{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SG6G7REGY44RYDAVMCJVIJKERB","short_pith_number":"pith:SG6G7REG","canonical_record":{"source":{"id":"2509.08709","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"dedbbf76d066ada1f6452ab5bdbe5b91da692ebbc178e2c74a25c396a3a9363d","abstract_canon_sha256":"b4477fac9e588490771dba5f6536a86dbb7f472173e3b30120144de52cd0867e"},"schema_version":"1.0"},"canonical_sha256":"91bc6fc486c7391c0c15609354254488542addb83840ad47682fb6dc29d72b2d","source":{"kind":"arxiv","id":"2509.08709","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.08709","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"arxiv_version","alias_value":"2509.08709v2","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.08709","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_12","alias_value":"SG6G7REGY44R","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_16","alias_value":"SG6G7REGY44RYDAV","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_8","alias_value":"SG6G7REG","created_at":"2026-07-05T12:09:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SG6G7REGY44RYDAVMCJVIJKERB","target":"record","payload":{"canonical_record":{"source":{"id":"2509.08709","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"dedbbf76d066ada1f6452ab5bdbe5b91da692ebbc178e2c74a25c396a3a9363d","abstract_canon_sha256":"b4477fac9e588490771dba5f6536a86dbb7f472173e3b30120144de52cd0867e"},"schema_version":"1.0"},"canonical_sha256":"91bc6fc486c7391c0c15609354254488542addb83840ad47682fb6dc29d72b2d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:09:25.172278Z","signature_b64":"yIAPKB3T9jvAXZ2p1Y+5FXyF4yLQlE3+SgT8EAG+cX49WLRbeVytbVdwvJoxI8ppVOBaXKP943Bpgm64tZtmBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"91bc6fc486c7391c0c15609354254488542addb83840ad47682fb6dc29d72b2d","last_reissued_at":"2026-07-05T12:09:25.171805Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:09:25.171805Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.08709","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sd2gD5UZzr93cZ+PKnhXtHt1mnsDoOPkfmeaFxIHb+y5gEC9teuP5veavENko3cO2RpqiKeyaIcmDxGysLZ1CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:22:28.504655Z"},"content_sha256":"e69f88e6e916fa9b083022d4fb880b54cfeaf3ed7b927176eed15759df0adc3f","schema_version":"1.0","event_id":"sha256:e69f88e6e916fa9b083022d4fb880b54cfeaf3ed7b927176eed15759df0adc3f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SG6G7REGY44RYDAVMCJVIJKERB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Satoshi Hasegawa, Shun Takagi","submitted_at":"2025-09-10T15:58:05Z","abstract_excerpt":"In cross-device private federated learning, differentially private follow-the-regularized-leader (DP-FTRL) has emerged as a promising privacy-preserving method. However, existing approaches assume a semi-honest server and have not addressed the challenge of securely removing this assumption. This is due to its statefulness, which becomes particularly problematic in practical settings where clients can drop out or be corrupted. While trusted execution environments (TEEs) might seem like an obvious solution, a straightforward implementation can introduce forking attacks or availability issues du"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.08709","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.08709/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hd0BItk48h4AVtq2c99aLu4FeyobxTksLEEcrFTVbMTVaJGY0zteQ038GBNknlbWfkytib2MHEfaPvoaqzWAAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:22:28.505430Z"},"content_sha256":"f508b97bf2866857e4b12e84c201f921e53e9c6f93feeb9bb308b35cfbbadd56","schema_version":"1.0","event_id":"sha256:f508b97bf2866857e4b12e84c201f921e53e9c6f93feeb9bb308b35cfbbadd56"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SG6G7REGY44RYDAVMCJVIJKERB/bundle.json","state_url":"https://pith.science/pith/SG6G7REGY44RYDAVMCJVIJKERB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SG6G7REGY44RYDAVMCJVIJKERB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T09:22:28Z","links":{"resolver":"https://pith.science/pith/SG6G7REGY44RYDAVMCJVIJKERB","bundle":"https://pith.science/pith/SG6G7REGY44RYDAVMCJVIJKERB/bundle.json","state":"https://pith.science/pith/SG6G7REGY44RYDAVMCJVIJKERB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SG6G7REGY44RYDAVMCJVIJKERB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SG6G7REGY44RYDAVMCJVIJKERB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b4477fac9e588490771dba5f6536a86dbb7f472173e3b30120144de52cd0867e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","title_canon_sha256":"dedbbf76d066ada1f6452ab5bdbe5b91da692ebbc178e2c74a25c396a3a9363d"},"schema_version":"1.0","source":{"id":"2509.08709","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.08709","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"arxiv_version","alias_value":"2509.08709v2","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.08709","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_12","alias_value":"SG6G7REGY44R","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_16","alias_value":"SG6G7REGY44RYDAV","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_8","alias_value":"SG6G7REG","created_at":"2026-07-05T12:09:25Z"}],"graph_snapshots":[{"event_id":"sha256:f508b97bf2866857e4b12e84c201f921e53e9c6f93feeb9bb308b35cfbbadd56","target":"graph","created_at":"2026-07-05T12:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.08709/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In cross-device private federated learning, differentially private follow-the-regularized-leader (DP-FTRL) has emerged as a promising privacy-preserving method. However, existing approaches assume a semi-honest server and have not addressed the challenge of securely removing this assumption. This is due to its statefulness, which becomes particularly problematic in practical settings where clients can drop out or be corrupted. While trusted execution environments (TEEs) might seem like an obvious solution, a straightforward implementation can introduce forking attacks or availability issues du","authors_text":"Satoshi Hasegawa, Shun Takagi","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","title":"Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.08709","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e69f88e6e916fa9b083022d4fb880b54cfeaf3ed7b927176eed15759df0adc3f","target":"record","created_at":"2026-07-05T12:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b4477fac9e588490771dba5f6536a86dbb7f472173e3b30120144de52cd0867e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","title_canon_sha256":"dedbbf76d066ada1f6452ab5bdbe5b91da692ebbc178e2c74a25c396a3a9363d"},"schema_version":"1.0","source":{"id":"2509.08709","kind":"arxiv","version":2}},"canonical_sha256":"91bc6fc486c7391c0c15609354254488542addb83840ad47682fb6dc29d72b2d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"91bc6fc486c7391c0c15609354254488542addb83840ad47682fb6dc29d72b2d","first_computed_at":"2026-07-05T12:09:25.171805Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:25.171805Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yIAPKB3T9jvAXZ2p1Y+5FXyF4yLQlE3+SgT8EAG+cX49WLRbeVytbVdwvJoxI8ppVOBaXKP943Bpgm64tZtmBw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:25.172278Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.08709","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e69f88e6e916fa9b083022d4fb880b54cfeaf3ed7b927176eed15759df0adc3f","sha256:f508b97bf2866857e4b12e84c201f921e53e9c6f93feeb9bb308b35cfbbadd56"],"state_sha256":"ec4a1b378fbe1bfbbf6cc0aebcb9cc322f19d8cb68b068f907537fa3b78b9318"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zTmwzHj/Hn4O21ngpJjC2x3yUu0uJpBL7GfDlSNIB6HoBx7b5zwqIk/xZwMYPDfLYcRDL9nKMM2lBNjv8IbqCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T09:22:28.517743Z","bundle_sha256":"08863470ccacb984b2231311ff415e88319874cf40a9258987834bb8d5b99d10"}}