{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:T54EW26BBLQ5BMYNJQUEASVLP4","short_pith_number":"pith:T54EW26B","canonical_record":{"source":{"id":"2511.10502","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T17:06:57Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"139b16454067820a6c08ac01521578ed1d27bc3bd023a66e2881c2b060a8b3e4","abstract_canon_sha256":"ac08cf26e28ab515324e2b0b3e8151fdb3f682c078f586de18effc842d5fce89"},"schema_version":"1.0"},"canonical_sha256":"9f784b6bc10ae1d0b30d4c28404aab7f2bf28d7235789f74839843704813ece7","source":{"kind":"arxiv","id":"2511.10502","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2511.10502","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"arxiv_version","alias_value":"2511.10502v1","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2511.10502","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"pith_short_12","alias_value":"T54EW26BBLQ5","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"pith_short_16","alias_value":"T54EW26BBLQ5BMYN","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"pith_short_8","alias_value":"T54EW26B","created_at":"2026-05-26T02:03:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:T54EW26BBLQ5BMYNJQUEASVLP4","target":"record","payload":{"canonical_record":{"source":{"id":"2511.10502","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T17:06:57Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"139b16454067820a6c08ac01521578ed1d27bc3bd023a66e2881c2b060a8b3e4","abstract_canon_sha256":"ac08cf26e28ab515324e2b0b3e8151fdb3f682c078f586de18effc842d5fce89"},"schema_version":"1.0"},"canonical_sha256":"9f784b6bc10ae1d0b30d4c28404aab7f2bf28d7235789f74839843704813ece7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-26T02:03:59.614750Z","signature_b64":"OFf007LD8iOUaH+XhAixL2GrzZRQ48Km2NXxgVzits+PNsSNxiFKEkM1EU2fwFCsGFWBU7giUwxDMwv9NdxaCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9f784b6bc10ae1d0b30d4c28404aab7f2bf28d7235789f74839843704813ece7","last_reissued_at":"2026-05-26T02:03:59.613917Z","signature_status":"signed_v1","first_computed_at":"2026-05-26T02:03:59.613917Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2511.10502","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T02:03:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8OhrAS+ZI6+XlbncIY9RvWWv9Fp+2O+4mEtLA6qsmx6mHC4yYvQBadIQC1olI+laEvkhGO3OXLWmD6ZCXN86Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T18:44:50.284182Z"},"content_sha256":"a21d7cc94ce0d9e72cf1801ff368b72284f25267007b1426322c6857809e33cb","schema_version":"1.0","event_id":"sha256:a21d7cc94ce0d9e72cf1801ff368b72284f25267007b1426322c6857809e33cb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:T54EW26BBLQ5BMYNJQUEASVLP4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Detectability of Active Gradient Inversion Attacks in Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Carlo Mazzocca, Giuseppe Parrella, Mario Vento, Pasquale Foggia, Vincenzo Carletti","submitted_at":"2025-11-13T17:06:57Z","abstract_excerpt":"One of the key advantages of Federated Learning (FL) is its ability to collaboratively train a Machine Learning (ML) model while keeping clients' data on-site. However, this can create a false sense of security. Despite not sharing private data increases the overall privacy, prior studies have shown that gradients exchanged during the FL training remain vulnerable to Gradient Inversion Attacks (GIAs). These attacks allow reconstructing the clients' local data, breaking the privacy promise of FL. GIAs can be launched by either a passive or an active server. In the latter case, a malicious serve"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2511.10502","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2511.10502/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T02:03:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GdtgonsbS10RdenBnBpFNbi11/ZAT2Z7ooMpa7KkZkzzNuoKDxIa0S5hePJct7rVA/xXvq7vhD+WH/2h9TyMDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T18:44:50.284720Z"},"content_sha256":"ea15d4c7c2ec727f239d893cbe625b8dbb686a4c5017d060c6004fe485bd13d1","schema_version":"1.0","event_id":"sha256:ea15d4c7c2ec727f239d893cbe625b8dbb686a4c5017d060c6004fe485bd13d1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/T54EW26BBLQ5BMYNJQUEASVLP4/bundle.json","state_url":"https://pith.science/pith/T54EW26BBLQ5BMYNJQUEASVLP4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/T54EW26BBLQ5BMYNJQUEASVLP4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T18:44:50Z","links":{"resolver":"https://pith.science/pith/T54EW26BBLQ5BMYNJQUEASVLP4","bundle":"https://pith.science/pith/T54EW26BBLQ5BMYNJQUEASVLP4/bundle.json","state":"https://pith.science/pith/T54EW26BBLQ5BMYNJQUEASVLP4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/T54EW26BBLQ5BMYNJQUEASVLP4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:T54EW26BBLQ5BMYNJQUEASVLP4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ac08cf26e28ab515324e2b0b3e8151fdb3f682c078f586de18effc842d5fce89","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T17:06:57Z","title_canon_sha256":"139b16454067820a6c08ac01521578ed1d27bc3bd023a66e2881c2b060a8b3e4"},"schema_version":"1.0","source":{"id":"2511.10502","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2511.10502","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"arxiv_version","alias_value":"2511.10502v1","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2511.10502","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"pith_short_12","alias_value":"T54EW26BBLQ5","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"pith_short_16","alias_value":"T54EW26BBLQ5BMYN","created_at":"2026-05-26T02:03:59Z"},{"alias_kind":"pith_short_8","alias_value":"T54EW26B","created_at":"2026-05-26T02:03:59Z"}],"graph_snapshots":[{"event_id":"sha256:ea15d4c7c2ec727f239d893cbe625b8dbb686a4c5017d060c6004fe485bd13d1","target":"graph","created_at":"2026-05-26T02:03:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2511.10502/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"One of the key advantages of Federated Learning (FL) is its ability to collaboratively train a Machine Learning (ML) model while keeping clients' data on-site. However, this can create a false sense of security. Despite not sharing private data increases the overall privacy, prior studies have shown that gradients exchanged during the FL training remain vulnerable to Gradient Inversion Attacks (GIAs). These attacks allow reconstructing the clients' local data, breaking the privacy promise of FL. GIAs can be launched by either a passive or an active server. In the latter case, a malicious serve","authors_text":"Carlo Mazzocca, Giuseppe Parrella, Mario Vento, Pasquale Foggia, Vincenzo Carletti","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T17:06:57Z","title":"On the Detectability of Active Gradient Inversion Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2511.10502","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a21d7cc94ce0d9e72cf1801ff368b72284f25267007b1426322c6857809e33cb","target":"record","created_at":"2026-05-26T02:03:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ac08cf26e28ab515324e2b0b3e8151fdb3f682c078f586de18effc842d5fce89","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T17:06:57Z","title_canon_sha256":"139b16454067820a6c08ac01521578ed1d27bc3bd023a66e2881c2b060a8b3e4"},"schema_version":"1.0","source":{"id":"2511.10502","kind":"arxiv","version":1}},"canonical_sha256":"9f784b6bc10ae1d0b30d4c28404aab7f2bf28d7235789f74839843704813ece7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9f784b6bc10ae1d0b30d4c28404aab7f2bf28d7235789f74839843704813ece7","first_computed_at":"2026-05-26T02:03:59.613917Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-26T02:03:59.613917Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OFf007LD8iOUaH+XhAixL2GrzZRQ48Km2NXxgVzits+PNsSNxiFKEkM1EU2fwFCsGFWBU7giUwxDMwv9NdxaCg==","signature_status":"signed_v1","signed_at":"2026-05-26T02:03:59.614750Z","signed_message":"canonical_sha256_bytes"},"source_id":"2511.10502","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a21d7cc94ce0d9e72cf1801ff368b72284f25267007b1426322c6857809e33cb","sha256:ea15d4c7c2ec727f239d893cbe625b8dbb686a4c5017d060c6004fe485bd13d1"],"state_sha256":"099a60e8211e30af7923728aa521081e418ed0af14669b8a9304d89eb5f4bff8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M0532Ruo8lYQf6WsrifHecu9GcjONFNfeyp0nV6228ca4f712djQ0HxkDkdACIfoVQU/4kSMrC0jLG8qkW7XBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T18:44:50.289398Z","bundle_sha256":"1fed04a2f9523876e7c451a76b268da6e31f6a7989e1294f1282763d8dad9e74"}}