{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:VE5WJOR7AIJCH2SBQMINJCMA3K","short_pith_number":"pith:VE5WJOR7","canonical_record":{"source":{"id":"2505.19019","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-25T07:53:03Z","cross_cats_sorted":[],"title_canon_sha256":"1b05eda16d762226746bf849933a88d5f87d0bcb0451830356b28abc2b09dbef","abstract_canon_sha256":"6d965e98cca2b17dde1d7ce68332baa118491d82458af92c15f26f1568e46e2d"},"schema_version":"1.0"},"canonical_sha256":"a93b64ba3f021223ea418310d48980da861438175672d121cde5f5195b463b83","source":{"kind":"arxiv","id":"2505.19019","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19019","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19019v1","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19019","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"pith_short_12","alias_value":"VE5WJOR7AIJC","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"pith_short_16","alias_value":"VE5WJOR7AIJCH2SB","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"pith_short_8","alias_value":"VE5WJOR7","created_at":"2026-07-05T11:09:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:VE5WJOR7AIJCH2SBQMINJCMA3K","target":"record","payload":{"canonical_record":{"source":{"id":"2505.19019","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-25T07:53:03Z","cross_cats_sorted":[],"title_canon_sha256":"1b05eda16d762226746bf849933a88d5f87d0bcb0451830356b28abc2b09dbef","abstract_canon_sha256":"6d965e98cca2b17dde1d7ce68332baa118491d82458af92c15f26f1568e46e2d"},"schema_version":"1.0"},"canonical_sha256":"a93b64ba3f021223ea418310d48980da861438175672d121cde5f5195b463b83","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:23.609529Z","signature_b64":"zSeA7uuw6NRfvVeCNDVYGQmbOexKjGjltXB5jEyvBN/9gqYpaqn665X457yQyU96Zi+8V63tuXrEXlQ7ruTfDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a93b64ba3f021223ea418310d48980da861438175672d121cde5f5195b463b83","last_reissued_at":"2026-07-05T11:09:23.609011Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:23.609011Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.19019","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2kbgTsX0XbN0wpPEXRridGHPHtpkSv5LB1AzlrRQr/TAllRv4pFy1PsId6NibmtIYNC9w6R5H2P6L2OqXLIJCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:47:34.425378Z"},"content_sha256":"91687d9334b0abc6079f189b8e9b8490b873f0fa6f2b7213649cecaf183f8793","schema_version":"1.0","event_id":"sha256:91687d9334b0abc6079f189b8e9b8490b873f0fa6f2b7213649cecaf183f8793"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:VE5WJOR7AIJCH2SBQMINJCMA3K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Querying Kernel Methods Suffices for Reconstructing their Training Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Daniel Barzilai, Eitan Gronich, Gilad Yehudai, Meirav Galun, Ronen Basri, Yuval Margalit","submitted_at":"2025-05-25T07:53:03Z","abstract_excerpt":"Over-parameterized models have raised concerns about their potential to memorize training data, even when achieving strong generalization. The privacy implications of such memorization are generally unclear, particularly in scenarios where only model outputs are accessible. We study this question in the context of kernel methods, and demonstrate both empirically and theoretically that querying kernel models at various points suffices to reconstruct their training data, even without access to model parameters. Our results hold for a range of kernel methods, including kernel regression, support "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19019","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.19019/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Cfvhx+bYVPlrARJLgu/bk5j0g/86iXqyv/qG1WDTXa161tqQcal7UvbZ4uJXlOusJhtY1ONPVkdKSKtSfei7BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:47:34.425761Z"},"content_sha256":"41abc279beda7d5f8229fad9fae2070f57ed253aeba1cd11713dcaf59ca7174c","schema_version":"1.0","event_id":"sha256:41abc279beda7d5f8229fad9fae2070f57ed253aeba1cd11713dcaf59ca7174c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VE5WJOR7AIJCH2SBQMINJCMA3K/bundle.json","state_url":"https://pith.science/pith/VE5WJOR7AIJCH2SBQMINJCMA3K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VE5WJOR7AIJCH2SBQMINJCMA3K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T07:47:34Z","links":{"resolver":"https://pith.science/pith/VE5WJOR7AIJCH2SBQMINJCMA3K","bundle":"https://pith.science/pith/VE5WJOR7AIJCH2SBQMINJCMA3K/bundle.json","state":"https://pith.science/pith/VE5WJOR7AIJCH2SBQMINJCMA3K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VE5WJOR7AIJCH2SBQMINJCMA3K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:VE5WJOR7AIJCH2SBQMINJCMA3K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6d965e98cca2b17dde1d7ce68332baa118491d82458af92c15f26f1568e46e2d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-25T07:53:03Z","title_canon_sha256":"1b05eda16d762226746bf849933a88d5f87d0bcb0451830356b28abc2b09dbef"},"schema_version":"1.0","source":{"id":"2505.19019","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19019","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19019v1","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19019","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"pith_short_12","alias_value":"VE5WJOR7AIJC","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"pith_short_16","alias_value":"VE5WJOR7AIJCH2SB","created_at":"2026-07-05T11:09:23Z"},{"alias_kind":"pith_short_8","alias_value":"VE5WJOR7","created_at":"2026-07-05T11:09:23Z"}],"graph_snapshots":[{"event_id":"sha256:41abc279beda7d5f8229fad9fae2070f57ed253aeba1cd11713dcaf59ca7174c","target":"graph","created_at":"2026-07-05T11:09:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.19019/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Over-parameterized models have raised concerns about their potential to memorize training data, even when achieving strong generalization. The privacy implications of such memorization are generally unclear, particularly in scenarios where only model outputs are accessible. We study this question in the context of kernel methods, and demonstrate both empirically and theoretically that querying kernel models at various points suffices to reconstruct their training data, even without access to model parameters. Our results hold for a range of kernel methods, including kernel regression, support ","authors_text":"Daniel Barzilai, Eitan Gronich, Gilad Yehudai, Meirav Galun, Ronen Basri, Yuval Margalit","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-25T07:53:03Z","title":"Querying Kernel Methods Suffices for Reconstructing their Training Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19019","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:91687d9334b0abc6079f189b8e9b8490b873f0fa6f2b7213649cecaf183f8793","target":"record","created_at":"2026-07-05T11:09:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6d965e98cca2b17dde1d7ce68332baa118491d82458af92c15f26f1568e46e2d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-25T07:53:03Z","title_canon_sha256":"1b05eda16d762226746bf849933a88d5f87d0bcb0451830356b28abc2b09dbef"},"schema_version":"1.0","source":{"id":"2505.19019","kind":"arxiv","version":1}},"canonical_sha256":"a93b64ba3f021223ea418310d48980da861438175672d121cde5f5195b463b83","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a93b64ba3f021223ea418310d48980da861438175672d121cde5f5195b463b83","first_computed_at":"2026-07-05T11:09:23.609011Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:23.609011Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zSeA7uuw6NRfvVeCNDVYGQmbOexKjGjltXB5jEyvBN/9gqYpaqn665X457yQyU96Zi+8V63tuXrEXlQ7ruTfDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:23.609529Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.19019","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:91687d9334b0abc6079f189b8e9b8490b873f0fa6f2b7213649cecaf183f8793","sha256:41abc279beda7d5f8229fad9fae2070f57ed253aeba1cd11713dcaf59ca7174c"],"state_sha256":"292e38d89729e51a7f03052fd5b57a1bccf3fbe30f456e163e4898df0477990b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5xnkdzZPW0Xbbx0v/eO8zqu6aknQyWcLHY0ymG20p21NhU23P03/3b2tZu4PdUOfXu8xSz7Sg5KGzn7Gr4hxBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T07:47:34.427931Z","bundle_sha256":"649944fefde9c5d8b318755256cf9ccfb3645bdf0054818c90612b9dc0196c90"}}