{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:UUMRN73ZDQJXHVBHWTKHVXRJBG","short_pith_number":"pith:UUMRN73Z","canonical_record":{"source":{"id":"2009.05537","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T17:19:56Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"1c6d79ec9d4d219c8d08e1740ff5d55949f950b95f5384befd383a47c06ccfff","abstract_canon_sha256":"701ef5ecbda583134041e7060cf2889f4c9e3d1f54f5d2e61311cbf5c4293d93"},"schema_version":"1.0"},"canonical_sha256":"a51916ff791c1373d427b4d47ade290981544e41c5c047399743bc56d4e6232d","source":{"kind":"arxiv","id":"2009.05537","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.05537","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"arxiv_version","alias_value":"2009.05537v2","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.05537","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"pith_short_12","alias_value":"UUMRN73ZDQJX","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"pith_short_16","alias_value":"UUMRN73ZDQJXHVBH","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"pith_short_8","alias_value":"UUMRN73Z","created_at":"2026-07-05T02:42:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:UUMRN73ZDQJXHVBHWTKHVXRJBG","target":"record","payload":{"canonical_record":{"source":{"id":"2009.05537","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T17:19:56Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"1c6d79ec9d4d219c8d08e1740ff5d55949f950b95f5384befd383a47c06ccfff","abstract_canon_sha256":"701ef5ecbda583134041e7060cf2889f4c9e3d1f54f5d2e61311cbf5c4293d93"},"schema_version":"1.0"},"canonical_sha256":"a51916ff791c1373d427b4d47ade290981544e41c5c047399743bc56d4e6232d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:42:02.175181Z","signature_b64":"NbU0XZeHCcGwmqzJhjw8/5jpWHCQ1cdzQHoie8PzW774V9FkDQHxsKSO99t0XFrWjmcl6mYZLZo7hpy7rQ+gCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a51916ff791c1373d427b4d47ade290981544e41c5c047399743bc56d4e6232d","last_reissued_at":"2026-07-05T02:42:02.174823Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:42:02.174823Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.05537","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:42:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2RWasr9Mhbj9CorCqnSxUzlCBxJnxYiYGjFtDnHnOF8rtinIqbGL/5Z0afXASl/lwi1ZtiyS29kaKl2Vk1KaBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:17:54.713449Z"},"content_sha256":"d51bf492e0b75781dccf90bc9eadd63ec4098e5c913ed4cf88a2aa37dcfe96c4","schema_version":"1.0","event_id":"sha256:d51bf492e0b75781dccf90bc9eadd63ec4098e5c913ed4cf88a2aa37dcfe96c4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:UUMRN73ZDQJXHVBHWTKHVXRJBG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Federated Model Distillation with Noise-Free Differential Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Lichao Sun, Lingjuan Lyu","submitted_at":"2020-09-11T17:19:56Z","abstract_excerpt":"Conventional federated learning directly averages model weights, which is only possible for collaboration between models with homogeneous architectures. Sharing prediction instead of weight removes this obstacle and eliminates the risk of white-box inference attacks in conventional federated learning. However, the predictions from local models are sensitive and would leak training data privacy to the public. To address this issue, one naive approach is adding the differentially private random noise to the predictions, which however brings a substantial trade-off between privacy budget and mode"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.05537","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.05537/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:42:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uXDDbDi3PV49yl79ecVDjeZkc08s8gZcPi+IbLt61HQ4e+V3fTN/TMk067tTsV02yEfOYsLoXQzXd+0Wda8tCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:17:54.715572Z"},"content_sha256":"3d56cb8ba4fedff6f9e7acd51056ff4ddad53165217276cbf8d5fc71f33a2c96","schema_version":"1.0","event_id":"sha256:3d56cb8ba4fedff6f9e7acd51056ff4ddad53165217276cbf8d5fc71f33a2c96"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UUMRN73ZDQJXHVBHWTKHVXRJBG/bundle.json","state_url":"https://pith.science/pith/UUMRN73ZDQJXHVBHWTKHVXRJBG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UUMRN73ZDQJXHVBHWTKHVXRJBG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T02:17:54Z","links":{"resolver":"https://pith.science/pith/UUMRN73ZDQJXHVBHWTKHVXRJBG","bundle":"https://pith.science/pith/UUMRN73ZDQJXHVBHWTKHVXRJBG/bundle.json","state":"https://pith.science/pith/UUMRN73ZDQJXHVBHWTKHVXRJBG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UUMRN73ZDQJXHVBHWTKHVXRJBG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:UUMRN73ZDQJXHVBHWTKHVXRJBG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"701ef5ecbda583134041e7060cf2889f4c9e3d1f54f5d2e61311cbf5c4293d93","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T17:19:56Z","title_canon_sha256":"1c6d79ec9d4d219c8d08e1740ff5d55949f950b95f5384befd383a47c06ccfff"},"schema_version":"1.0","source":{"id":"2009.05537","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.05537","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"arxiv_version","alias_value":"2009.05537v2","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.05537","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"pith_short_12","alias_value":"UUMRN73ZDQJX","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"pith_short_16","alias_value":"UUMRN73ZDQJXHVBH","created_at":"2026-07-05T02:42:02Z"},{"alias_kind":"pith_short_8","alias_value":"UUMRN73Z","created_at":"2026-07-05T02:42:02Z"}],"graph_snapshots":[{"event_id":"sha256:3d56cb8ba4fedff6f9e7acd51056ff4ddad53165217276cbf8d5fc71f33a2c96","target":"graph","created_at":"2026-07-05T02:42:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.05537/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Conventional federated learning directly averages model weights, which is only possible for collaboration between models with homogeneous architectures. Sharing prediction instead of weight removes this obstacle and eliminates the risk of white-box inference attacks in conventional federated learning. However, the predictions from local models are sensitive and would leak training data privacy to the public. To address this issue, one naive approach is adding the differentially private random noise to the predictions, which however brings a substantial trade-off between privacy budget and mode","authors_text":"Lichao Sun, Lingjuan Lyu","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T17:19:56Z","title":"Federated Model Distillation with Noise-Free Differential Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.05537","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d51bf492e0b75781dccf90bc9eadd63ec4098e5c913ed4cf88a2aa37dcfe96c4","target":"record","created_at":"2026-07-05T02:42:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"701ef5ecbda583134041e7060cf2889f4c9e3d1f54f5d2e61311cbf5c4293d93","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-11T17:19:56Z","title_canon_sha256":"1c6d79ec9d4d219c8d08e1740ff5d55949f950b95f5384befd383a47c06ccfff"},"schema_version":"1.0","source":{"id":"2009.05537","kind":"arxiv","version":2}},"canonical_sha256":"a51916ff791c1373d427b4d47ade290981544e41c5c047399743bc56d4e6232d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a51916ff791c1373d427b4d47ade290981544e41c5c047399743bc56d4e6232d","first_computed_at":"2026-07-05T02:42:02.174823Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:42:02.174823Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NbU0XZeHCcGwmqzJhjw8/5jpWHCQ1cdzQHoie8PzW774V9FkDQHxsKSO99t0XFrWjmcl6mYZLZo7hpy7rQ+gCw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:42:02.175181Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.05537","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d51bf492e0b75781dccf90bc9eadd63ec4098e5c913ed4cf88a2aa37dcfe96c4","sha256:3d56cb8ba4fedff6f9e7acd51056ff4ddad53165217276cbf8d5fc71f33a2c96"],"state_sha256":"ca6cbd4cfa6c17d67c34bb4f6a64a2b20cf92fa5aa057f94dfeebb5d050f7fff"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9eH73lE8rYOoWNajwTqj55496efiMFlFJ2PJUtyq0jLqFLRmEFHPw0TstnE20++bK0CUwJ8hYLKgXQdzgMTyBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T02:17:54.722091Z","bundle_sha256":"3cff5f212ade97af6596832e3f6c9c11a2fc1e725669abcdb7c510bf7fd2f95d"}}