{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:W3NB55POADRINAM4Z6WKH2KHIV","short_pith_number":"pith:W3NB55PO","canonical_record":{"source":{"id":"2607.04484","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-05T20:11:00Z","cross_cats_sorted":[],"title_canon_sha256":"5e402f95c85c2ef3d4623648355bd4e8b10dc8005e668c524a6c9e8c7acb1fd1","abstract_canon_sha256":"a64f84b8953b484f4f5f752c734e7ef9c481aabd490fe54d3dc3151985ae2ca7"},"schema_version":"1.0"},"canonical_sha256":"b6da1ef5ee00e286819ccfaca3e947455fd7c6f670b5594aed4472ba65d97a6f","source":{"kind":"arxiv","id":"2607.04484","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.04484","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2607.04484v1","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.04484","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"W3NB55POADRI","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"W3NB55POADRINAM4","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"W3NB55PO","created_at":"2026-07-07T02:19:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:W3NB55POADRINAM4Z6WKH2KHIV","target":"record","payload":{"canonical_record":{"source":{"id":"2607.04484","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-05T20:11:00Z","cross_cats_sorted":[],"title_canon_sha256":"5e402f95c85c2ef3d4623648355bd4e8b10dc8005e668c524a6c9e8c7acb1fd1","abstract_canon_sha256":"a64f84b8953b484f4f5f752c734e7ef9c481aabd490fe54d3dc3151985ae2ca7"},"schema_version":"1.0"},"canonical_sha256":"b6da1ef5ee00e286819ccfaca3e947455fd7c6f670b5594aed4472ba65d97a6f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T02:19:21.482326Z","signature_b64":"bwmwJfg4z829WMymKuMqkXgflPG3D19BW2+4ZZfEiTst7xcLkTbs0SBXQl4iQa2qvIhMaBEiTKWqeQWh71bFAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b6da1ef5ee00e286819ccfaca3e947455fd7c6f670b5594aed4472ba65d97a6f","last_reissued_at":"2026-07-07T02:19:21.481777Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T02:19:21.481777Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.04484","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6MpHj8H5GJzRHOQEJcQEC94k1DdswPbon9ZEFCaD4APAg1ieFMR9iKFlz5klcd3po6dYUC+k5/oLQw3Tje6DBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T01:01:56.630028Z"},"content_sha256":"8bcab8e7ff2836004b656188180843f8325e75622626a280c7bc01c134710c56","schema_version":"1.0","event_id":"sha256:8bcab8e7ff2836004b656188180843f8325e75622626a280c7bc01c134710c56"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:W3NB55POADRINAM4Z6WKH2KHIV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TrustCLIP: Learning Private Visual Features via Adversarial Reconstruction","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Angela Yao, Bugra Tekin, Edoardo Remelli, Eric Sauser, Fadime Sener, Ilya A. Petrov, Johannes Sch\\\"onberger, Nikos Athanasiou, Shreyas Hampali, Shugao Ma","submitted_at":"2026-07-05T20:11:00Z","abstract_excerpt":"Vision and vision-language models rely on high-level visual representations that are increasingly used across recognition, retrieval, and multimodal reasoning pipelines. However, recent advances in generative modeling have shown that such features can often be inverted, enabling realistic reconstructions of the underlying image and raising significant privacy risks. We revisit this problem through the lens of reconstruction and propose TrustCLIP, a reconstruction-driven framework that treats a feature-conditioned generator as an explicit privacy adversary. TrustCLIP learns a projection between"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.04484","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.04484/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VYXmGB46kWxLFrLb/5PNQKHOvJIzXe9kmXjWLVboTLOLv1BXQwV6PQQbP9c1LjAj8CBvc1FqjRiaQBpodnqYAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T01:01:56.630373Z"},"content_sha256":"693cd7a9276b1cb7fc0322490b01228ca4a6c6f40cdc66a902e2cd21904c9650","schema_version":"1.0","event_id":"sha256:693cd7a9276b1cb7fc0322490b01228ca4a6c6f40cdc66a902e2cd21904c9650"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W3NB55POADRINAM4Z6WKH2KHIV/bundle.json","state_url":"https://pith.science/pith/W3NB55POADRINAM4Z6WKH2KHIV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W3NB55POADRINAM4Z6WKH2KHIV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T01:01:56Z","links":{"resolver":"https://pith.science/pith/W3NB55POADRINAM4Z6WKH2KHIV","bundle":"https://pith.science/pith/W3NB55POADRINAM4Z6WKH2KHIV/bundle.json","state":"https://pith.science/pith/W3NB55POADRINAM4Z6WKH2KHIV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W3NB55POADRINAM4Z6WKH2KHIV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:W3NB55POADRINAM4Z6WKH2KHIV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a64f84b8953b484f4f5f752c734e7ef9c481aabd490fe54d3dc3151985ae2ca7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-05T20:11:00Z","title_canon_sha256":"5e402f95c85c2ef3d4623648355bd4e8b10dc8005e668c524a6c9e8c7acb1fd1"},"schema_version":"1.0","source":{"id":"2607.04484","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.04484","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2607.04484v1","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.04484","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"W3NB55POADRI","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"W3NB55POADRINAM4","created_at":"2026-07-07T02:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"W3NB55PO","created_at":"2026-07-07T02:19:21Z"}],"graph_snapshots":[{"event_id":"sha256:693cd7a9276b1cb7fc0322490b01228ca4a6c6f40cdc66a902e2cd21904c9650","target":"graph","created_at":"2026-07-07T02:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.04484/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision and vision-language models rely on high-level visual representations that are increasingly used across recognition, retrieval, and multimodal reasoning pipelines. However, recent advances in generative modeling have shown that such features can often be inverted, enabling realistic reconstructions of the underlying image and raising significant privacy risks. We revisit this problem through the lens of reconstruction and propose TrustCLIP, a reconstruction-driven framework that treats a feature-conditioned generator as an explicit privacy adversary. TrustCLIP learns a projection between","authors_text":"Angela Yao, Bugra Tekin, Edoardo Remelli, Eric Sauser, Fadime Sener, Ilya A. Petrov, Johannes Sch\\\"onberger, Nikos Athanasiou, Shreyas Hampali, Shugao Ma","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-05T20:11:00Z","title":"TrustCLIP: Learning Private Visual Features via Adversarial Reconstruction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.04484","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8bcab8e7ff2836004b656188180843f8325e75622626a280c7bc01c134710c56","target":"record","created_at":"2026-07-07T02:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a64f84b8953b484f4f5f752c734e7ef9c481aabd490fe54d3dc3151985ae2ca7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-05T20:11:00Z","title_canon_sha256":"5e402f95c85c2ef3d4623648355bd4e8b10dc8005e668c524a6c9e8c7acb1fd1"},"schema_version":"1.0","source":{"id":"2607.04484","kind":"arxiv","version":1}},"canonical_sha256":"b6da1ef5ee00e286819ccfaca3e947455fd7c6f670b5594aed4472ba65d97a6f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b6da1ef5ee00e286819ccfaca3e947455fd7c6f670b5594aed4472ba65d97a6f","first_computed_at":"2026-07-07T02:19:21.481777Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T02:19:21.481777Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bwmwJfg4z829WMymKuMqkXgflPG3D19BW2+4ZZfEiTst7xcLkTbs0SBXQl4iQa2qvIhMaBEiTKWqeQWh71bFAw==","signature_status":"signed_v1","signed_at":"2026-07-07T02:19:21.482326Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.04484","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8bcab8e7ff2836004b656188180843f8325e75622626a280c7bc01c134710c56","sha256:693cd7a9276b1cb7fc0322490b01228ca4a6c6f40cdc66a902e2cd21904c9650"],"state_sha256":"1f1bf45748e7f58354d1f88d87ea471dd6c0441806eb02f0a9d854a411394312"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lH2o2cttKzcA87Qr5TeYhnDaMqSJRL0jTJlRkyXe7lhA/CBwlf7R4eL3EFhH4mbuC+cDf8NU3kJEj6ZwXmncAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T01:01:56.636037Z","bundle_sha256":"54210f13c31fda52ccc93a86abd763d2462f676308204aa0e4d37ea9a557218d"}}