{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:TFKEWW6ATW4ZSXO745TNGKAQEN","short_pith_number":"pith:TFKEWW6A","canonical_record":{"source":{"id":"2205.08858","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-05-18T10:44:28Z","cross_cats_sorted":[],"title_canon_sha256":"211abc963e9e3b51597236f31b80c3e66331c4fd57dda72a50653f97eb08e42c","abstract_canon_sha256":"8997cb5e93e9fb9fecbf0657d0d82f2d89347487a689c9a4abe4d64bee14cddb"},"schema_version":"1.0"},"canonical_sha256":"99544b5bc09db9995ddfe766d328102360b116a98e9f11029e6a0ee6a83c3476","source":{"kind":"arxiv","id":"2205.08858","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.08858","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"arxiv_version","alias_value":"2205.08858v2","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.08858","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"pith_short_12","alias_value":"TFKEWW6ATW4Z","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"pith_short_16","alias_value":"TFKEWW6ATW4ZSXO7","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"pith_short_8","alias_value":"TFKEWW6A","created_at":"2026-07-05T08:13:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:TFKEWW6ATW4ZSXO745TNGKAQEN","target":"record","payload":{"canonical_record":{"source":{"id":"2205.08858","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-05-18T10:44:28Z","cross_cats_sorted":[],"title_canon_sha256":"211abc963e9e3b51597236f31b80c3e66331c4fd57dda72a50653f97eb08e42c","abstract_canon_sha256":"8997cb5e93e9fb9fecbf0657d0d82f2d89347487a689c9a4abe4d64bee14cddb"},"schema_version":"1.0"},"canonical_sha256":"99544b5bc09db9995ddfe766d328102360b116a98e9f11029e6a0ee6a83c3476","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:13:24.302899Z","signature_b64":"z0bv+DOq5aIWJVTzO7SgTD8wLBsZL/Nkih2eN+4RGNBeJMKMkeDDoHkfEZAXwElarcDYN2kzM5XeN4Yl01jvAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"99544b5bc09db9995ddfe766d328102360b116a98e9f11029e6a0ee6a83c3476","last_reissued_at":"2026-07-05T08:13:24.302423Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:13:24.302423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.08858","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:13:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jfus7zEGcANNGBwfVIx5xVyCmYWX5bRFohC3uNknlxt7Nr6t7+1rLk3ctAeGB2RQYEyne7JYazkT2aTRdT1UDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T06:57:02.809492Z"},"content_sha256":"9c5d8c98887dd25f5835ed93c43643fd1cfc8487beb2fb89692707071d9cb790","schema_version":"1.0","event_id":"sha256:9c5d8c98887dd25f5835ed93c43643fd1cfc8487beb2fb89692707071d9cb790"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:TFKEWW6ATW4ZSXO745TNGKAQEN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tight Differential Privacy Guarantees for the Shuffle Model with $k$-Randomized Response","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Catuscia Palamidessi, Kangsoo Jung, Sayan Biswas","submitted_at":"2022-05-18T10:44:28Z","abstract_excerpt":"Most differentially private (DP) algorithms assume a central model in which a reliable third party inserts noise to queries made on datasets, or a local model where the users locally perturb their data. However, the central model is vulnerable via a single point of failure, and in the local model, the utility of the data deteriorates significantly. The recently proposed shuffle model is an intermediate framework between the central and the local paradigms where the users send their locally privatized data to a server where messages are shuffled, effacing the link between a privatized message a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.08858","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.08858/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:13:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZVufgPja0JpSLeg7Zn8ynoQfrvXEZL+QLgqzK0r2nD/zwbZhv7m3fSyXJIhSt0U/Co7nDStoqLOp5eBMEk6dAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T06:57:02.810043Z"},"content_sha256":"333b6399363558582afce0751fd78619d346824eb8c3ab4ca3894b6b9f062362","schema_version":"1.0","event_id":"sha256:333b6399363558582afce0751fd78619d346824eb8c3ab4ca3894b6b9f062362"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TFKEWW6ATW4ZSXO745TNGKAQEN/bundle.json","state_url":"https://pith.science/pith/TFKEWW6ATW4ZSXO745TNGKAQEN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TFKEWW6ATW4ZSXO745TNGKAQEN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T06:57:02Z","links":{"resolver":"https://pith.science/pith/TFKEWW6ATW4ZSXO745TNGKAQEN","bundle":"https://pith.science/pith/TFKEWW6ATW4ZSXO745TNGKAQEN/bundle.json","state":"https://pith.science/pith/TFKEWW6ATW4ZSXO745TNGKAQEN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TFKEWW6ATW4ZSXO745TNGKAQEN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:TFKEWW6ATW4ZSXO745TNGKAQEN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8997cb5e93e9fb9fecbf0657d0d82f2d89347487a689c9a4abe4d64bee14cddb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-05-18T10:44:28Z","title_canon_sha256":"211abc963e9e3b51597236f31b80c3e66331c4fd57dda72a50653f97eb08e42c"},"schema_version":"1.0","source":{"id":"2205.08858","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.08858","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"arxiv_version","alias_value":"2205.08858v2","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.08858","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"pith_short_12","alias_value":"TFKEWW6ATW4Z","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"pith_short_16","alias_value":"TFKEWW6ATW4ZSXO7","created_at":"2026-07-05T08:13:24Z"},{"alias_kind":"pith_short_8","alias_value":"TFKEWW6A","created_at":"2026-07-05T08:13:24Z"}],"graph_snapshots":[{"event_id":"sha256:333b6399363558582afce0751fd78619d346824eb8c3ab4ca3894b6b9f062362","target":"graph","created_at":"2026-07-05T08:13:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.08858/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Most differentially private (DP) algorithms assume a central model in which a reliable third party inserts noise to queries made on datasets, or a local model where the users locally perturb their data. However, the central model is vulnerable via a single point of failure, and in the local model, the utility of the data deteriorates significantly. The recently proposed shuffle model is an intermediate framework between the central and the local paradigms where the users send their locally privatized data to a server where messages are shuffled, effacing the link between a privatized message a","authors_text":"Catuscia Palamidessi, Kangsoo Jung, Sayan Biswas","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-05-18T10:44:28Z","title":"Tight Differential Privacy Guarantees for the Shuffle Model with $k$-Randomized Response"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.08858","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9c5d8c98887dd25f5835ed93c43643fd1cfc8487beb2fb89692707071d9cb790","target":"record","created_at":"2026-07-05T08:13:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8997cb5e93e9fb9fecbf0657d0d82f2d89347487a689c9a4abe4d64bee14cddb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-05-18T10:44:28Z","title_canon_sha256":"211abc963e9e3b51597236f31b80c3e66331c4fd57dda72a50653f97eb08e42c"},"schema_version":"1.0","source":{"id":"2205.08858","kind":"arxiv","version":2}},"canonical_sha256":"99544b5bc09db9995ddfe766d328102360b116a98e9f11029e6a0ee6a83c3476","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"99544b5bc09db9995ddfe766d328102360b116a98e9f11029e6a0ee6a83c3476","first_computed_at":"2026-07-05T08:13:24.302423Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:13:24.302423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"z0bv+DOq5aIWJVTzO7SgTD8wLBsZL/Nkih2eN+4RGNBeJMKMkeDDoHkfEZAXwElarcDYN2kzM5XeN4Yl01jvAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:13:24.302899Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.08858","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9c5d8c98887dd25f5835ed93c43643fd1cfc8487beb2fb89692707071d9cb790","sha256:333b6399363558582afce0751fd78619d346824eb8c3ab4ca3894b6b9f062362"],"state_sha256":"f2e2d93322e949bdbe05ff6f8dc083c45718027ad8c4b31a234f534e3f252aed"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bQAQoIL9y7tDL1asxPQrYTsMimXUmp3OzWfYX6Ye8nW1y+e4+c0AbtQg/LkvgTwA9FipSscFwpHHqXZgFvLuBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T06:57:02.815428Z","bundle_sha256":"12e51528ed8e4b4180c315015ac8cb644f5160929eb50d43da84dcd3053ba16e"}}