{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SG6G7REGY44RYDAVMCJVIJKERB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b4477fac9e588490771dba5f6536a86dbb7f472173e3b30120144de52cd0867e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","title_canon_sha256":"dedbbf76d066ada1f6452ab5bdbe5b91da692ebbc178e2c74a25c396a3a9363d"},"schema_version":"1.0","source":{"id":"2509.08709","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.08709","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"arxiv_version","alias_value":"2509.08709v2","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.08709","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_12","alias_value":"SG6G7REGY44R","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_16","alias_value":"SG6G7REGY44RYDAV","created_at":"2026-07-05T12:09:25Z"},{"alias_kind":"pith_short_8","alias_value":"SG6G7REG","created_at":"2026-07-05T12:09:25Z"}],"graph_snapshots":[{"event_id":"sha256:f508b97bf2866857e4b12e84c201f921e53e9c6f93feeb9bb308b35cfbbadd56","target":"graph","created_at":"2026-07-05T12:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.08709/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In cross-device private federated learning, differentially private follow-the-regularized-leader (DP-FTRL) has emerged as a promising privacy-preserving method. However, existing approaches assume a semi-honest server and have not addressed the challenge of securely removing this assumption. This is due to its statefulness, which becomes particularly problematic in practical settings where clients can drop out or be corrupted. While trusted execution environments (TEEs) might seem like an obvious solution, a straightforward implementation can introduce forking attacks or availability issues du","authors_text":"Satoshi Hasegawa, Shun Takagi","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","title":"Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.08709","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e69f88e6e916fa9b083022d4fb880b54cfeaf3ed7b927176eed15759df0adc3f","target":"record","created_at":"2026-07-05T12:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b4477fac9e588490771dba5f6536a86dbb7f472173e3b30120144de52cd0867e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-09-10T15:58:05Z","title_canon_sha256":"dedbbf76d066ada1f6452ab5bdbe5b91da692ebbc178e2c74a25c396a3a9363d"},"schema_version":"1.0","source":{"id":"2509.08709","kind":"arxiv","version":2}},"canonical_sha256":"91bc6fc486c7391c0c15609354254488542addb83840ad47682fb6dc29d72b2d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"91bc6fc486c7391c0c15609354254488542addb83840ad47682fb6dc29d72b2d","first_computed_at":"2026-07-05T12:09:25.171805Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:25.171805Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yIAPKB3T9jvAXZ2p1Y+5FXyF4yLQlE3+SgT8EAG+cX49WLRbeVytbVdwvJoxI8ppVOBaXKP943Bpgm64tZtmBw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:25.172278Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.08709","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e69f88e6e916fa9b083022d4fb880b54cfeaf3ed7b927176eed15759df0adc3f","sha256:f508b97bf2866857e4b12e84c201f921e53e9c6f93feeb9bb308b35cfbbadd56"],"state_sha256":"ec4a1b378fbe1bfbbf6cc0aebcb9cc322f19d8cb68b068f907537fa3b78b9318"}