{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XQ2RI4M43NQBKCPTMGOXC5ELGD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d316c7933b26d808b27c3e5d4724529878974fd214b8dddc1d5143e5e45e10dc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-12-08T07:37:05Z","title_canon_sha256":"ba809639feb213eb141d515e640ce7ec001780acce4e5c72e501c6d90ce46d52"},"schema_version":"1.0","source":{"id":"2412.05842","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.05842","created_at":"2026-07-05T09:46:10Z"},{"alias_kind":"arxiv_version","alias_value":"2412.05842v1","created_at":"2026-07-05T09:46:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.05842","created_at":"2026-07-05T09:46:10Z"},{"alias_kind":"pith_short_12","alias_value":"XQ2RI4M43NQB","created_at":"2026-07-05T09:46:10Z"},{"alias_kind":"pith_short_16","alias_value":"XQ2RI4M43NQBKCPT","created_at":"2026-07-05T09:46:10Z"},{"alias_kind":"pith_short_8","alias_value":"XQ2RI4M4","created_at":"2026-07-05T09:46:10Z"}],"graph_snapshots":[{"event_id":"sha256:aabfeca4de9cbfc2d4d92add949b01dc39fbe556f95dba95b08f1efd799d2af9","target":"graph","created_at":"2026-07-05T09:46:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.05842/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning models are usually black boxes when deployed on machine learning platforms. Prior works have shown that the attributes (e.g., the number of convolutional layers) of a target black-box model can be exposed through a sequence of queries. There is a crucial limitation: these works assume the training dataset of the target model is known beforehand and leverage this dataset for model attribute attack. However, it is difficult to access the training dataset of the target black-box model in reality. Therefore, whether the attributes of a target black-box model could be still revealed i","authors_text":"Changsheng Li, Guoren Wang, Jiaqi Yu, Rongqing Li, Wenhan Luo, Ye Yuan","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-12-08T07:37:05Z","title":"DREAM: Domain-agnostic Reverse Engineering Attributes of Black-box Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.05842","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:daa204623a0fdaada0f4ceb119fec6aff1e13ecb737ec2aa50fb020f115e1f44","target":"record","created_at":"2026-07-05T09:46:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d316c7933b26d808b27c3e5d4724529878974fd214b8dddc1d5143e5e45e10dc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-12-08T07:37:05Z","title_canon_sha256":"ba809639feb213eb141d515e640ce7ec001780acce4e5c72e501c6d90ce46d52"},"schema_version":"1.0","source":{"id":"2412.05842","kind":"arxiv","version":1}},"canonical_sha256":"bc3514719cdb601509f3619d71748b30ee359c2000dd929db54dadc5689126c8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bc3514719cdb601509f3619d71748b30ee359c2000dd929db54dadc5689126c8","first_computed_at":"2026-07-05T09:46:10.364746Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:46:10.364746Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2bBBZbMtnsMHEEePyMWK27POJn6qwwf9bQd9XL9hcIPZftO7+3PjGhM69l/Xb+wj2IpvHcm42wbsgpoH5UR5Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T09:46:10.365185Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.05842","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:daa204623a0fdaada0f4ceb119fec6aff1e13ecb737ec2aa50fb020f115e1f44","sha256:aabfeca4de9cbfc2d4d92add949b01dc39fbe556f95dba95b08f1efd799d2af9"],"state_sha256":"e017f5b56f22de4b7e7ac1d8aab042399ed5e5665b5a556f7decc28f51988734"}