{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XHKTHZWFBMV66G54VEX64LKDOW","short_pith_number":"pith:XHKTHZWF","canonical_record":{"source":{"id":"2509.00027","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-20T09:05:01Z","cross_cats_sorted":[],"title_canon_sha256":"ce9b7a2d6f59aa185d524b25909d97c4412af1548d2ba8a42fd93839fb063216","abstract_canon_sha256":"f3da6923b154f1a7cb313ffac79b036280f6db2447e87d00c15d927031b497fb"},"schema_version":"1.0"},"canonical_sha256":"b9d533e6c50b2bef1bbca92fee2d4375a6af4f96535c0443c6b1011cbe78dc72","source":{"kind":"arxiv","id":"2509.00027","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.00027","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"arxiv_version","alias_value":"2509.00027v1","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.00027","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"pith_short_12","alias_value":"XHKTHZWFBMV6","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"pith_short_16","alias_value":"XHKTHZWFBMV66G54","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"pith_short_8","alias_value":"XHKTHZWF","created_at":"2026-07-05T12:02:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XHKTHZWFBMV66G54VEX64LKDOW","target":"record","payload":{"canonical_record":{"source":{"id":"2509.00027","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-20T09:05:01Z","cross_cats_sorted":[],"title_canon_sha256":"ce9b7a2d6f59aa185d524b25909d97c4412af1548d2ba8a42fd93839fb063216","abstract_canon_sha256":"f3da6923b154f1a7cb313ffac79b036280f6db2447e87d00c15d927031b497fb"},"schema_version":"1.0"},"canonical_sha256":"b9d533e6c50b2bef1bbca92fee2d4375a6af4f96535c0443c6b1011cbe78dc72","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:02:08.149904Z","signature_b64":"lLjdTTOSp5jh7X8pfp6FnBmXFRMa+Qf/J1YfSzK5Ox9HbyG7q4qXA3CWEHpe4fFqVpQP5zSvQuS1CSRnIkPnAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b9d533e6c50b2bef1bbca92fee2d4375a6af4f96535c0443c6b1011cbe78dc72","last_reissued_at":"2026-07-05T12:02:08.149494Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:02:08.149494Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.00027","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"glXJ7FU/gjG7nAFSBc3DJhu2eHl0c4nhGT/Rbws9DDK8C5Kcmkp3RECLy5/qZBYPPWp+qV38PkQ6kdvSs9V1AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T01:31:19.684121Z"},"content_sha256":"210eff37bec3c1392ee481fffe1c502b75f87af9600b2049c88fe63009ef19ad","schema_version":"1.0","event_id":"sha256:210eff37bec3c1392ee481fffe1c502b75f87af9600b2049c88fe63009ef19ad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XHKTHZWFBMV66G54VEX64LKDOW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Data Exfiltration Attacks through Layer-Wise Learning Rate Decay Fine-Tuning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Elie Thellier (EPIONE), Herv\\'e Delingette (EPIONE), Huiyu Li (EPIONE), Nicholas Ayache (EPIONE)","submitted_at":"2025-08-20T09:05:01Z","abstract_excerpt":"Data lakes enable the training of powerful machine learning models on sensitive, high-value medical datasets, but also introduce serious privacy risks due to potential leakage of protected health information. Recent studies show adversaries can exfiltrate training data by embedding latent representations into model parameters or inducing memorization via multi-task learning. These attacks disguise themselves as benign utility models while enabling reconstruction of high-fidelity medical images, posing severe privacy threats with legal and ethical implications. In this work, we propose a simple"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.00027","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.00027/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yAYy9Q4WZZ7z7BZjIurYIaU5vAvOrrA/UIOq7uhZw8JkslvoQ6PSbb30x7o9Oj2zaCwNZwMoAZGiWTZ3xU82AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T01:31:19.684667Z"},"content_sha256":"ff34b0de180846b933d9f94680f1a81469df0e44244c7bade55f77b5eeb8b40c","schema_version":"1.0","event_id":"sha256:ff34b0de180846b933d9f94680f1a81469df0e44244c7bade55f77b5eeb8b40c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XHKTHZWFBMV66G54VEX64LKDOW/bundle.json","state_url":"https://pith.science/pith/XHKTHZWFBMV66G54VEX64LKDOW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XHKTHZWFBMV66G54VEX64LKDOW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T01:31:19Z","links":{"resolver":"https://pith.science/pith/XHKTHZWFBMV66G54VEX64LKDOW","bundle":"https://pith.science/pith/XHKTHZWFBMV66G54VEX64LKDOW/bundle.json","state":"https://pith.science/pith/XHKTHZWFBMV66G54VEX64LKDOW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XHKTHZWFBMV66G54VEX64LKDOW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XHKTHZWFBMV66G54VEX64LKDOW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f3da6923b154f1a7cb313ffac79b036280f6db2447e87d00c15d927031b497fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-20T09:05:01Z","title_canon_sha256":"ce9b7a2d6f59aa185d524b25909d97c4412af1548d2ba8a42fd93839fb063216"},"schema_version":"1.0","source":{"id":"2509.00027","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.00027","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"arxiv_version","alias_value":"2509.00027v1","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.00027","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"pith_short_12","alias_value":"XHKTHZWFBMV6","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"pith_short_16","alias_value":"XHKTHZWFBMV66G54","created_at":"2026-07-05T12:02:08Z"},{"alias_kind":"pith_short_8","alias_value":"XHKTHZWF","created_at":"2026-07-05T12:02:08Z"}],"graph_snapshots":[{"event_id":"sha256:ff34b0de180846b933d9f94680f1a81469df0e44244c7bade55f77b5eeb8b40c","target":"graph","created_at":"2026-07-05T12:02:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.00027/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data lakes enable the training of powerful machine learning models on sensitive, high-value medical datasets, but also introduce serious privacy risks due to potential leakage of protected health information. Recent studies show adversaries can exfiltrate training data by embedding latent representations into model parameters or inducing memorization via multi-task learning. These attacks disguise themselves as benign utility models while enabling reconstruction of high-fidelity medical images, posing severe privacy threats with legal and ethical implications. In this work, we propose a simple","authors_text":"Elie Thellier (EPIONE), Herv\\'e Delingette (EPIONE), Huiyu Li (EPIONE), Nicholas Ayache (EPIONE)","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-20T09:05:01Z","title":"Mitigating Data Exfiltration Attacks through Layer-Wise Learning Rate Decay Fine-Tuning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.00027","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:210eff37bec3c1392ee481fffe1c502b75f87af9600b2049c88fe63009ef19ad","target":"record","created_at":"2026-07-05T12:02:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f3da6923b154f1a7cb313ffac79b036280f6db2447e87d00c15d927031b497fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-20T09:05:01Z","title_canon_sha256":"ce9b7a2d6f59aa185d524b25909d97c4412af1548d2ba8a42fd93839fb063216"},"schema_version":"1.0","source":{"id":"2509.00027","kind":"arxiv","version":1}},"canonical_sha256":"b9d533e6c50b2bef1bbca92fee2d4375a6af4f96535c0443c6b1011cbe78dc72","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b9d533e6c50b2bef1bbca92fee2d4375a6af4f96535c0443c6b1011cbe78dc72","first_computed_at":"2026-07-05T12:02:08.149494Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:02:08.149494Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lLjdTTOSp5jh7X8pfp6FnBmXFRMa+Qf/J1YfSzK5Ox9HbyG7q4qXA3CWEHpe4fFqVpQP5zSvQuS1CSRnIkPnAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:02:08.149904Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.00027","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:210eff37bec3c1392ee481fffe1c502b75f87af9600b2049c88fe63009ef19ad","sha256:ff34b0de180846b933d9f94680f1a81469df0e44244c7bade55f77b5eeb8b40c"],"state_sha256":"8f10ee80eb4a65a1b6c3c630f8faf091d331ece6c2a978389fbc65e322f2b2a1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/GaM9nrwVh4Bm1fwdY+9q7+3fHSwRMHgd+pqohwRrG0+auejyx/9Q/ikisE8GsOLG+rzuEhrCgTVB1f4GDZPCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T01:31:19.688596Z","bundle_sha256":"2ebf30e577bbfe027f5872f7a05053db9c7de8bc81e29808e17c2be66b5b5784"}}