{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:U7TRZXSYODOSCT7WXCGFZISMH2","short_pith_number":"pith:U7TRZXSY","canonical_record":{"source":{"id":"2107.01614","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-04T12:59:16Z","cross_cats_sorted":[],"title_canon_sha256":"fb651ee8458305ad3016f057fd788e9ad755d98577f21727ac57b37f2d895283","abstract_canon_sha256":"be9a05ea650e6af63f87e4a473798e4c6fe4a06bd17a1539b5ef09e0e0a734fc"},"schema_version":"1.0"},"canonical_sha256":"a7e71cde5870dd214ff6b88c5ca24c3eb52da0b375bb742d74608b2103c1d90a","source":{"kind":"arxiv","id":"2107.01614","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.01614","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"arxiv_version","alias_value":"2107.01614v2","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.01614","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"pith_short_12","alias_value":"U7TRZXSYODOS","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"pith_short_16","alias_value":"U7TRZXSYODOSCT7W","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"pith_short_8","alias_value":"U7TRZXSY","created_at":"2026-07-05T04:55:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:U7TRZXSYODOSCT7WXCGFZISMH2","target":"record","payload":{"canonical_record":{"source":{"id":"2107.01614","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-04T12:59:16Z","cross_cats_sorted":[],"title_canon_sha256":"fb651ee8458305ad3016f057fd788e9ad755d98577f21727ac57b37f2d895283","abstract_canon_sha256":"be9a05ea650e6af63f87e4a473798e4c6fe4a06bd17a1539b5ef09e0e0a734fc"},"schema_version":"1.0"},"canonical_sha256":"a7e71cde5870dd214ff6b88c5ca24c3eb52da0b375bb742d74608b2103c1d90a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:55:48.956941Z","signature_b64":"DsKljsVwxTwCuDxjvRjcl2sJeKjGgVNxRdiBaY4KYA/c1HCsG1CyzKHmF5hMtNb1HLxKOeZ1RCa7+Aopbx9cDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a7e71cde5870dd214ff6b88c5ca24c3eb52da0b375bb742d74608b2103c1d90a","last_reissued_at":"2026-07-05T04:55:48.956528Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:55:48.956528Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.01614","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:55:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uhIb+1F+sJtQDS3EyPFFT0iw6cO+aKrNd7b4rkKjFcc8Rl5phFDaoq53wTpzwhFEIxT8JPoqnLj+Swc2MgbZCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T22:12:54.737419Z"},"content_sha256":"440c6873aa6a56b80005209b4d2a071f07bfb179f74d8d6f92115ee57f018229","schema_version":"1.0","event_id":"sha256:440c6873aa6a56b80005209b4d2a071f07bfb179f74d8d6f92115ee57f018229"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:U7TRZXSYODOSCT7WXCGFZISMH2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Survey: Leakage and Privacy at Inference Time","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Alexander Weir, Alison Q. O'Neil, Chaitanya Kaul, Charlie Mayor, Marija Jegorova, Roderick Murray-Smith, Sotirios A. Tsaftaris","submitted_at":"2021-07-04T12:59:16Z","abstract_excerpt":"Leakage of data from publicly available Machine Learning (ML) models is an area of growing significance as commercial and government applications of ML can draw on multiple sources of data, potentially including users' and clients' sensitive data. We provide a comprehensive survey of contemporary advances on several fronts, covering involuntary data leakage which is natural to ML models, potential malevolent leakage which is caused by privacy attacks, and currently available defence mechanisms. We focus on inference-time leakage, as the most likely scenario for publicly available models. We fi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.01614","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.01614/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:55:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BaSqWDPaQ2uOR8QtdPB/qifdGxQRaewFNocmoJ8/4JdSVtkIHhQtunUpFHvCQKUUG4Ymbllg3JxChwLSeRoABw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T22:12:54.737828Z"},"content_sha256":"59de1da5650b0649840a42391edda950f6fe4f6c8e175b41214af03f7fa996b1","schema_version":"1.0","event_id":"sha256:59de1da5650b0649840a42391edda950f6fe4f6c8e175b41214af03f7fa996b1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U7TRZXSYODOSCT7WXCGFZISMH2/bundle.json","state_url":"https://pith.science/pith/U7TRZXSYODOSCT7WXCGFZISMH2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U7TRZXSYODOSCT7WXCGFZISMH2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T22:12:54Z","links":{"resolver":"https://pith.science/pith/U7TRZXSYODOSCT7WXCGFZISMH2","bundle":"https://pith.science/pith/U7TRZXSYODOSCT7WXCGFZISMH2/bundle.json","state":"https://pith.science/pith/U7TRZXSYODOSCT7WXCGFZISMH2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U7TRZXSYODOSCT7WXCGFZISMH2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:U7TRZXSYODOSCT7WXCGFZISMH2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"be9a05ea650e6af63f87e4a473798e4c6fe4a06bd17a1539b5ef09e0e0a734fc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-04T12:59:16Z","title_canon_sha256":"fb651ee8458305ad3016f057fd788e9ad755d98577f21727ac57b37f2d895283"},"schema_version":"1.0","source":{"id":"2107.01614","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.01614","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"arxiv_version","alias_value":"2107.01614v2","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.01614","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"pith_short_12","alias_value":"U7TRZXSYODOS","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"pith_short_16","alias_value":"U7TRZXSYODOSCT7W","created_at":"2026-07-05T04:55:48Z"},{"alias_kind":"pith_short_8","alias_value":"U7TRZXSY","created_at":"2026-07-05T04:55:48Z"}],"graph_snapshots":[{"event_id":"sha256:59de1da5650b0649840a42391edda950f6fe4f6c8e175b41214af03f7fa996b1","target":"graph","created_at":"2026-07-05T04:55:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.01614/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Leakage of data from publicly available Machine Learning (ML) models is an area of growing significance as commercial and government applications of ML can draw on multiple sources of data, potentially including users' and clients' sensitive data. We provide a comprehensive survey of contemporary advances on several fronts, covering involuntary data leakage which is natural to ML models, potential malevolent leakage which is caused by privacy attacks, and currently available defence mechanisms. We focus on inference-time leakage, as the most likely scenario for publicly available models. We fi","authors_text":"Alexander Weir, Alison Q. O'Neil, Chaitanya Kaul, Charlie Mayor, Marija Jegorova, Roderick Murray-Smith, Sotirios A. Tsaftaris","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-04T12:59:16Z","title":"Survey: Leakage and Privacy at Inference Time"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.01614","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:440c6873aa6a56b80005209b4d2a071f07bfb179f74d8d6f92115ee57f018229","target":"record","created_at":"2026-07-05T04:55:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"be9a05ea650e6af63f87e4a473798e4c6fe4a06bd17a1539b5ef09e0e0a734fc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-04T12:59:16Z","title_canon_sha256":"fb651ee8458305ad3016f057fd788e9ad755d98577f21727ac57b37f2d895283"},"schema_version":"1.0","source":{"id":"2107.01614","kind":"arxiv","version":2}},"canonical_sha256":"a7e71cde5870dd214ff6b88c5ca24c3eb52da0b375bb742d74608b2103c1d90a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a7e71cde5870dd214ff6b88c5ca24c3eb52da0b375bb742d74608b2103c1d90a","first_computed_at":"2026-07-05T04:55:48.956528Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:55:48.956528Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DsKljsVwxTwCuDxjvRjcl2sJeKjGgVNxRdiBaY4KYA/c1HCsG1CyzKHmF5hMtNb1HLxKOeZ1RCa7+Aopbx9cDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:55:48.956941Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.01614","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:440c6873aa6a56b80005209b4d2a071f07bfb179f74d8d6f92115ee57f018229","sha256:59de1da5650b0649840a42391edda950f6fe4f6c8e175b41214af03f7fa996b1"],"state_sha256":"ea70c14bb47cf2a4cb4e66c9b3e86ceb9df2ceca71802d54f04209d45fafdaa9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"q+N8oJ1465/xgshmvABMSL2BD2gLN7uVD0O+3+IQfoZUjI/3vCM7bAOvqiTFty+0VPI7oK3JUDDrr+k+u65aBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T22:12:54.739956Z","bundle_sha256":"7c049fdb25eec01b913fec66f3c11412fc9100a8883d9ddf677f9ff5fcd53a10"}}