{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:RSI7IZG7MZQL2HYHQHJ4ZGWEDZ","short_pith_number":"pith:RSI7IZG7","canonical_record":{"source":{"id":"2602.04113","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-02-04T00:56:28Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"dc7207647f078bc102bc2ac10a7e266018836cc7dbdd7c90a07d9d9b20edf1a6","abstract_canon_sha256":"0fc3c7224847e10bb4f2c3bb9f10eac8b88e5fa37bd03fdf4d39bccaded23173"},"schema_version":"1.0"},"canonical_sha256":"8c91f464df6660bd1f0781d3cc9ac41e6513fa6f324f44e76320e3c1257d97cc","source":{"kind":"arxiv","id":"2602.04113","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.04113","created_at":"2026-05-18T03:10:11Z"},{"alias_kind":"arxiv_version","alias_value":"2602.04113v3","created_at":"2026-05-18T03:10:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.04113","created_at":"2026-05-18T03:10:11Z"},{"alias_kind":"pith_short_12","alias_value":"RSI7IZG7MZQL","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"RSI7IZG7MZQL2HYH","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"RSI7IZG7","created_at":"2026-05-18T12:33:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:RSI7IZG7MZQL2HYHQHJ4ZGWEDZ","target":"record","payload":{"canonical_record":{"source":{"id":"2602.04113","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-02-04T00:56:28Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"dc7207647f078bc102bc2ac10a7e266018836cc7dbdd7c90a07d9d9b20edf1a6","abstract_canon_sha256":"0fc3c7224847e10bb4f2c3bb9f10eac8b88e5fa37bd03fdf4d39bccaded23173"},"schema_version":"1.0"},"canonical_sha256":"8c91f464df6660bd1f0781d3cc9ac41e6513fa6f324f44e76320e3c1257d97cc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T03:10:11.245370Z","signature_b64":"EdkSnHaTgEyn31LDegHbGMRg/GifVCxDp+rcorppzPjSFxlRP1syJWaZP5PS/XN5Py2cnhev81JEgQAuO5IHCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8c91f464df6660bd1f0781d3cc9ac41e6513fa6f324f44e76320e3c1257d97cc","last_reissued_at":"2026-05-18T03:10:11.244512Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T03:10:11.244512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2602.04113","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:10:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nbfoRMmK3RnnjZ8lpA+VM9DtbYsCZKk27xPA6UXO34zKmN86KN9VMQRAsCI8eB56m/dNTICOK/Lufx36X7W4Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T03:12:10.683902Z"},"content_sha256":"2f470e18d3ea74fa24e6c7230c2b2fd042811873b909c1330961988c661f1327","schema_version":"1.0","event_id":"sha256:2f470e18d3ea74fa24e6c7230c2b2fd042811873b909c1330961988c661f1327"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:RSI7IZG7MZQL2HYHQHJ4ZGWEDZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ZKBoost: Zero-Knowledge Verifiable Training for XGBoost","license":"http://creativecommons.org/licenses/by/4.0/","headline":"ZKBoost enables the first zero-knowledge proof that an XGBoost model was trained correctly on a committed dataset.","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Akira Takahashi, Antigoni Polychroniadou, Chenkai Weng, Jiayi Xu, Nikolas Melissaris","submitted_at":"2026-02-04T00:56:28Z","abstract_excerpt":"Gradient boosted decision trees, particularly XGBoost, are among the most effective methods for tabular data. As deployment in sensitive settings increases, cryptographic guarantees of model integrity become essential. We present ZKBoost, the first zero-knowledge proof of training (zkPoT) protocol for XGBoost, enabling model owners to prove correct training on a committed dataset without revealing data or model parameters. Naively re-executing XGBoost training in ZK would incur prohibitive costs, primarily due to the oblivious partitioning of training samples and unknown tree splits. Moreover,"},"claims":{"count":4,"items":[{"kind":"strongest_claim","text":"We present ZKBoost, the first zero-knowledge proof of training (zkPoT) protocol for XGBoost, enabling model owners to prove correct training on a committed dataset without revealing data or model parameters.","source":"verdict.strongest_claim","status":"machine_extracted","claim_id":"C1","attestation":"unclaimed"},{"kind":"weakest_assumption","text":"That the fixed-point version of XGBoost matches standard accuracy to within 1% and that the VOLE-based instantiation resolves previous security issues without new vulnerabilities.","source":"verdict.weakest_assumption","status":"machine_extracted","claim_id":"C2","attestation":"unclaimed"},{"kind":"one_line_summary","text":"The first zkPoT protocol for XGBoost using a generic template and VOLE instantiation, with a fixed-point version achieving accuracy within 1% of standard XGBoost.","source":"verdict.one_line_summary","status":"machine_extracted","claim_id":"C3","attestation":"unclaimed"},{"kind":"headline","text":"ZKBoost enables the first zero-knowledge proof that an XGBoost model was trained correctly on a committed dataset.","source":"verdict.pith_extraction.headline","status":"machine_extracted","claim_id":"C4","attestation":"unclaimed"}],"snapshot_sha256":"add0c44554aa35c59123f87837423bac8a75dd903723caba4fb5420e49270282"},"source":{"id":"2602.04113","kind":"arxiv","version":3},"verdict":{"id":"60f3dbdb-06bf-4f74-bf37-b562124ac416","model_set":{"reader":"grok-4.3"},"created_at":"2026-05-16T08:12:11.239488Z","strongest_claim":"We present ZKBoost, the first zero-knowledge proof of training (zkPoT) protocol for XGBoost, enabling model owners to prove correct training on a committed dataset without revealing data or model parameters.","one_line_summary":"The first zkPoT protocol for XGBoost using a generic template and VOLE instantiation, with a fixed-point version achieving accuracy within 1% of standard XGBoost.","pipeline_version":"pith-pipeline@v0.9.0","weakest_assumption":"That the fixed-point version of XGBoost matches standard accuracy to within 1% and that the VOLE-based instantiation resolves previous security issues without new vulnerabilities.","pith_extraction_headline":"ZKBoost enables the first zero-knowledge proof that an XGBoost model was trained correctly on a committed dataset."},"references":{"count":15,"sample":[{"doi":"","year":2020,"title":"A Additional Preliminaries A.1 Further Details of XGBoost Theoretical Background XGBoost is a scalable implementation of gradient boosted decision trees","work_id":"b5941fc3-8c73-45e6-addc-dd130aade688","ref_index":1,"cited_arxiv_id":"","is_internal_anchor":false},{"doi":"","year":null,"title":"zero-knowledge proofs of training","work_id":"9a147d7b-a9b6-43e1-9817-6c647efc01c2","ref_index":2,"cited_arxiv_id":"","is_internal_anchor":false},{"doi":"","year":null,"title":"We show thatCertXGB(x,y,T,z 0) = 0","work_id":"804da066-c7cf-4fc1-9c06-7f5816d33467","ref_index":3,"cited_arxiv_id":"","is_internal_anchor":false},{"doi":"","year":null,"title":"Otherwise, it commits tou=x −1","work_id":"ee1ca57d-61f6-4249-9473-abc8104e2c00","ref_index":4,"cited_arxiv_id":"","is_internal_anchor":false},{"doi":"","year":null,"title":"Comparison.On inputJxK,JyK,JsK, prove thats=1{JxK<JyK}","work_id":"5f29e7a9-cb4d-446b-b51a-eff56c43cdb3","ref_index":5,"cited_arxiv_id":"","is_internal_anchor":false}],"resolved_work":15,"snapshot_sha256":"d9c7dc529e1a7a2d1e20942f169e15e7e5e2955d38b50d606fb37576d0efa21d","internal_anchors":0},"formal_canon":{"evidence_count":3,"snapshot_sha256":"b9e9a97b78a35255df618f04fe9c1b2a013d23fbba7bc27283c01dfc2be9aa40"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":"60f3dbdb-06bf-4f74-bf37-b562124ac416"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:10:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IZjRVMPDISTdMw7EhQpAxihD9Wq2BZbmWJ7nmdMCZt070zlE9AZy+EwFD96+xBNPDDNsDaLi6DZPwDyDKy1vAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T03:12:10.684814Z"},"content_sha256":"f7c94441ae00f8a0f08bf2b7adecb6d89094fd5abb409cff5b59ae7f71499684","schema_version":"1.0","event_id":"sha256:f7c94441ae00f8a0f08bf2b7adecb6d89094fd5abb409cff5b59ae7f71499684"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RSI7IZG7MZQL2HYHQHJ4ZGWEDZ/bundle.json","state_url":"https://pith.science/pith/RSI7IZG7MZQL2HYHQHJ4ZGWEDZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RSI7IZG7MZQL2HYHQHJ4ZGWEDZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-05T03:12:10Z","links":{"resolver":"https://pith.science/pith/RSI7IZG7MZQL2HYHQHJ4ZGWEDZ","bundle":"https://pith.science/pith/RSI7IZG7MZQL2HYHQHJ4ZGWEDZ/bundle.json","state":"https://pith.science/pith/RSI7IZG7MZQL2HYHQHJ4ZGWEDZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RSI7IZG7MZQL2HYHQHJ4ZGWEDZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:RSI7IZG7MZQL2HYHQHJ4ZGWEDZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0fc3c7224847e10bb4f2c3bb9f10eac8b88e5fa37bd03fdf4d39bccaded23173","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-02-04T00:56:28Z","title_canon_sha256":"dc7207647f078bc102bc2ac10a7e266018836cc7dbdd7c90a07d9d9b20edf1a6"},"schema_version":"1.0","source":{"id":"2602.04113","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.04113","created_at":"2026-05-18T03:10:11Z"},{"alias_kind":"arxiv_version","alias_value":"2602.04113v3","created_at":"2026-05-18T03:10:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.04113","created_at":"2026-05-18T03:10:11Z"},{"alias_kind":"pith_short_12","alias_value":"RSI7IZG7MZQL","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"RSI7IZG7MZQL2HYH","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"RSI7IZG7","created_at":"2026-05-18T12:33:37Z"}],"graph_snapshots":[{"event_id":"sha256:f7c94441ae00f8a0f08bf2b7adecb6d89094fd5abb409cff5b59ae7f71499684","target":"graph","created_at":"2026-05-18T03:10:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":4,"items":[{"attestation":"unclaimed","claim_id":"C1","kind":"strongest_claim","source":"verdict.strongest_claim","status":"machine_extracted","text":"We present ZKBoost, the first zero-knowledge proof of training (zkPoT) protocol for XGBoost, enabling model owners to prove correct training on a committed dataset without revealing data or model parameters."},{"attestation":"unclaimed","claim_id":"C2","kind":"weakest_assumption","source":"verdict.weakest_assumption","status":"machine_extracted","text":"That the fixed-point version of XGBoost matches standard accuracy to within 1% and that the VOLE-based instantiation resolves previous security issues without new vulnerabilities."},{"attestation":"unclaimed","claim_id":"C3","kind":"one_line_summary","source":"verdict.one_line_summary","status":"machine_extracted","text":"The first zkPoT protocol for XGBoost using a generic template and VOLE instantiation, with a fixed-point version achieving accuracy within 1% of standard XGBoost."},{"attestation":"unclaimed","claim_id":"C4","kind":"headline","source":"verdict.pith_extraction.headline","status":"machine_extracted","text":"ZKBoost enables the first zero-knowledge proof that an XGBoost model was trained correctly on a committed dataset."}],"snapshot_sha256":"add0c44554aa35c59123f87837423bac8a75dd903723caba4fb5420e49270282"},"formal_canon":{"evidence_count":3,"snapshot_sha256":"b9e9a97b78a35255df618f04fe9c1b2a013d23fbba7bc27283c01dfc2be9aa40"},"paper":{"abstract_excerpt":"Gradient boosted decision trees, particularly XGBoost, are among the most effective methods for tabular data. As deployment in sensitive settings increases, cryptographic guarantees of model integrity become essential. We present ZKBoost, the first zero-knowledge proof of training (zkPoT) protocol for XGBoost, enabling model owners to prove correct training on a committed dataset without revealing data or model parameters. Naively re-executing XGBoost training in ZK would incur prohibitive costs, primarily due to the oblivious partitioning of training samples and unknown tree splits. Moreover,","authors_text":"Akira Takahashi, Antigoni Polychroniadou, Chenkai Weng, Jiayi Xu, Nikolas Melissaris","cross_cats":["cs.LG"],"headline":"ZKBoost enables the first zero-knowledge proof that an XGBoost model was trained correctly on a committed dataset.","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-02-04T00:56:28Z","title":"ZKBoost: Zero-Knowledge Verifiable Training for XGBoost"},"references":{"count":15,"internal_anchors":0,"resolved_work":15,"sample":[{"cited_arxiv_id":"","doi":"","is_internal_anchor":false,"ref_index":1,"title":"A Additional Preliminaries A.1 Further Details of XGBoost Theoretical Background XGBoost is a scalable implementation of gradient boosted decision trees","work_id":"b5941fc3-8c73-45e6-addc-dd130aade688","year":2020},{"cited_arxiv_id":"","doi":"","is_internal_anchor":false,"ref_index":2,"title":"zero-knowledge proofs of training","work_id":"9a147d7b-a9b6-43e1-9817-6c647efc01c2","year":null},{"cited_arxiv_id":"","doi":"","is_internal_anchor":false,"ref_index":3,"title":"We show thatCertXGB(x,y,T,z 0) = 0","work_id":"804da066-c7cf-4fc1-9c06-7f5816d33467","year":null},{"cited_arxiv_id":"","doi":"","is_internal_anchor":false,"ref_index":4,"title":"Otherwise, it commits tou=x −1","work_id":"ee1ca57d-61f6-4249-9473-abc8104e2c00","year":null},{"cited_arxiv_id":"","doi":"","is_internal_anchor":false,"ref_index":5,"title":"Comparison.On inputJxK,JyK,JsK, prove thats=1{JxK<JyK}","work_id":"5f29e7a9-cb4d-446b-b51a-eff56c43cdb3","year":null}],"snapshot_sha256":"d9c7dc529e1a7a2d1e20942f169e15e7e5e2955d38b50d606fb37576d0efa21d"},"source":{"id":"2602.04113","kind":"arxiv","version":3},"verdict":{"created_at":"2026-05-16T08:12:11.239488Z","id":"60f3dbdb-06bf-4f74-bf37-b562124ac416","model_set":{"reader":"grok-4.3"},"one_line_summary":"The first zkPoT protocol for XGBoost using a generic template and VOLE instantiation, with a fixed-point version achieving accuracy within 1% of standard XGBoost.","pipeline_version":"pith-pipeline@v0.9.0","pith_extraction_headline":"ZKBoost enables the first zero-knowledge proof that an XGBoost model was trained correctly on a committed dataset.","strongest_claim":"We present ZKBoost, the first zero-knowledge proof of training (zkPoT) protocol for XGBoost, enabling model owners to prove correct training on a committed dataset without revealing data or model parameters.","weakest_assumption":"That the fixed-point version of XGBoost matches standard accuracy to within 1% and that the VOLE-based instantiation resolves previous security issues without new vulnerabilities."}},"verdict_id":"60f3dbdb-06bf-4f74-bf37-b562124ac416"}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2f470e18d3ea74fa24e6c7230c2b2fd042811873b909c1330961988c661f1327","target":"record","created_at":"2026-05-18T03:10:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0fc3c7224847e10bb4f2c3bb9f10eac8b88e5fa37bd03fdf4d39bccaded23173","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-02-04T00:56:28Z","title_canon_sha256":"dc7207647f078bc102bc2ac10a7e266018836cc7dbdd7c90a07d9d9b20edf1a6"},"schema_version":"1.0","source":{"id":"2602.04113","kind":"arxiv","version":3}},"canonical_sha256":"8c91f464df6660bd1f0781d3cc9ac41e6513fa6f324f44e76320e3c1257d97cc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8c91f464df6660bd1f0781d3cc9ac41e6513fa6f324f44e76320e3c1257d97cc","first_computed_at":"2026-05-18T03:10:11.244512Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T03:10:11.244512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EdkSnHaTgEyn31LDegHbGMRg/GifVCxDp+rcorppzPjSFxlRP1syJWaZP5PS/XN5Py2cnhev81JEgQAuO5IHCw==","signature_status":"signed_v1","signed_at":"2026-05-18T03:10:11.245370Z","signed_message":"canonical_sha256_bytes"},"source_id":"2602.04113","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2f470e18d3ea74fa24e6c7230c2b2fd042811873b909c1330961988c661f1327","sha256:f7c94441ae00f8a0f08bf2b7adecb6d89094fd5abb409cff5b59ae7f71499684"],"state_sha256":"6d4a5a82ee94c708afc6a543e040d8579ebcfb4df1701f614e2b6029637b44ab"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KNYJh1pKm1cx7L+KPbVgVkLBHyWTBffT70T4Pchphs8rpIj8IhrFf41lwcuxLEmruB/9oGjMEQiliXdRx8aoAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-05T03:12:10.688829Z","bundle_sha256":"6488010a7f244aa6294cb7d68b3e5357f869893bfe49e64f66dce0e1e7ed56f0"}}