{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:UXX6TAA357XWYCGX36T25UMVMK","short_pith_number":"pith:UXX6TAA3","canonical_record":{"source":{"id":"2101.04535","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-01-11T18:47:11Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"187c54a1e123db57a750fb12f773b6ff626b13b546070da2a7fe792c29c37a78","abstract_canon_sha256":"61a58c02ccc5250b8278da91ee636b0702f9f1b0e286f71a47b4cde98fe6575d"},"schema_version":"1.0"},"canonical_sha256":"a5efe9801befef6c08d7dfa7aed19562ba691d379cdda4c91d9b0eebfa5f6b43","source":{"kind":"arxiv","id":"2101.04535","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.04535","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"arxiv_version","alias_value":"2101.04535v1","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.04535","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"pith_short_12","alias_value":"UXX6TAA357XW","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"pith_short_16","alias_value":"UXX6TAA357XWYCGX","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"pith_short_8","alias_value":"UXX6TAA3","created_at":"2026-07-05T02:06:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:UXX6TAA357XWYCGX36T25UMVMK","target":"record","payload":{"canonical_record":{"source":{"id":"2101.04535","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-01-11T18:47:11Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"187c54a1e123db57a750fb12f773b6ff626b13b546070da2a7fe792c29c37a78","abstract_canon_sha256":"61a58c02ccc5250b8278da91ee636b0702f9f1b0e286f71a47b4cde98fe6575d"},"schema_version":"1.0"},"canonical_sha256":"a5efe9801befef6c08d7dfa7aed19562ba691d379cdda4c91d9b0eebfa5f6b43","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:06:26.265208Z","signature_b64":"U4sha+tGLxzjOxSaFz6YrHWJytpLYE8Ki37ggbauorihFZ+Cu7etk2jk5vGIMN5ZHOB1bMgKqmbj0q4rz23uBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a5efe9801befef6c08d7dfa7aed19562ba691d379cdda4c91d9b0eebfa5f6b43","last_reissued_at":"2026-07-05T02:06:26.264801Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:06:26.264801Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2101.04535","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:06:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"99O6fs+Ejv3ipT6bC5iU6g8zHAzDf+IueGC/KW3tGbCcfXvAuVgPS6ew3R72s4nx8Sk6dDcjBNdxZfoJdaHdDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T13:59:42.114021Z"},"content_sha256":"59b30ecdd210ca114d6e353690286b5ecd0f6372d015f48e66405e10a68990c6","schema_version":"1.0","event_id":"sha256:59b30ecdd210ca114d6e353690286b5ecd0f6372d015f48e66405e10a68990c6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:UXX6TAA357XWYCGX36T25UMVMK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Abhradeep Thakurta, Milad Nasr, Nicholas Carlini, Nicolas Papernot, Shuang Song","submitted_at":"2021-01-11T18:47:11Z","abstract_excerpt":"Differentially private (DP) machine learning allows us to train models on private data while limiting data leakage. DP formalizes this data leakage through a cryptographic game, where an adversary must predict if a model was trained on a dataset D, or a dataset D' that differs in just one example.If observing the training algorithm does not meaningfully increase the adversary's odds of successfully guessing which dataset the model was trained on, then the algorithm is said to be differentially private. Hence, the purpose of privacy analysis is to upper bound the probability that any adversary "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.04535","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2101.04535/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:06:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8pl8Rk6pizawp8Wj6nhBzUxsPlroxrtL6XV/um68EusqSPhvsA/PnHeEBmUWIINHs74s2K/UKYInCHjAMWBsDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T13:59:42.114888Z"},"content_sha256":"f3a5c17b7e275ab8312cf797e6e4ad6e8616b105fdd9acefe753146ae8ca55eb","schema_version":"1.0","event_id":"sha256:f3a5c17b7e275ab8312cf797e6e4ad6e8616b105fdd9acefe753146ae8ca55eb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UXX6TAA357XWYCGX36T25UMVMK/bundle.json","state_url":"https://pith.science/pith/UXX6TAA357XWYCGX36T25UMVMK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UXX6TAA357XWYCGX36T25UMVMK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T13:59:42Z","links":{"resolver":"https://pith.science/pith/UXX6TAA357XWYCGX36T25UMVMK","bundle":"https://pith.science/pith/UXX6TAA357XWYCGX36T25UMVMK/bundle.json","state":"https://pith.science/pith/UXX6TAA357XWYCGX36T25UMVMK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UXX6TAA357XWYCGX36T25UMVMK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:UXX6TAA357XWYCGX36T25UMVMK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"61a58c02ccc5250b8278da91ee636b0702f9f1b0e286f71a47b4cde98fe6575d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-01-11T18:47:11Z","title_canon_sha256":"187c54a1e123db57a750fb12f773b6ff626b13b546070da2a7fe792c29c37a78"},"schema_version":"1.0","source":{"id":"2101.04535","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.04535","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"arxiv_version","alias_value":"2101.04535v1","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.04535","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"pith_short_12","alias_value":"UXX6TAA357XW","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"pith_short_16","alias_value":"UXX6TAA357XWYCGX","created_at":"2026-07-05T02:06:26Z"},{"alias_kind":"pith_short_8","alias_value":"UXX6TAA3","created_at":"2026-07-05T02:06:26Z"}],"graph_snapshots":[{"event_id":"sha256:f3a5c17b7e275ab8312cf797e6e4ad6e8616b105fdd9acefe753146ae8ca55eb","target":"graph","created_at":"2026-07-05T02:06:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2101.04535/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Differentially private (DP) machine learning allows us to train models on private data while limiting data leakage. DP formalizes this data leakage through a cryptographic game, where an adversary must predict if a model was trained on a dataset D, or a dataset D' that differs in just one example.If observing the training algorithm does not meaningfully increase the adversary's odds of successfully guessing which dataset the model was trained on, then the algorithm is said to be differentially private. Hence, the purpose of privacy analysis is to upper bound the probability that any adversary ","authors_text":"Abhradeep Thakurta, Milad Nasr, Nicholas Carlini, Nicolas Papernot, Shuang Song","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-01-11T18:47:11Z","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.04535","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:59b30ecdd210ca114d6e353690286b5ecd0f6372d015f48e66405e10a68990c6","target":"record","created_at":"2026-07-05T02:06:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"61a58c02ccc5250b8278da91ee636b0702f9f1b0e286f71a47b4cde98fe6575d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-01-11T18:47:11Z","title_canon_sha256":"187c54a1e123db57a750fb12f773b6ff626b13b546070da2a7fe792c29c37a78"},"schema_version":"1.0","source":{"id":"2101.04535","kind":"arxiv","version":1}},"canonical_sha256":"a5efe9801befef6c08d7dfa7aed19562ba691d379cdda4c91d9b0eebfa5f6b43","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a5efe9801befef6c08d7dfa7aed19562ba691d379cdda4c91d9b0eebfa5f6b43","first_computed_at":"2026-07-05T02:06:26.264801Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:06:26.264801Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"U4sha+tGLxzjOxSaFz6YrHWJytpLYE8Ki37ggbauorihFZ+Cu7etk2jk5vGIMN5ZHOB1bMgKqmbj0q4rz23uBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:06:26.265208Z","signed_message":"canonical_sha256_bytes"},"source_id":"2101.04535","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:59b30ecdd210ca114d6e353690286b5ecd0f6372d015f48e66405e10a68990c6","sha256:f3a5c17b7e275ab8312cf797e6e4ad6e8616b105fdd9acefe753146ae8ca55eb"],"state_sha256":"3c10d24e9d252d1888cade4aef94dacd1418ebcff1214166930ee7f4bed0cb59"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CcIYCP+e84b1oBIA9hwJBfrDwwtoQ2RFzEtbNvcgtJDM1lSfyE/Qbz28BbsWfSUKD7SUP6rZmON1lmoZOGQoAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T13:59:42.120076Z","bundle_sha256":"a6e89c714f5cfd21f6c4d619c935610c48789fa4bfca4b22ca279fd3970d1934"}}