{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XERHLFDZEDJ3PQFTSRK6O4OKNS","short_pith_number":"pith:XERHLFDZ","canonical_record":{"source":{"id":"2403.07588","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-12T12:18:55Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"9b3b27420d99ecf04a2e61b94f64e897f210b559c27187a4e0e046d77f85bee6","abstract_canon_sha256":"0864a07ea939c1a6682dab9d415dbd031f24711a82bf7bf988b9dbd8195dcddb"},"schema_version":"1.0"},"canonical_sha256":"b92275947920d3b7c0b39455e771ca6caf989dedd73b05ed7206beff8b831d38","source":{"kind":"arxiv","id":"2403.07588","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.07588","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"arxiv_version","alias_value":"2403.07588v2","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.07588","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"pith_short_12","alias_value":"XERHLFDZEDJ3","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"pith_short_16","alias_value":"XERHLFDZEDJ3PQFT","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"pith_short_8","alias_value":"XERHLFDZ","created_at":"2026-07-05T10:27:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XERHLFDZEDJ3PQFTSRK6O4OKNS","target":"record","payload":{"canonical_record":{"source":{"id":"2403.07588","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-12T12:18:55Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"9b3b27420d99ecf04a2e61b94f64e897f210b559c27187a4e0e046d77f85bee6","abstract_canon_sha256":"0864a07ea939c1a6682dab9d415dbd031f24711a82bf7bf988b9dbd8195dcddb"},"schema_version":"1.0"},"canonical_sha256":"b92275947920d3b7c0b39455e771ca6caf989dedd73b05ed7206beff8b831d38","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:27:08.571185Z","signature_b64":"KaIevsTYmwZQo9YkeHTtncOSla+1t6NjkhTW06ZEl4QuVC7vWCDm5u9Y3B6O40lpIKp1IDoiXf6DE/izvRubCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b92275947920d3b7c0b39455e771ca6caf989dedd73b05ed7206beff8b831d38","last_reissued_at":"2026-07-05T10:27:08.570657Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:27:08.570657Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.07588","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:27:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xrfFzU0/ujCIQwRliMc+fQhpW+AG7BBstV5iLcVhe+gUq/nbM4CNOmFB5+IpYsrUs5IrYt+NaBsdmDT1jj1MBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T14:28:02.238384Z"},"content_sha256":"654856d90f960fabdc0889a6fb51e67563d21f5a0baca1386472e350bf7b90bd","schema_version":"1.0","event_id":"sha256:654856d90f960fabdc0889a6fb51e67563d21f5a0baca1386472e350bf7b90bd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XERHLFDZEDJ3PQFTSRK6O4OKNS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Visual Privacy Auditing with Diffusion Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Alexander Ziller, Daniel Rueckert, Johannes Kaiser, Kristian Schwethelm, Moritz Knolle, Sarah Lockfisch","submitted_at":"2024-03-12T12:18:55Z","abstract_excerpt":"Data reconstruction attacks on machine learning models pose a substantial threat to privacy, potentially leaking sensitive information. Although defending against such attacks using differential privacy (DP) provides theoretical guarantees, determining appropriate DP parameters remains challenging. Current formal guarantees on the success of data reconstruction suffer from overly stringent assumptions regarding adversary knowledge about the target data, particularly in the image domain, raising questions about their real-world applicability. In this work, we empirically investigate this discre"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.07588","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.07588/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:27:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qufiZmNNSGLIz9QFDw3Sitdyp20oZa3hCao7o6uuX1bWak+XyuYE9b2PMOYytSgB5bq+3MtYjInlDcGbDC3+BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T14:28:02.238869Z"},"content_sha256":"7298790ed85d950d84034735dbf110f238807d1472963e84ff2c50cb86aea532","schema_version":"1.0","event_id":"sha256:7298790ed85d950d84034735dbf110f238807d1472963e84ff2c50cb86aea532"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XERHLFDZEDJ3PQFTSRK6O4OKNS/bundle.json","state_url":"https://pith.science/pith/XERHLFDZEDJ3PQFTSRK6O4OKNS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XERHLFDZEDJ3PQFTSRK6O4OKNS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T14:28:02Z","links":{"resolver":"https://pith.science/pith/XERHLFDZEDJ3PQFTSRK6O4OKNS","bundle":"https://pith.science/pith/XERHLFDZEDJ3PQFTSRK6O4OKNS/bundle.json","state":"https://pith.science/pith/XERHLFDZEDJ3PQFTSRK6O4OKNS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XERHLFDZEDJ3PQFTSRK6O4OKNS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XERHLFDZEDJ3PQFTSRK6O4OKNS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0864a07ea939c1a6682dab9d415dbd031f24711a82bf7bf988b9dbd8195dcddb","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-12T12:18:55Z","title_canon_sha256":"9b3b27420d99ecf04a2e61b94f64e897f210b559c27187a4e0e046d77f85bee6"},"schema_version":"1.0","source":{"id":"2403.07588","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.07588","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"arxiv_version","alias_value":"2403.07588v2","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.07588","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"pith_short_12","alias_value":"XERHLFDZEDJ3","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"pith_short_16","alias_value":"XERHLFDZEDJ3PQFT","created_at":"2026-07-05T10:27:08Z"},{"alias_kind":"pith_short_8","alias_value":"XERHLFDZ","created_at":"2026-07-05T10:27:08Z"}],"graph_snapshots":[{"event_id":"sha256:7298790ed85d950d84034735dbf110f238807d1472963e84ff2c50cb86aea532","target":"graph","created_at":"2026-07-05T10:27:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.07588/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data reconstruction attacks on machine learning models pose a substantial threat to privacy, potentially leaking sensitive information. Although defending against such attacks using differential privacy (DP) provides theoretical guarantees, determining appropriate DP parameters remains challenging. Current formal guarantees on the success of data reconstruction suffer from overly stringent assumptions regarding adversary knowledge about the target data, particularly in the image domain, raising questions about their real-world applicability. In this work, we empirically investigate this discre","authors_text":"Alexander Ziller, Daniel Rueckert, Johannes Kaiser, Kristian Schwethelm, Moritz Knolle, Sarah Lockfisch","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-12T12:18:55Z","title":"Visual Privacy Auditing with Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.07588","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:654856d90f960fabdc0889a6fb51e67563d21f5a0baca1386472e350bf7b90bd","target":"record","created_at":"2026-07-05T10:27:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0864a07ea939c1a6682dab9d415dbd031f24711a82bf7bf988b9dbd8195dcddb","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-12T12:18:55Z","title_canon_sha256":"9b3b27420d99ecf04a2e61b94f64e897f210b559c27187a4e0e046d77f85bee6"},"schema_version":"1.0","source":{"id":"2403.07588","kind":"arxiv","version":2}},"canonical_sha256":"b92275947920d3b7c0b39455e771ca6caf989dedd73b05ed7206beff8b831d38","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b92275947920d3b7c0b39455e771ca6caf989dedd73b05ed7206beff8b831d38","first_computed_at":"2026-07-05T10:27:08.570657Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:27:08.570657Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KaIevsTYmwZQo9YkeHTtncOSla+1t6NjkhTW06ZEl4QuVC7vWCDm5u9Y3B6O40lpIKp1IDoiXf6DE/izvRubCg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:27:08.571185Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.07588","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:654856d90f960fabdc0889a6fb51e67563d21f5a0baca1386472e350bf7b90bd","sha256:7298790ed85d950d84034735dbf110f238807d1472963e84ff2c50cb86aea532"],"state_sha256":"4354208993b8b6b75de07b9a0734a528ff58a974c0d835af8e6f38083c73dd41"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ebUnyQeWxKH7AjsdriI9vqFCtoaZ7mNhH3UkOdKV9Mc+bdDzCfR8h/g9/iIgaWY5ZPcXAa8MVju6owyXDpv2BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T14:28:02.242164Z","bundle_sha256":"8e2031c833a1f6d8ffd3c6fe88c9226c47aaea461cc129ebfdb5ad76760ce953"}}