{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:TN7BYCVWSWS34ES53MXJHVDZBG","short_pith_number":"pith:TN7BYCVW","canonical_record":{"source":{"id":"1807.00969","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-03T04:00:15Z","cross_cats_sorted":[],"title_canon_sha256":"818fcfd440a9129a1bfa8da8388e39c92a1388db85bfed496b8081a0c9d22679","abstract_canon_sha256":"a81041b9c319a97e1ef28449f8b3c9b7a2ed51570acd7a7008c3a85f51be11fc"},"schema_version":"1.0"},"canonical_sha256":"9b7e1c0ab695a5be125ddb2e93d4790996f48c5a5218b8b9979a176c07e04ae8","source":{"kind":"arxiv","id":"1807.00969","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.00969","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"arxiv_version","alias_value":"1807.00969v3","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.00969","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"pith_short_12","alias_value":"TN7BYCVWSWS3","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"pith_short_16","alias_value":"TN7BYCVWSWS34ES5","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"pith_short_8","alias_value":"TN7BYCVW","created_at":"2026-07-05T01:26:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:TN7BYCVWSWS34ES53MXJHVDZBG","target":"record","payload":{"canonical_record":{"source":{"id":"1807.00969","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-03T04:00:15Z","cross_cats_sorted":[],"title_canon_sha256":"818fcfd440a9129a1bfa8da8388e39c92a1388db85bfed496b8081a0c9d22679","abstract_canon_sha256":"a81041b9c319a97e1ef28449f8b3c9b7a2ed51570acd7a7008c3a85f51be11fc"},"schema_version":"1.0"},"canonical_sha256":"9b7e1c0ab695a5be125ddb2e93d4790996f48c5a5218b8b9979a176c07e04ae8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:26:47.927668Z","signature_b64":"6dOU/C5slH8uBYzhE+Zta7z1r2X6zQg9WXSSTUKxlPEtBMddDwsX5AxKGvN4y6tMUmbRlTFs34QpOOegi6rRAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9b7e1c0ab695a5be125ddb2e93d4790996f48c5a5218b8b9979a176c07e04ae8","last_reissued_at":"2026-07-05T01:26:47.927164Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:26:47.927164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1807.00969","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:26:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bZsVAZm7q3RkoENTv54OE36KZchIHQm4RzJS5Ui/rqnWUWs2cTo6EMW+tj6Av+Zhb/B/y9PEvvOuhXils556Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:16:02.654617Z"},"content_sha256":"a659e82f65d6fbc05cef8cf1ce1882d3c9eca1279e01764f94bb2d09fe68373a","schema_version":"1.0","event_id":"sha256:a659e82f65d6fbc05cef8cf1ce1882d3c9eca1279e01764f94bb2d09fe68373a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:TN7BYCVWSWS34ES53MXJHVDZBG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Confidential Inference via Ternary Model Partitioning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ankita Lamba, Dimitrios Pendarakis, Dong Su, Hani Jamjoom, Heqing Huang, Ian Molloy, Jialong Zhang, Zhongshu Gu","submitted_at":"2018-07-03T04:00:15Z","abstract_excerpt":"Today's cloud vendors are competing to provide various offerings to simplify and accelerate AI service deployment. However, cloud users always have concerns about the confidentiality of their runtime data, which are supposed to be processed on third-party's compute infrastructures. Information disclosure of user-supplied data may jeopardize users' privacy and breach increasingly stringent data protection regulations. In this paper, we systematically investigate the life cycles of inference inputs in deep learning image classification pipelines and understand how the information could be leaked"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.00969","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1807.00969/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:26:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Duf9Hx4V+0H+vkJWP++8UGx3IYuzC4g4kh1QHB3KmhvcoSCkv/hJuec5Q7wXOcFtWQy8pDDqZqxzZvQyQKX0Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:16:02.655549Z"},"content_sha256":"5f5e867ef4c5ae04e7a54ae661533aae5494bb997ac9b1617a9a697102dc079b","schema_version":"1.0","event_id":"sha256:5f5e867ef4c5ae04e7a54ae661533aae5494bb997ac9b1617a9a697102dc079b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TN7BYCVWSWS34ES53MXJHVDZBG/bundle.json","state_url":"https://pith.science/pith/TN7BYCVWSWS34ES53MXJHVDZBG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TN7BYCVWSWS34ES53MXJHVDZBG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T00:16:02Z","links":{"resolver":"https://pith.science/pith/TN7BYCVWSWS34ES53MXJHVDZBG","bundle":"https://pith.science/pith/TN7BYCVWSWS34ES53MXJHVDZBG/bundle.json","state":"https://pith.science/pith/TN7BYCVWSWS34ES53MXJHVDZBG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TN7BYCVWSWS34ES53MXJHVDZBG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:TN7BYCVWSWS34ES53MXJHVDZBG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a81041b9c319a97e1ef28449f8b3c9b7a2ed51570acd7a7008c3a85f51be11fc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-03T04:00:15Z","title_canon_sha256":"818fcfd440a9129a1bfa8da8388e39c92a1388db85bfed496b8081a0c9d22679"},"schema_version":"1.0","source":{"id":"1807.00969","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.00969","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"arxiv_version","alias_value":"1807.00969v3","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.00969","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"pith_short_12","alias_value":"TN7BYCVWSWS3","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"pith_short_16","alias_value":"TN7BYCVWSWS34ES5","created_at":"2026-07-05T01:26:47Z"},{"alias_kind":"pith_short_8","alias_value":"TN7BYCVW","created_at":"2026-07-05T01:26:47Z"}],"graph_snapshots":[{"event_id":"sha256:5f5e867ef4c5ae04e7a54ae661533aae5494bb997ac9b1617a9a697102dc079b","target":"graph","created_at":"2026-07-05T01:26:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1807.00969/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Today's cloud vendors are competing to provide various offerings to simplify and accelerate AI service deployment. However, cloud users always have concerns about the confidentiality of their runtime data, which are supposed to be processed on third-party's compute infrastructures. Information disclosure of user-supplied data may jeopardize users' privacy and breach increasingly stringent data protection regulations. In this paper, we systematically investigate the life cycles of inference inputs in deep learning image classification pipelines and understand how the information could be leaked","authors_text":"Ankita Lamba, Dimitrios Pendarakis, Dong Su, Hani Jamjoom, Heqing Huang, Ian Molloy, Jialong Zhang, Zhongshu Gu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-03T04:00:15Z","title":"Confidential Inference via Ternary Model Partitioning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.00969","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a659e82f65d6fbc05cef8cf1ce1882d3c9eca1279e01764f94bb2d09fe68373a","target":"record","created_at":"2026-07-05T01:26:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a81041b9c319a97e1ef28449f8b3c9b7a2ed51570acd7a7008c3a85f51be11fc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-03T04:00:15Z","title_canon_sha256":"818fcfd440a9129a1bfa8da8388e39c92a1388db85bfed496b8081a0c9d22679"},"schema_version":"1.0","source":{"id":"1807.00969","kind":"arxiv","version":3}},"canonical_sha256":"9b7e1c0ab695a5be125ddb2e93d4790996f48c5a5218b8b9979a176c07e04ae8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9b7e1c0ab695a5be125ddb2e93d4790996f48c5a5218b8b9979a176c07e04ae8","first_computed_at":"2026-07-05T01:26:47.927164Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:26:47.927164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6dOU/C5slH8uBYzhE+Zta7z1r2X6zQg9WXSSTUKxlPEtBMddDwsX5AxKGvN4y6tMUmbRlTFs34QpOOegi6rRAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:26:47.927668Z","signed_message":"canonical_sha256_bytes"},"source_id":"1807.00969","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a659e82f65d6fbc05cef8cf1ce1882d3c9eca1279e01764f94bb2d09fe68373a","sha256:5f5e867ef4c5ae04e7a54ae661533aae5494bb997ac9b1617a9a697102dc079b"],"state_sha256":"0d6e5db7a4c9e8b7d927cec5380aed00e91f90de37e25c7de040fd8fdf4e360d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VAVkvx2vRbiuS5SmNSmEMlMFngepUzev/zVOt+zRV8dxIVBM1elKRZZNTU1wtnzs/9nHhrjLzQRQmuwFYwKYBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T00:16:02.661075Z","bundle_sha256":"dc6ee86ef33168ba2be98aee37fa04907a318df0a9eed80c8cd5b1fb06a84ab8"}}