{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:27BOYOTJCROF47UIOVPWITIM7Y","short_pith_number":"pith:27BOYOTJ","canonical_record":{"source":{"id":"2306.03235","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-05T20:40:05Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"5a00da596b4ad2078a4daad9bf099c5e3971ce080bb9c1d0f9f20467d7fa4a26","abstract_canon_sha256":"167c2bed9e825e1324f150df8ed7438931247ee17806ecdf9f975d1200f89ca6"},"schema_version":"1.0"},"canonical_sha256":"d7c2ec3a69145c5e7e88755f644d0cfe0c608d3b9bcd8bc6714eb7d838a8a065","source":{"kind":"arxiv","id":"2306.03235","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.03235","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"arxiv_version","alias_value":"2306.03235v2","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.03235","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"pith_short_12","alias_value":"27BOYOTJCROF","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"pith_short_16","alias_value":"27BOYOTJCROF47UI","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"pith_short_8","alias_value":"27BOYOTJ","created_at":"2026-07-05T08:39:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:27BOYOTJCROF47UIOVPWITIM7Y","target":"record","payload":{"canonical_record":{"source":{"id":"2306.03235","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-05T20:40:05Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"5a00da596b4ad2078a4daad9bf099c5e3971ce080bb9c1d0f9f20467d7fa4a26","abstract_canon_sha256":"167c2bed9e825e1324f150df8ed7438931247ee17806ecdf9f975d1200f89ca6"},"schema_version":"1.0"},"canonical_sha256":"d7c2ec3a69145c5e7e88755f644d0cfe0c608d3b9bcd8bc6714eb7d838a8a065","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:39:27.336430Z","signature_b64":"A06QdEfUEPvZb2sJ0+F3qpko5LJ4/Y4ANhiJJkaCnpbTOYPXJ/vUFu4CJNGqyA/atB6ZQJezM/EznSyDJlsNAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d7c2ec3a69145c5e7e88755f644d0cfe0c608d3b9bcd8bc6714eb7d838a8a065","last_reissued_at":"2026-07-05T08:39:27.336017Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:39:27.336017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.03235","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:39:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MEIkcxT0AqWSq4fd4UVPO6FR4yD5EX0Wi9fpT3JkoP0W8xEB966bFtu//VXDORia4f8J0yawcZ1FCnEOEV8mDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T13:02:10.115286Z"},"content_sha256":"ae9264a73cb03c8b34814b2db9abf1342cdcd00c34d6306ec48857b87843aa8f","schema_version":"1.0","event_id":"sha256:ae9264a73cb03c8b34814b2db9abf1342cdcd00c34d6306ec48857b87843aa8f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:27BOYOTJCROF47UIOVPWITIM7Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Information Flow Control in Machine Learning through Modular Model Architecture","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Chuan Guo, G. Edward Suh, Hsien-Hsin S. Lee, Kiwan Maeng, Sanjay Kariyappa, Suchin Gururangan, Trishita Tiwari, Udit Gupta, Weizhe Hua, Wenjie Xiong","submitted_at":"2023-06-05T20:40:05Z","abstract_excerpt":"In today's machine learning (ML) models, any part of the training data can affect the model output. This lack of control for information flow from training data to model output is a major obstacle in training models on sensitive data when access control only allows individual users to access a subset of data. To enable secure machine learning for access-controlled data, we propose the notion of information flow control for machine learning, and develop an extension to the Transformer language model architecture that strictly adheres to the IFC definition we propose. Our architecture controls i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.03235","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.03235/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:39:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bEX6ldl+WM02BWyZRYTFWyBp6GWSaceV3bmDt4SEMPP8EZU8Sk7ICHVpUiAqdKyVNfOBormWZU7SY68zQ5I5Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T13:02:10.115621Z"},"content_sha256":"f026d3a8b6347a45e1fbd2255854d2a7bd91710d6466cd3adea6f43aa570cb93","schema_version":"1.0","event_id":"sha256:f026d3a8b6347a45e1fbd2255854d2a7bd91710d6466cd3adea6f43aa570cb93"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/27BOYOTJCROF47UIOVPWITIM7Y/bundle.json","state_url":"https://pith.science/pith/27BOYOTJCROF47UIOVPWITIM7Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/27BOYOTJCROF47UIOVPWITIM7Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T13:02:10Z","links":{"resolver":"https://pith.science/pith/27BOYOTJCROF47UIOVPWITIM7Y","bundle":"https://pith.science/pith/27BOYOTJCROF47UIOVPWITIM7Y/bundle.json","state":"https://pith.science/pith/27BOYOTJCROF47UIOVPWITIM7Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/27BOYOTJCROF47UIOVPWITIM7Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:27BOYOTJCROF47UIOVPWITIM7Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"167c2bed9e825e1324f150df8ed7438931247ee17806ecdf9f975d1200f89ca6","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-05T20:40:05Z","title_canon_sha256":"5a00da596b4ad2078a4daad9bf099c5e3971ce080bb9c1d0f9f20467d7fa4a26"},"schema_version":"1.0","source":{"id":"2306.03235","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.03235","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"arxiv_version","alias_value":"2306.03235v2","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.03235","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"pith_short_12","alias_value":"27BOYOTJCROF","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"pith_short_16","alias_value":"27BOYOTJCROF47UI","created_at":"2026-07-05T08:39:27Z"},{"alias_kind":"pith_short_8","alias_value":"27BOYOTJ","created_at":"2026-07-05T08:39:27Z"}],"graph_snapshots":[{"event_id":"sha256:f026d3a8b6347a45e1fbd2255854d2a7bd91710d6466cd3adea6f43aa570cb93","target":"graph","created_at":"2026-07-05T08:39:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.03235/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In today's machine learning (ML) models, any part of the training data can affect the model output. This lack of control for information flow from training data to model output is a major obstacle in training models on sensitive data when access control only allows individual users to access a subset of data. To enable secure machine learning for access-controlled data, we propose the notion of information flow control for machine learning, and develop an extension to the Transformer language model architecture that strictly adheres to the IFC definition we propose. Our architecture controls i","authors_text":"Chuan Guo, G. Edward Suh, Hsien-Hsin S. Lee, Kiwan Maeng, Sanjay Kariyappa, Suchin Gururangan, Trishita Tiwari, Udit Gupta, Weizhe Hua, Wenjie Xiong","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-05T20:40:05Z","title":"Information Flow Control in Machine Learning through Modular Model Architecture"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.03235","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ae9264a73cb03c8b34814b2db9abf1342cdcd00c34d6306ec48857b87843aa8f","target":"record","created_at":"2026-07-05T08:39:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"167c2bed9e825e1324f150df8ed7438931247ee17806ecdf9f975d1200f89ca6","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-05T20:40:05Z","title_canon_sha256":"5a00da596b4ad2078a4daad9bf099c5e3971ce080bb9c1d0f9f20467d7fa4a26"},"schema_version":"1.0","source":{"id":"2306.03235","kind":"arxiv","version":2}},"canonical_sha256":"d7c2ec3a69145c5e7e88755f644d0cfe0c608d3b9bcd8bc6714eb7d838a8a065","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d7c2ec3a69145c5e7e88755f644d0cfe0c608d3b9bcd8bc6714eb7d838a8a065","first_computed_at":"2026-07-05T08:39:27.336017Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:39:27.336017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A06QdEfUEPvZb2sJ0+F3qpko5LJ4/Y4ANhiJJkaCnpbTOYPXJ/vUFu4CJNGqyA/atB6ZQJezM/EznSyDJlsNAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:39:27.336430Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.03235","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ae9264a73cb03c8b34814b2db9abf1342cdcd00c34d6306ec48857b87843aa8f","sha256:f026d3a8b6347a45e1fbd2255854d2a7bd91710d6466cd3adea6f43aa570cb93"],"state_sha256":"7b6c2ec47918be9112cdde663a8d2d32bf0104565e84217d52b72411aeac1836"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ANUTRzQXCMsFErLlsqbdChrfkZlKdMiSFjViPhUO1wlHCU+teMNjpQWF8QOl0hVdo5pxFPfO0ls06Oo/x1MhCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T13:02:10.117929Z","bundle_sha256":"4ef856aeb14bd299c8118e739d47e6fbe630a3ca04445ff82bab3f619b6211c7"}}