{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:UMVZRJHCP7SI7WTNUYC4WX6HTT","short_pith_number":"pith:UMVZRJHC","canonical_record":{"source":{"id":"2607.07089","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T07:23:09Z","cross_cats_sorted":["cs.DB"],"title_canon_sha256":"3bb995377a069ec6dd86c9f13c91e4fa7c2d365f2049726774a8220b0af42303","abstract_canon_sha256":"b4c2c9e7ac7dddfae4c4507dfcdf3a5f34c9233881b31dcf27571e728642886a"},"schema_version":"1.0"},"canonical_sha256":"a32b98a4e27fe48fda6da605cb5fc79cdcbf54997429f1126c5d51b595573b8d","source":{"kind":"arxiv","id":"2607.07089","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07089","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07089v1","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07089","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_12","alias_value":"UMVZRJHCP7SI","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_16","alias_value":"UMVZRJHCP7SI7WTN","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_8","alias_value":"UMVZRJHC","created_at":"2026-07-09T01:20:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:UMVZRJHCP7SI7WTNUYC4WX6HTT","target":"record","payload":{"canonical_record":{"source":{"id":"2607.07089","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T07:23:09Z","cross_cats_sorted":["cs.DB"],"title_canon_sha256":"3bb995377a069ec6dd86c9f13c91e4fa7c2d365f2049726774a8220b0af42303","abstract_canon_sha256":"b4c2c9e7ac7dddfae4c4507dfcdf3a5f34c9233881b31dcf27571e728642886a"},"schema_version":"1.0"},"canonical_sha256":"a32b98a4e27fe48fda6da605cb5fc79cdcbf54997429f1126c5d51b595573b8d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-09T01:20:14.145092Z","signature_b64":"bIUag6R0ToclZNVUc/ppNkpugTB4rgVXEoEaFKXMrmDEygkeCZut/CAUO4E6nr4pOxMx8Hs+PxQFi7RI40hGDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a32b98a4e27fe48fda6da605cb5fc79cdcbf54997429f1126c5d51b595573b8d","last_reissued_at":"2026-07-09T01:20:14.144687Z","signature_status":"signed_v1","first_computed_at":"2026-07-09T01:20:14.144687Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.07089","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Hj7TM2avwIALsSZCmEH0Gt0b0T6AaFAMV9JuQCKismNWefMoud7oKLiBOljcb2TEpI2UjPt/HCnaGtq0NL04Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T00:46:25.919872Z"},"content_sha256":"a585ce6c967b9f9128a6daf525abd055d03468b64e080048b25179fad388a65c","schema_version":"1.0","event_id":"sha256:a585ce6c967b9f9128a6daf525abd055d03468b64e080048b25179fad388a65c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:UMVZRJHCP7SI7WTNUYC4WX6HTT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Structural Adversarial Attacks on Relational Deep Learning under Integrity Constraints","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.DB"],"primary_cat":"cs.LG","authors_text":"Alan Gany, Bogdan Cautis, Silviu Maniu","submitted_at":"2026-07-08T07:23:09Z","abstract_excerpt":"Relational Deep Learning (RDL) has become a standard methodology for machine learning on relational databases: the database is encoded as a heterogeneous temporal graph in which tuples become nodes and primary-key to foreign-key (PK-FK) dependencies become typed edges, over which a graph neural network is trained for downstream prediction. We study the adversarial robustness of this pipeline. We consider a white-box attacker who knows how the graph is built and the model is trained, reasons about perturbations on the graph, but can only act on the upstream database, by rewiring foreign-key ref"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07089","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07089/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X2/rNVICvLEbY/2JFMxYQ3iliM4NPhWJkwdedY6OmVhYDF1QEVyv+KisSqJb/K7Ad4IEbo86JKb08cFVo626Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T00:46:25.920654Z"},"content_sha256":"49322a8afc3e936caf1207571781f584cdb4e7f20606d8e25757577848459cb6","schema_version":"1.0","event_id":"sha256:49322a8afc3e936caf1207571781f584cdb4e7f20606d8e25757577848459cb6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UMVZRJHCP7SI7WTNUYC4WX6HTT/bundle.json","state_url":"https://pith.science/pith/UMVZRJHCP7SI7WTNUYC4WX6HTT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UMVZRJHCP7SI7WTNUYC4WX6HTT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T00:46:25Z","links":{"resolver":"https://pith.science/pith/UMVZRJHCP7SI7WTNUYC4WX6HTT","bundle":"https://pith.science/pith/UMVZRJHCP7SI7WTNUYC4WX6HTT/bundle.json","state":"https://pith.science/pith/UMVZRJHCP7SI7WTNUYC4WX6HTT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UMVZRJHCP7SI7WTNUYC4WX6HTT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:UMVZRJHCP7SI7WTNUYC4WX6HTT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b4c2c9e7ac7dddfae4c4507dfcdf3a5f34c9233881b31dcf27571e728642886a","cross_cats_sorted":["cs.DB"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T07:23:09Z","title_canon_sha256":"3bb995377a069ec6dd86c9f13c91e4fa7c2d365f2049726774a8220b0af42303"},"schema_version":"1.0","source":{"id":"2607.07089","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07089","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07089v1","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07089","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_12","alias_value":"UMVZRJHCP7SI","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_16","alias_value":"UMVZRJHCP7SI7WTN","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_8","alias_value":"UMVZRJHC","created_at":"2026-07-09T01:20:14Z"}],"graph_snapshots":[{"event_id":"sha256:49322a8afc3e936caf1207571781f584cdb4e7f20606d8e25757577848459cb6","target":"graph","created_at":"2026-07-09T01:20:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.07089/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Relational Deep Learning (RDL) has become a standard methodology for machine learning on relational databases: the database is encoded as a heterogeneous temporal graph in which tuples become nodes and primary-key to foreign-key (PK-FK) dependencies become typed edges, over which a graph neural network is trained for downstream prediction. We study the adversarial robustness of this pipeline. We consider a white-box attacker who knows how the graph is built and the model is trained, reasons about perturbations on the graph, but can only act on the upstream database, by rewiring foreign-key ref","authors_text":"Alan Gany, Bogdan Cautis, Silviu Maniu","cross_cats":["cs.DB"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T07:23:09Z","title":"Structural Adversarial Attacks on Relational Deep Learning under Integrity Constraints"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07089","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a585ce6c967b9f9128a6daf525abd055d03468b64e080048b25179fad388a65c","target":"record","created_at":"2026-07-09T01:20:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b4c2c9e7ac7dddfae4c4507dfcdf3a5f34c9233881b31dcf27571e728642886a","cross_cats_sorted":["cs.DB"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T07:23:09Z","title_canon_sha256":"3bb995377a069ec6dd86c9f13c91e4fa7c2d365f2049726774a8220b0af42303"},"schema_version":"1.0","source":{"id":"2607.07089","kind":"arxiv","version":1}},"canonical_sha256":"a32b98a4e27fe48fda6da605cb5fc79cdcbf54997429f1126c5d51b595573b8d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a32b98a4e27fe48fda6da605cb5fc79cdcbf54997429f1126c5d51b595573b8d","first_computed_at":"2026-07-09T01:20:14.144687Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-09T01:20:14.144687Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bIUag6R0ToclZNVUc/ppNkpugTB4rgVXEoEaFKXMrmDEygkeCZut/CAUO4E6nr4pOxMx8Hs+PxQFi7RI40hGDg==","signature_status":"signed_v1","signed_at":"2026-07-09T01:20:14.145092Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.07089","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a585ce6c967b9f9128a6daf525abd055d03468b64e080048b25179fad388a65c","sha256:49322a8afc3e936caf1207571781f584cdb4e7f20606d8e25757577848459cb6"],"state_sha256":"f9cce00574e82f5e4f0ab42c68b1fde8bec7c650f27dad5a63624471b1cf3ecc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gKTZZ81XP+NVDOvcfvVtSs54gzLey5Hg7t3tIH2c5J2TzfDr70RiXFWaNLILEfq8ZYYdjakVkr2ZzSiFFAipDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T00:46:25.926586Z","bundle_sha256":"c59b3d1b7fa4ff2ee4092a8093c39ddbdd6562e71d20bc08909b4e9e67f7a816"}}