{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:RTMMVGKHSRJ4G7M5ZKJLKQVGBC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4b211f40b9a10dea7ee0502a89aba1a68a8bb509bfa301c83b0f70f25c0317da","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-08-02T05:58:00Z","title_canon_sha256":"531da7f3bb118a256eb185fe3a80665341e2fb533cf702b4b827dbe7dca3fc7d"},"schema_version":"1.0","source":{"id":"2608.01023","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01023","created_at":"2026-08-04T01:56:14Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01023v1","created_at":"2026-08-04T01:56:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01023","created_at":"2026-08-04T01:56:14Z"},{"alias_kind":"pith_short_12","alias_value":"RTMMVGKHSRJ4","created_at":"2026-08-04T01:56:14Z"},{"alias_kind":"pith_short_16","alias_value":"RTMMVGKHSRJ4G7M5","created_at":"2026-08-04T01:56:14Z"},{"alias_kind":"pith_short_8","alias_value":"RTMMVGKH","created_at":"2026-08-04T01:56:14Z"}],"graph_snapshots":[{"event_id":"sha256:3e376f574b496c2753bae5020801e60555124b10ff64d473645cb0d35ee167d2","target":"graph","created_at":"2026-08-04T01:56:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.01023/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present Caliber, an output-perturbation defense against model extraction that formulates noise selection as a calibration problem: how much the defense degrades the supervision signal used to train a surrogate, and the provable per-input query cost of recovering the clean logits. To defend against an attacker that uses returned scores for knowledge distillation, Caliber adds independent and identically distributed Gaussian noise to the internal logits. We establish two properties of the resulting perturbed predictions. Monotone agreement degradation: When the clean logits have a unique maxi","authors_text":"Chi Wang, Guangdong Bai, Hanwen Wang, Yu Xia, Zihan Wang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-08-02T05:58:00Z","title":"Caliber: Cross-Architecture Extraction-Cost Control for Score-Returning APIs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01023","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b6a13c715cb8da38982c2cf7009cf5b4f3920045154534bdf0e7444dceeb97a2","target":"record","created_at":"2026-08-04T01:56:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4b211f40b9a10dea7ee0502a89aba1a68a8bb509bfa301c83b0f70f25c0317da","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-08-02T05:58:00Z","title_canon_sha256":"531da7f3bb118a256eb185fe3a80665341e2fb533cf702b4b827dbe7dca3fc7d"},"schema_version":"1.0","source":{"id":"2608.01023","kind":"arxiv","version":1}},"canonical_sha256":"8cd8ca99479453c37d9dca92b542a608b6c2f00918b715bfdbd717f7830f2e76","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8cd8ca99479453c37d9dca92b542a608b6c2f00918b715bfdbd717f7830f2e76","first_computed_at":"2026-08-04T01:56:14.262405Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T01:56:14.262405Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ncq2+r2rs6wxNusenxQkGHnq2WeawpCrdvqKFX1wTdUgKXABRcRq/O2MAe5859AcBUvFumn0IvwqeO9er3zZBQ==","signature_status":"signed_v1","signed_at":"2026-08-04T01:56:14.264116Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.01023","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b6a13c715cb8da38982c2cf7009cf5b4f3920045154534bdf0e7444dceeb97a2","sha256:3e376f574b496c2753bae5020801e60555124b10ff64d473645cb0d35ee167d2"],"state_sha256":"cd681b050fcc30c43dc2463fa51c625636ab50436c627a1f0157d18d64a38388"}