{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:TYYK3347FAHMBZCEON2OLJS3O3","short_pith_number":"pith:TYYK3347","canonical_record":{"source":{"id":"2607.21839","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T22:06:12Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"3845dd7b662255f5a59c49ec1501f80f062c8c1cda4c6d7802ec4942e5082a6b","abstract_canon_sha256":"263d3f7571866251aef4dc1a17ca64e37fb37b53c3f05e47f29db098672d0fdd"},"schema_version":"1.0"},"canonical_sha256":"9e30adef9f280ec0e4447374e5a65b76f0d3aec9465511d0824da5441af38470","source":{"kind":"arxiv","id":"2607.21839","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.21839","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2607.21839v1","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.21839","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"TYYK3347FAHM","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"TYYK3347FAHMBZCE","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"TYYK3347","created_at":"2026-07-27T00:20:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:TYYK3347FAHMBZCEON2OLJS3O3","target":"record","payload":{"canonical_record":{"source":{"id":"2607.21839","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T22:06:12Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"3845dd7b662255f5a59c49ec1501f80f062c8c1cda4c6d7802ec4942e5082a6b","abstract_canon_sha256":"263d3f7571866251aef4dc1a17ca64e37fb37b53c3f05e47f29db098672d0fdd"},"schema_version":"1.0"},"canonical_sha256":"9e30adef9f280ec0e4447374e5a65b76f0d3aec9465511d0824da5441af38470","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-27T00:20:23.569562Z","signature_b64":"f6sv36fG2wKCqqsVw/Arc1mja/uS5K/qaJD5QYOdNXkr/LoCZTJY3O/FhQ5iUORNHYClBb7oaV/qoAE2qfL0AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9e30adef9f280ec0e4447374e5a65b76f0d3aec9465511d0824da5441af38470","last_reissued_at":"2026-07-27T00:20:23.568692Z","signature_status":"signed_v1","first_computed_at":"2026-07-27T00:20:23.568692Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.21839","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-27T00:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P7d8pv4masPPnZwLRuikwcM8D9BJOwazdSNfG2do1QdTakJE1zcsuobAoqYuVKtpMP8VgHImQJYV6DfUMwwmDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:29:01.959322Z"},"content_sha256":"f5f3a64302b8a91af887a136e2fb1662dc029328cd7520ec506996c1971b86db","schema_version":"1.0","event_id":"sha256:f5f3a64302b8a91af887a136e2fb1662dc029328cd7520ec506996c1971b86db"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:TYYK3347FAHMBZCEON2OLJS3O3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Certified in Theory, Broken in Practice: Assumption Gaps in Cryptographic Model Certification","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Akira Takahashi, Antigoni Polychroniadou, Carter Luck, Elisaweta Masserova, Nicolas Papernot, Olive Franzese-McLaughlin","submitted_at":"2026-07-23T22:06:12Z","abstract_excerpt":"Privacy-preserving machine learning auditing protocols allow auditors to assess models for properties such as accuracy or fairness, without revealing their internals or training data. This makes them especially attractive for auditing models deployed in sensitive domains such as healthcare or finance. For these protocols to be meaningful in real-world audit settings, though, their guarantees must reflect how the model will behave once deployed, rather than merely certifying its behavior during an audit. Existing security definitions often miss this mark: most certify model behavior only on a f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.21839","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.21839/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-27T00:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4FyaQAze2xXU6yADeQz0G8HbLVw2n+Ni5XuSg+YpCLwSGZtreelYpnDxrbMAsSSo7UMbJ37JdFmrPb4E0s0xDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:29:01.959838Z"},"content_sha256":"6722849275f33726b895343dc37b9a4e0072bf264729d1e2922dca3c53467b27","schema_version":"1.0","event_id":"sha256:6722849275f33726b895343dc37b9a4e0072bf264729d1e2922dca3c53467b27"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TYYK3347FAHMBZCEON2OLJS3O3/bundle.json","state_url":"https://pith.science/pith/TYYK3347FAHMBZCEON2OLJS3O3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TYYK3347FAHMBZCEON2OLJS3O3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T19:29:01Z","links":{"resolver":"https://pith.science/pith/TYYK3347FAHMBZCEON2OLJS3O3","bundle":"https://pith.science/pith/TYYK3347FAHMBZCEON2OLJS3O3/bundle.json","state":"https://pith.science/pith/TYYK3347FAHMBZCEON2OLJS3O3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TYYK3347FAHMBZCEON2OLJS3O3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:TYYK3347FAHMBZCEON2OLJS3O3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"263d3f7571866251aef4dc1a17ca64e37fb37b53c3f05e47f29db098672d0fdd","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T22:06:12Z","title_canon_sha256":"3845dd7b662255f5a59c49ec1501f80f062c8c1cda4c6d7802ec4942e5082a6b"},"schema_version":"1.0","source":{"id":"2607.21839","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.21839","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2607.21839v1","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.21839","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"TYYK3347FAHM","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"TYYK3347FAHMBZCE","created_at":"2026-07-27T00:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"TYYK3347","created_at":"2026-07-27T00:20:23Z"}],"graph_snapshots":[{"event_id":"sha256:6722849275f33726b895343dc37b9a4e0072bf264729d1e2922dca3c53467b27","target":"graph","created_at":"2026-07-27T00:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.21839/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Privacy-preserving machine learning auditing protocols allow auditors to assess models for properties such as accuracy or fairness, without revealing their internals or training data. This makes them especially attractive for auditing models deployed in sensitive domains such as healthcare or finance. For these protocols to be meaningful in real-world audit settings, though, their guarantees must reflect how the model will behave once deployed, rather than merely certifying its behavior during an audit. Existing security definitions often miss this mark: most certify model behavior only on a f","authors_text":"Akira Takahashi, Antigoni Polychroniadou, Carter Luck, Elisaweta Masserova, Nicolas Papernot, Olive Franzese-McLaughlin","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T22:06:12Z","title":"Certified in Theory, Broken in Practice: Assumption Gaps in Cryptographic Model Certification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.21839","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f5f3a64302b8a91af887a136e2fb1662dc029328cd7520ec506996c1971b86db","target":"record","created_at":"2026-07-27T00:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"263d3f7571866251aef4dc1a17ca64e37fb37b53c3f05e47f29db098672d0fdd","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-23T22:06:12Z","title_canon_sha256":"3845dd7b662255f5a59c49ec1501f80f062c8c1cda4c6d7802ec4942e5082a6b"},"schema_version":"1.0","source":{"id":"2607.21839","kind":"arxiv","version":1}},"canonical_sha256":"9e30adef9f280ec0e4447374e5a65b76f0d3aec9465511d0824da5441af38470","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9e30adef9f280ec0e4447374e5a65b76f0d3aec9465511d0824da5441af38470","first_computed_at":"2026-07-27T00:20:23.568692Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-27T00:20:23.568692Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"f6sv36fG2wKCqqsVw/Arc1mja/uS5K/qaJD5QYOdNXkr/LoCZTJY3O/FhQ5iUORNHYClBb7oaV/qoAE2qfL0AQ==","signature_status":"signed_v1","signed_at":"2026-07-27T00:20:23.569562Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.21839","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f5f3a64302b8a91af887a136e2fb1662dc029328cd7520ec506996c1971b86db","sha256:6722849275f33726b895343dc37b9a4e0072bf264729d1e2922dca3c53467b27"],"state_sha256":"353d4bbc581fc92b8d0c19045626521063a270a9db5a04df6b07504d0c7c6719"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9afnEKPfAFVOHQSZXbBemx0zer8h9e8TMbTSnabFSOVfaqAb3qrx12C/cYL+yJ4qWOYV+m3+mubnbvD8koFBBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T19:29:01.964780Z","bundle_sha256":"9437aabe2b6c0b66de16a93959550ff3efcfe2cce2a1c1df4be4af1b25e959ac"}}