{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:SANFPUEB7R3P6HBUBOY3ODN2ZG","short_pith_number":"pith:SANFPUEB","canonical_record":{"source":{"id":"2212.10986","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-12-21T12:48:30Z","cross_cats_sorted":["cs.CR","cs.GT"],"title_canon_sha256":"e317bc9164605b5e4f4cf79a5dfbe1fad3b7e05c00fc45b2aed2165d64b12196","abstract_canon_sha256":"203e868ea00ea6d9e7996db45cca02e9de12775344c1a9a2b544f8f205c7b66a"},"schema_version":"1.0"},"canonical_sha256":"901a57d081fc76ff1c340bb1b70dbac9a9aa557d6ca04706b0c56d839ce60b1b","source":{"kind":"arxiv","id":"2212.10986","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.10986","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"arxiv_version","alias_value":"2212.10986v2","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.10986","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_12","alias_value":"SANFPUEB7R3P","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_16","alias_value":"SANFPUEB7R3P6HBU","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_8","alias_value":"SANFPUEB","created_at":"2026-07-05T06:03:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:SANFPUEB7R3P6HBUBOY3ODN2ZG","target":"record","payload":{"canonical_record":{"source":{"id":"2212.10986","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-12-21T12:48:30Z","cross_cats_sorted":["cs.CR","cs.GT"],"title_canon_sha256":"e317bc9164605b5e4f4cf79a5dfbe1fad3b7e05c00fc45b2aed2165d64b12196","abstract_canon_sha256":"203e868ea00ea6d9e7996db45cca02e9de12775344c1a9a2b544f8f205c7b66a"},"schema_version":"1.0"},"canonical_sha256":"901a57d081fc76ff1c340bb1b70dbac9a9aa557d6ca04706b0c56d839ce60b1b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:03:10.935627Z","signature_b64":"XPl+FoD9XVcO2Ig1FnFNvsEL8lRXdVDHWEy8ll3t6XVLM7yT6b2PBo3cRpPW0Hpsy404+8u40TiQ1ykMZbZZBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"901a57d081fc76ff1c340bb1b70dbac9a9aa557d6ca04706b0c56d839ce60b1b","last_reissued_at":"2026-07-05T06:03:10.935131Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:03:10.935131Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.10986","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fRA742dflIqIerWyFEVdMsnuc6ubc8QW6HvApyKGY7d+SeAOgeFrEHFeRQ1Nr9A+h3iiMLmk8CkkQrR/9ji/DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T14:03:28.627123Z"},"content_sha256":"3f2d8ccd6f08cdbbef620f9f7eaf9883f754d062ed3824530773d543e0c0a56e","schema_version":"1.0","event_id":"sha256:3f2d8ccd6f08cdbbef620f9f7eaf9883f754d062ed3824530773d543e0c0a56e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:SANFPUEB7R3P6HBUBOY3ODN2ZG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.GT"],"primary_cat":"cs.LG","authors_text":"Ahmed Salem, Andrew Paverd, Anshuman Suri, Boris K\\\"opf, David Evans, Giovanni Cherubin, Santiago Zanella-B\\'eguelin, Shruti Tople","submitted_at":"2022-12-21T12:48:30Z","abstract_excerpt":"Deploying machine learning models in production may allow adversaries to infer sensitive information about training data. There is a vast literature analyzing different types of inference risks, ranging from membership inference to reconstruction attacks. Inspired by the success of games (i.e., probabilistic experiments) to study security properties in cryptography, some authors describe privacy inference risks in machine learning using a similar game-based style. However, adversary capabilities and goals are often stated in subtly different ways from one presentation to the other, which makes"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.10986","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.10986/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sbSuramvpb/hJ3RxzNQ/r4DhdSK27Cbo5PCMSg3NM3CK2483AZ2ZhSO0kKZ0oIxAco/adES5AnYs5hgI6fYOBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T14:03:28.627522Z"},"content_sha256":"aa5f83a23b1c27a223e70878155ca92f972c110a13932e116f2bbbcba81802b4","schema_version":"1.0","event_id":"sha256:aa5f83a23b1c27a223e70878155ca92f972c110a13932e116f2bbbcba81802b4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SANFPUEB7R3P6HBUBOY3ODN2ZG/bundle.json","state_url":"https://pith.science/pith/SANFPUEB7R3P6HBUBOY3ODN2ZG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SANFPUEB7R3P6HBUBOY3ODN2ZG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T14:03:28Z","links":{"resolver":"https://pith.science/pith/SANFPUEB7R3P6HBUBOY3ODN2ZG","bundle":"https://pith.science/pith/SANFPUEB7R3P6HBUBOY3ODN2ZG/bundle.json","state":"https://pith.science/pith/SANFPUEB7R3P6HBUBOY3ODN2ZG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SANFPUEB7R3P6HBUBOY3ODN2ZG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:SANFPUEB7R3P6HBUBOY3ODN2ZG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"203e868ea00ea6d9e7996db45cca02e9de12775344c1a9a2b544f8f205c7b66a","cross_cats_sorted":["cs.CR","cs.GT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-12-21T12:48:30Z","title_canon_sha256":"e317bc9164605b5e4f4cf79a5dfbe1fad3b7e05c00fc45b2aed2165d64b12196"},"schema_version":"1.0","source":{"id":"2212.10986","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.10986","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"arxiv_version","alias_value":"2212.10986v2","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.10986","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_12","alias_value":"SANFPUEB7R3P","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_16","alias_value":"SANFPUEB7R3P6HBU","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_8","alias_value":"SANFPUEB","created_at":"2026-07-05T06:03:10Z"}],"graph_snapshots":[{"event_id":"sha256:aa5f83a23b1c27a223e70878155ca92f972c110a13932e116f2bbbcba81802b4","target":"graph","created_at":"2026-07-05T06:03:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.10986/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deploying machine learning models in production may allow adversaries to infer sensitive information about training data. There is a vast literature analyzing different types of inference risks, ranging from membership inference to reconstruction attacks. Inspired by the success of games (i.e., probabilistic experiments) to study security properties in cryptography, some authors describe privacy inference risks in machine learning using a similar game-based style. However, adversary capabilities and goals are often stated in subtly different ways from one presentation to the other, which makes","authors_text":"Ahmed Salem, Andrew Paverd, Anshuman Suri, Boris K\\\"opf, David Evans, Giovanni Cherubin, Santiago Zanella-B\\'eguelin, Shruti Tople","cross_cats":["cs.CR","cs.GT"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-12-21T12:48:30Z","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.10986","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3f2d8ccd6f08cdbbef620f9f7eaf9883f754d062ed3824530773d543e0c0a56e","target":"record","created_at":"2026-07-05T06:03:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"203e868ea00ea6d9e7996db45cca02e9de12775344c1a9a2b544f8f205c7b66a","cross_cats_sorted":["cs.CR","cs.GT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-12-21T12:48:30Z","title_canon_sha256":"e317bc9164605b5e4f4cf79a5dfbe1fad3b7e05c00fc45b2aed2165d64b12196"},"schema_version":"1.0","source":{"id":"2212.10986","kind":"arxiv","version":2}},"canonical_sha256":"901a57d081fc76ff1c340bb1b70dbac9a9aa557d6ca04706b0c56d839ce60b1b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"901a57d081fc76ff1c340bb1b70dbac9a9aa557d6ca04706b0c56d839ce60b1b","first_computed_at":"2026-07-05T06:03:10.935131Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:03:10.935131Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XPl+FoD9XVcO2Ig1FnFNvsEL8lRXdVDHWEy8ll3t6XVLM7yT6b2PBo3cRpPW0Hpsy404+8u40TiQ1ykMZbZZBw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:03:10.935627Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.10986","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3f2d8ccd6f08cdbbef620f9f7eaf9883f754d062ed3824530773d543e0c0a56e","sha256:aa5f83a23b1c27a223e70878155ca92f972c110a13932e116f2bbbcba81802b4"],"state_sha256":"e9db37f3884af0dbafc1607cf312b955d6a1d4fc358c19afea10bae55208ee69"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uMgjyQhiRonjQZkAEqxNovQkS5LbQaS77wdnrR0GiKKDTdT6FOLaB3x9JOCd2yPmrc3uhXcWHwkt2d4SX9CwCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T14:03:28.629744Z","bundle_sha256":"464847bf8a0d92888c5e84e4526c31138dd05ed33dea66c997aa0f242eafddd4"}}