{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:QSGYYQRNHNKVNQUQEECNNTU4EZ","short_pith_number":"pith:QSGYYQRN","canonical_record":{"source":{"id":"1909.01502","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-09-04T00:23:21Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"93f889eb27dac81dc7b670463f8eb3221114b90c2096f341e2b9675eda0375d6","abstract_canon_sha256":"63cc3fa6217a153bf254e57eda731240a15cd40a1f081644132b3d871640d727"},"schema_version":"1.0"},"canonical_sha256":"848d8c422d3b5556c2902104d6ce9c265d1890342f045d15d58e3f4614846fb7","source":{"kind":"arxiv","id":"1909.01502","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.01502","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"arxiv_version","alias_value":"1909.01502v2","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.01502","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"pith_short_12","alias_value":"QSGYYQRNHNKV","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"pith_short_16","alias_value":"QSGYYQRNHNKVNQUQ","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"pith_short_8","alias_value":"QSGYYQRN","created_at":"2026-07-05T00:03:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:QSGYYQRNHNKVNQUQEECNNTU4EZ","target":"record","payload":{"canonical_record":{"source":{"id":"1909.01502","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-09-04T00:23:21Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"93f889eb27dac81dc7b670463f8eb3221114b90c2096f341e2b9675eda0375d6","abstract_canon_sha256":"63cc3fa6217a153bf254e57eda731240a15cd40a1f081644132b3d871640d727"},"schema_version":"1.0"},"canonical_sha256":"848d8c422d3b5556c2902104d6ce9c265d1890342f045d15d58e3f4614846fb7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:03:01.391766Z","signature_b64":"KVSTiu6YelGHFVEtyFXwxkLK/4aUXESUbElb7/PW7Eu5YXO3h2PQ75ElFkSk7oXWeTsSo2pw0vSJ5QG3hTFhCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"848d8c422d3b5556c2902104d6ce9c265d1890342f045d15d58e3f4614846fb7","last_reissued_at":"2026-07-05T00:03:01.391337Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:03:01.391337Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.01502","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:03:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7vWrRdBq/3HhNkuNOfr4VsO/dh7y8po0BNedxUrrUhZEkDV/AhI+8AWv3B8gEcwoLVP/o8o/9Jzt/aypqF5cBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T04:01:55.112627Z"},"content_sha256":"cb0b80dbecf138ecbcccf90355d0418b408a7ba91e4c760c4753e65bf7bac010","schema_version":"1.0","event_id":"sha256:cb0b80dbecf138ecbcccf90355d0418b408a7ba91e4c760c4753e65bf7bac010"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:QSGYYQRNHNKVNQUQEECNNTU4EZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy Accounting and Quality Control in the Sage Differentially Private ML Platform","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"stat.ML","authors_text":"Daniel Hsu, Kiran Vodrahalli, Mathias Lecuyer, Riley Spahn, Roxana Geambasu","submitted_at":"2019-09-04T00:23:21Z","abstract_excerpt":"Companies increasingly expose machine learning (ML) models trained over sensitive user data to untrusted domains, such as end-user devices and wide-access model stores. We present Sage, a differentially private (DP) ML platform that bounds the cumulative leakage of training data through models. Sage builds upon the rich literature on DP ML algorithms and contributes pragmatic solutions to two of the most pressing systems challenges of global DP: running out of privacy budget and the privacy-utility tradeoff. To address the former, we develop block composition, a new privacy loss accounting met"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.01502","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.01502/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:03:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0PVu6IEBBuAXZZN6BPxY/CpuT5RL+cGvfGIm73v3Z95P1Vla/aPjpLaVmCNvtKqPeTiFzRT5DGC13n6sfeaOAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T04:01:55.113558Z"},"content_sha256":"c4c09fcfa3c913581179f619cd4b536f6ce665b0b8ec3689adff93b76a5b7249","schema_version":"1.0","event_id":"sha256:c4c09fcfa3c913581179f619cd4b536f6ce665b0b8ec3689adff93b76a5b7249"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QSGYYQRNHNKVNQUQEECNNTU4EZ/bundle.json","state_url":"https://pith.science/pith/QSGYYQRNHNKVNQUQEECNNTU4EZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QSGYYQRNHNKVNQUQEECNNTU4EZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T04:01:55Z","links":{"resolver":"https://pith.science/pith/QSGYYQRNHNKVNQUQEECNNTU4EZ","bundle":"https://pith.science/pith/QSGYYQRNHNKVNQUQEECNNTU4EZ/bundle.json","state":"https://pith.science/pith/QSGYYQRNHNKVNQUQEECNNTU4EZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QSGYYQRNHNKVNQUQEECNNTU4EZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:QSGYYQRNHNKVNQUQEECNNTU4EZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"63cc3fa6217a153bf254e57eda731240a15cd40a1f081644132b3d871640d727","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-09-04T00:23:21Z","title_canon_sha256":"93f889eb27dac81dc7b670463f8eb3221114b90c2096f341e2b9675eda0375d6"},"schema_version":"1.0","source":{"id":"1909.01502","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.01502","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"arxiv_version","alias_value":"1909.01502v2","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.01502","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"pith_short_12","alias_value":"QSGYYQRNHNKV","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"pith_short_16","alias_value":"QSGYYQRNHNKVNQUQ","created_at":"2026-07-05T00:03:01Z"},{"alias_kind":"pith_short_8","alias_value":"QSGYYQRN","created_at":"2026-07-05T00:03:01Z"}],"graph_snapshots":[{"event_id":"sha256:c4c09fcfa3c913581179f619cd4b536f6ce665b0b8ec3689adff93b76a5b7249","target":"graph","created_at":"2026-07-05T00:03:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.01502/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Companies increasingly expose machine learning (ML) models trained over sensitive user data to untrusted domains, such as end-user devices and wide-access model stores. We present Sage, a differentially private (DP) ML platform that bounds the cumulative leakage of training data through models. Sage builds upon the rich literature on DP ML algorithms and contributes pragmatic solutions to two of the most pressing systems challenges of global DP: running out of privacy budget and the privacy-utility tradeoff. To address the former, we develop block composition, a new privacy loss accounting met","authors_text":"Daniel Hsu, Kiran Vodrahalli, Mathias Lecuyer, Riley Spahn, Roxana Geambasu","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-09-04T00:23:21Z","title":"Privacy Accounting and Quality Control in the Sage Differentially Private ML Platform"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.01502","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cb0b80dbecf138ecbcccf90355d0418b408a7ba91e4c760c4753e65bf7bac010","target":"record","created_at":"2026-07-05T00:03:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"63cc3fa6217a153bf254e57eda731240a15cd40a1f081644132b3d871640d727","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-09-04T00:23:21Z","title_canon_sha256":"93f889eb27dac81dc7b670463f8eb3221114b90c2096f341e2b9675eda0375d6"},"schema_version":"1.0","source":{"id":"1909.01502","kind":"arxiv","version":2}},"canonical_sha256":"848d8c422d3b5556c2902104d6ce9c265d1890342f045d15d58e3f4614846fb7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"848d8c422d3b5556c2902104d6ce9c265d1890342f045d15d58e3f4614846fb7","first_computed_at":"2026-07-05T00:03:01.391337Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:03:01.391337Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KVSTiu6YelGHFVEtyFXwxkLK/4aUXESUbElb7/PW7Eu5YXO3h2PQ75ElFkSk7oXWeTsSo2pw0vSJ5QG3hTFhCw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:03:01.391766Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.01502","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cb0b80dbecf138ecbcccf90355d0418b408a7ba91e4c760c4753e65bf7bac010","sha256:c4c09fcfa3c913581179f619cd4b536f6ce665b0b8ec3689adff93b76a5b7249"],"state_sha256":"3fd34137cbc23ada5809317fc30750829e0bc8268dcf9ebc8428f4c306257547"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mhm7LyHGldSAgvlfa1Y10W3//g9sJA2oFoMGqwgABYE48GdUAR22VYAe5tL2SFrokE/9buutVjXHseoJVw2hBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T04:01:55.120287Z","bundle_sha256":"a909ab520b0d71dcea2ea6ecf2dfa339d1d778c277d287007bb65a349b43e75b"}}