{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UBIFEHEK3SI5VQYBOUXGF2TZOA","short_pith_number":"pith:UBIFEHEK","canonical_record":{"source":{"id":"2509.11974","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-15T14:23:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"71fe7e051d1e783a171ceb3b99c70987763ab778a897fc03f640b2a746a2c601","abstract_canon_sha256":"cf4c22c9e9ca19f5bff9b9a5ba66fa24e019ff7d32f484c8d3695cde290b42a3"},"schema_version":"1.0"},"canonical_sha256":"a050521c8adc91dac301752e62ea79700f899a3427ee224cd93e36bf0cf980a3","source":{"kind":"arxiv","id":"2509.11974","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.11974","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"arxiv_version","alias_value":"2509.11974v2","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.11974","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"pith_short_12","alias_value":"UBIFEHEK3SI5","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"pith_short_16","alias_value":"UBIFEHEK3SI5VQYB","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"pith_short_8","alias_value":"UBIFEHEK","created_at":"2026-07-20T01:18:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UBIFEHEK3SI5VQYBOUXGF2TZOA","target":"record","payload":{"canonical_record":{"source":{"id":"2509.11974","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-15T14:23:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"71fe7e051d1e783a171ceb3b99c70987763ab778a897fc03f640b2a746a2c601","abstract_canon_sha256":"cf4c22c9e9ca19f5bff9b9a5ba66fa24e019ff7d32f484c8d3695cde290b42a3"},"schema_version":"1.0"},"canonical_sha256":"a050521c8adc91dac301752e62ea79700f899a3427ee224cd93e36bf0cf980a3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-20T01:18:20.137284Z","signature_b64":"R7kwVwLgfgNyyLcIirVSVGJZ6GLsQb8XPLYILRyegQ5jWdseSCMhf2CijM9NwUUHIJchXF+w9n2k6xpysoPLCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a050521c8adc91dac301752e62ea79700f899a3427ee224cd93e36bf0cf980a3","last_reissued_at":"2026-07-20T01:18:20.136324Z","signature_status":"signed_v1","first_computed_at":"2026-07-20T01:18:20.136324Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.11974","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T01:18:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vb2zZg4okKjPLoUhC8/HETFEYFm4pue4BsZfsFUNhrtof1o4DoxyQJAhaxlTH7ZKMHJmjmfVEBv2396nrWUpBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:43:30.077271Z"},"content_sha256":"35737162c684dd5dc2995a98c91b5639cb4bdbba264e67f522fd93a0d15f4a28","schema_version":"1.0","event_id":"sha256:35737162c684dd5dc2995a98c91b5639cb4bdbba264e67f522fd93a0d15f4a28"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UBIFEHEK3SI5VQYBOUXGF2TZOA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Poison to Detect: Detection of Targeted Overfitting in Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Gabriele Lenzini, Maciej Krzysztof Zuziak, Soumia Zohra El Mestari","submitted_at":"2025-09-15T14:23:39Z","abstract_excerpt":"Federated Learning (FL) enables collaborative model training among clients without centralising data, making it a widely adopted privacy-enhancing technology (PET). Despite its privacy benefits, FL remains vulnerable to orchestrator-driven privacy attacks. In this paper, we study an underexplored threat in which a dishonest orchestrator intentionally manipulates the aggregation process to induce targeted overfitting in local models of specific clients. Although prior work focuses on reducing information leakage during training, we emphasise early client-side detection of targeted overfitting, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.11974","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.11974/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T01:18:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PfaQE4QGoS0IZdhVr67zc3ITEfsxc9f2uLJ/HCgFgOitKY7VMGOWG5J0zD8Qg+35P2O+lzSJ9jq5aht1EYtSDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:43:30.077770Z"},"content_sha256":"0377eac30102563875e87b121001ed64d8b2d482c4e250a00056e894ebddecff","schema_version":"1.0","event_id":"sha256:0377eac30102563875e87b121001ed64d8b2d482c4e250a00056e894ebddecff"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UBIFEHEK3SI5VQYBOUXGF2TZOA/bundle.json","state_url":"https://pith.science/pith/UBIFEHEK3SI5VQYBOUXGF2TZOA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UBIFEHEK3SI5VQYBOUXGF2TZOA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T19:43:30Z","links":{"resolver":"https://pith.science/pith/UBIFEHEK3SI5VQYBOUXGF2TZOA","bundle":"https://pith.science/pith/UBIFEHEK3SI5VQYBOUXGF2TZOA/bundle.json","state":"https://pith.science/pith/UBIFEHEK3SI5VQYBOUXGF2TZOA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UBIFEHEK3SI5VQYBOUXGF2TZOA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UBIFEHEK3SI5VQYBOUXGF2TZOA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cf4c22c9e9ca19f5bff9b9a5ba66fa24e019ff7d32f484c8d3695cde290b42a3","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-15T14:23:39Z","title_canon_sha256":"71fe7e051d1e783a171ceb3b99c70987763ab778a897fc03f640b2a746a2c601"},"schema_version":"1.0","source":{"id":"2509.11974","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.11974","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"arxiv_version","alias_value":"2509.11974v2","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.11974","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"pith_short_12","alias_value":"UBIFEHEK3SI5","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"pith_short_16","alias_value":"UBIFEHEK3SI5VQYB","created_at":"2026-07-20T01:18:20Z"},{"alias_kind":"pith_short_8","alias_value":"UBIFEHEK","created_at":"2026-07-20T01:18:20Z"}],"graph_snapshots":[{"event_id":"sha256:0377eac30102563875e87b121001ed64d8b2d482c4e250a00056e894ebddecff","target":"graph","created_at":"2026-07-20T01:18:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.11974/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) enables collaborative model training among clients without centralising data, making it a widely adopted privacy-enhancing technology (PET). Despite its privacy benefits, FL remains vulnerable to orchestrator-driven privacy attacks. In this paper, we study an underexplored threat in which a dishonest orchestrator intentionally manipulates the aggregation process to induce targeted overfitting in local models of specific clients. Although prior work focuses on reducing information leakage during training, we emphasise early client-side detection of targeted overfitting, ","authors_text":"Gabriele Lenzini, Maciej Krzysztof Zuziak, Soumia Zohra El Mestari","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-15T14:23:39Z","title":"Poison to Detect: Detection of Targeted Overfitting in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.11974","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:35737162c684dd5dc2995a98c91b5639cb4bdbba264e67f522fd93a0d15f4a28","target":"record","created_at":"2026-07-20T01:18:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cf4c22c9e9ca19f5bff9b9a5ba66fa24e019ff7d32f484c8d3695cde290b42a3","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-15T14:23:39Z","title_canon_sha256":"71fe7e051d1e783a171ceb3b99c70987763ab778a897fc03f640b2a746a2c601"},"schema_version":"1.0","source":{"id":"2509.11974","kind":"arxiv","version":2}},"canonical_sha256":"a050521c8adc91dac301752e62ea79700f899a3427ee224cd93e36bf0cf980a3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a050521c8adc91dac301752e62ea79700f899a3427ee224cd93e36bf0cf980a3","first_computed_at":"2026-07-20T01:18:20.136324Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-20T01:18:20.136324Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"R7kwVwLgfgNyyLcIirVSVGJZ6GLsQb8XPLYILRyegQ5jWdseSCMhf2CijM9NwUUHIJchXF+w9n2k6xpysoPLCA==","signature_status":"signed_v1","signed_at":"2026-07-20T01:18:20.137284Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.11974","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:35737162c684dd5dc2995a98c91b5639cb4bdbba264e67f522fd93a0d15f4a28","sha256:0377eac30102563875e87b121001ed64d8b2d482c4e250a00056e894ebddecff"],"state_sha256":"01fe3adf238f98e18febb0f0caee72a94f992856dd1bdcebb1e261a92c0d02d6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Rn27Pj7fjkTTIN/47Cb9wCr7viS17UqM+bIW1Aiol2pEDf3pqcu0GOPyjw2SoydUcLtKxAuuZ50J0sdL7S66BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T19:43:30.081104Z","bundle_sha256":"7c608c58f30da0f1963eebff687c4b9e5870d2e1e20285bc9bb283dcb0d27876"}}