{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:TIH6RDWW2NCLVLD3EIDWQ77W7O","short_pith_number":"pith:TIH6RDWW","canonical_record":{"source":{"id":"2403.01218","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-02T14:22:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2d73b54d3820d1fc2785d410786b9749275a8edb07a36ea1ab9d643719f3a0d5","abstract_canon_sha256":"a9b86b4af7fe9649c2f1d3b1f35e88e2faebd5b77ce9ac12ac6ba1c7a9bec88d"},"schema_version":"1.0"},"canonical_sha256":"9a0fe88ed6d344baac7b2207687ff6fb9aae51d2d2427e8ef15a491b5439cb67","source":{"kind":"arxiv","id":"2403.01218","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.01218","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"arxiv_version","alias_value":"2403.01218v3","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.01218","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"pith_short_12","alias_value":"TIH6RDWW2NCL","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"pith_short_16","alias_value":"TIH6RDWW2NCLVLD3","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"pith_short_8","alias_value":"TIH6RDWW","created_at":"2026-07-05T08:21:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:TIH6RDWW2NCLVLD3EIDWQ77W7O","target":"record","payload":{"canonical_record":{"source":{"id":"2403.01218","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-02T14:22:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2d73b54d3820d1fc2785d410786b9749275a8edb07a36ea1ab9d643719f3a0d5","abstract_canon_sha256":"a9b86b4af7fe9649c2f1d3b1f35e88e2faebd5b77ce9ac12ac6ba1c7a9bec88d"},"schema_version":"1.0"},"canonical_sha256":"9a0fe88ed6d344baac7b2207687ff6fb9aae51d2d2427e8ef15a491b5439cb67","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:21:13.875623Z","signature_b64":"xpp/wup79BkP1qPvK6czSCwBiCAy+b0lGmm/3MbSZXYROTMwQCyo+ypi4w4iM1kmUQO4Ps1i/TxDFi3yvOTeDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9a0fe88ed6d344baac7b2207687ff6fb9aae51d2d2427e8ef15a491b5439cb67","last_reissued_at":"2026-07-05T08:21:13.875044Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:21:13.875044Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.01218","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:21:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8AlPA6Pi8HQmYR7+WmOCoII7HJuZkDsSHnxfDVPLGXJl1oQmgkCGg7umpZ4qle/uCi0RVbftpMhb5ybz5Xj+BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:11:19.089103Z"},"content_sha256":"2cdd6dec97828db30573e01990806565424711d306159e9de4c0cc3f98c1c6fe","schema_version":"1.0","event_id":"sha256:2cdd6dec97828db30573e01990806565424711d306159e9de4c0cc3f98c1c6fe"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:TIH6RDWW2NCLVLD3EIDWQ77W7O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Amr Khalifa, Eleni Triantafillou, Ilia Shumailov, Jamie Hayes, Nicolas Papernot","submitted_at":"2024-03-02T14:22:40Z","abstract_excerpt":"The high cost of model training makes it increasingly desirable to develop techniques for unlearning. These techniques seek to remove the influence of a training example without having to retrain the model from scratch. Intuitively, once a model has unlearned, an adversary that interacts with the model should no longer be able to tell whether the unlearned example was included in the model's training set or not. In the privacy literature, this is known as membership inference. In this work, we discuss adaptations of Membership Inference Attacks (MIAs) to the setting of unlearning (leading to t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.01218","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.01218/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:21:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uIcU7oAWh0tCckRcsKHVk3yArMwF53IY8F1PLZRzDLgnJAygsTyHdJKYis3vtM3B23HPcEAuLR6qCIj8vdTfAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:11:19.090028Z"},"content_sha256":"57c598a886eb70c80a3f51fd3e2d86c3b7492ba561546dd861f2b6563d144baf","schema_version":"1.0","event_id":"sha256:57c598a886eb70c80a3f51fd3e2d86c3b7492ba561546dd861f2b6563d144baf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TIH6RDWW2NCLVLD3EIDWQ77W7O/bundle.json","state_url":"https://pith.science/pith/TIH6RDWW2NCLVLD3EIDWQ77W7O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TIH6RDWW2NCLVLD3EIDWQ77W7O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T16:11:19Z","links":{"resolver":"https://pith.science/pith/TIH6RDWW2NCLVLD3EIDWQ77W7O","bundle":"https://pith.science/pith/TIH6RDWW2NCLVLD3EIDWQ77W7O/bundle.json","state":"https://pith.science/pith/TIH6RDWW2NCLVLD3EIDWQ77W7O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TIH6RDWW2NCLVLD3EIDWQ77W7O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:TIH6RDWW2NCLVLD3EIDWQ77W7O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a9b86b4af7fe9649c2f1d3b1f35e88e2faebd5b77ce9ac12ac6ba1c7a9bec88d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-02T14:22:40Z","title_canon_sha256":"2d73b54d3820d1fc2785d410786b9749275a8edb07a36ea1ab9d643719f3a0d5"},"schema_version":"1.0","source":{"id":"2403.01218","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.01218","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"arxiv_version","alias_value":"2403.01218v3","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.01218","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"pith_short_12","alias_value":"TIH6RDWW2NCL","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"pith_short_16","alias_value":"TIH6RDWW2NCLVLD3","created_at":"2026-07-05T08:21:13Z"},{"alias_kind":"pith_short_8","alias_value":"TIH6RDWW","created_at":"2026-07-05T08:21:13Z"}],"graph_snapshots":[{"event_id":"sha256:57c598a886eb70c80a3f51fd3e2d86c3b7492ba561546dd861f2b6563d144baf","target":"graph","created_at":"2026-07-05T08:21:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.01218/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The high cost of model training makes it increasingly desirable to develop techniques for unlearning. These techniques seek to remove the influence of a training example without having to retrain the model from scratch. Intuitively, once a model has unlearned, an adversary that interacts with the model should no longer be able to tell whether the unlearned example was included in the model's training set or not. In the privacy literature, this is known as membership inference. In this work, we discuss adaptations of Membership Inference Attacks (MIAs) to the setting of unlearning (leading to t","authors_text":"Amr Khalifa, Eleni Triantafillou, Ilia Shumailov, Jamie Hayes, Nicolas Papernot","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-02T14:22:40Z","title":"Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.01218","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2cdd6dec97828db30573e01990806565424711d306159e9de4c0cc3f98c1c6fe","target":"record","created_at":"2026-07-05T08:21:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a9b86b4af7fe9649c2f1d3b1f35e88e2faebd5b77ce9ac12ac6ba1c7a9bec88d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-02T14:22:40Z","title_canon_sha256":"2d73b54d3820d1fc2785d410786b9749275a8edb07a36ea1ab9d643719f3a0d5"},"schema_version":"1.0","source":{"id":"2403.01218","kind":"arxiv","version":3}},"canonical_sha256":"9a0fe88ed6d344baac7b2207687ff6fb9aae51d2d2427e8ef15a491b5439cb67","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9a0fe88ed6d344baac7b2207687ff6fb9aae51d2d2427e8ef15a491b5439cb67","first_computed_at":"2026-07-05T08:21:13.875044Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:21:13.875044Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xpp/wup79BkP1qPvK6czSCwBiCAy+b0lGmm/3MbSZXYROTMwQCyo+ypi4w4iM1kmUQO4Ps1i/TxDFi3yvOTeDw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:21:13.875623Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.01218","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2cdd6dec97828db30573e01990806565424711d306159e9de4c0cc3f98c1c6fe","sha256:57c598a886eb70c80a3f51fd3e2d86c3b7492ba561546dd861f2b6563d144baf"],"state_sha256":"d800aeacdecdbc66097d6671b24db6df0b790730f3e1feaa38295c3fb8f163d1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hjus+jcrdf7dGG5f0lp7FywRAT5BRpNPjw0RiQgX8o9aPM/gvSKxMFXxxOz9wXQFFRiMWuCn1vV4/DE8uCnCAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T16:11:19.096611Z","bundle_sha256":"d6479fbdfa678aa035057e5fe0011713723532e8068f07e649e55f0194074fce"}}