1bc91b789797bf141eadbb5f5dfd830ab02507dad7693230e84345274f5d782b"},"schema_version":"1.0","source":{"id":"2505.20074","kind":"arxiv","version":1}},"canonical_sha256":"84063c6273b64f43192d23bef28f626241d088d52588a1d541add2231180c63c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"84063c6273b64f43192d23bef28f626241d088d52588a1d541add2231180c63c","first_computed_at":"2026-07-05T11:09:52.404164Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:52.404164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RjU9thdlHUO4ZalPHJX1nmmi5pOBMODhc9sf+yp3cyI+NVj7SBaotqlbQ7SAqgtcA1SzrToaP6IMbaXCzC4lCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:52.404679Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.20074","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6973b4602ab65cf4532069325c03429fcd2360b5ce82142629ef49dcd2def67d","sha256:8b9bfc66e106c2d01832d232dc88c5c72039a431b9effd305dc8cbc543e6d30a"],"state_sha256":"50ed50647a087554752509263968a9fb31728d315bce33c7436f0c397f0b0e40"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jf9+qvqLfna2tkO/Kp9IFl3fzIr+3TlH5L9EyOHrKu+e3yJfyJeH64DuEPp3ZgsE+ZMRi3DnqYHx8wydzKy2DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-18T16:22:15.247684Z","bundle_sha256":"c54fb7905180c189ec503e9a229fe0cd50c3d769c13509342b8b97f1306bb9e2"}}