{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:G3SCX23D7BZJUP7MZPR3ENTDF7","short_pith_number":"pith:G3SCX23D","canonical_record":{"source":{"id":"2406.11544","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-17T13:42:28Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"a1c282a861ba86d81e174e5d8423419932bdbe39ad293e7977baa7ab4bea389c","abstract_canon_sha256":"15265ad3d34109fa5b34c3028e0f8a3758e7e5e808062bea2c315e16ab4cc6e2"},"schema_version":"1.0"},"canonical_sha256":"36e42beb63f8729a3feccbe3b236632fd0932463ee8f99b3bf919cfea99dab67","source":{"kind":"arxiv","id":"2406.11544","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.11544","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"arxiv_version","alias_value":"2406.11544v4","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.11544","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"pith_short_12","alias_value":"G3SCX23D7BZJ","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"pith_short_16","alias_value":"G3SCX23D7BZJUP7M","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"pith_short_8","alias_value":"G3SCX23D","created_at":"2026-07-05T09:51:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:G3SCX23D7BZJUP7MZPR3ENTDF7","target":"record","payload":{"canonical_record":{"source":{"id":"2406.11544","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-17T13:42:28Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"a1c282a861ba86d81e174e5d8423419932bdbe39ad293e7977baa7ab4bea389c","abstract_canon_sha256":"15265ad3d34109fa5b34c3028e0f8a3758e7e5e808062bea2c315e16ab4cc6e2"},"schema_version":"1.0"},"canonical_sha256":"36e42beb63f8729a3feccbe3b236632fd0932463ee8f99b3bf919cfea99dab67","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:51:33.625182Z","signature_b64":"8yBEmYPzZH9jBzYM5zUzo7hxImm4rS2jSe81MlFJobaIKRIFOGLhA1WZTOehrrYyvt7AeZAXcvpPeQGdf4iFBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"36e42beb63f8729a3feccbe3b236632fd0932463ee8f99b3bf919cfea99dab67","last_reissued_at":"2026-07-05T09:51:33.624656Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:51:33.624656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.11544","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:51:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u/B2risS1jM5i1CXnZSVfBmU6C47tXy+35Nt+a0JYbDrFI8CTGv8Ir3MI4XaIMoe1GQPnurV30kIwyQvCgkhBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T02:45:51.383578Z"},"content_sha256":"a1cf7b34f1006420319b410c7ff86f12b148723bc6e56c103513a50965c830fc","schema_version":"1.0","event_id":"sha256:a1cf7b34f1006420319b410c7ff86f12b148723bc6e56c103513a50965c830fc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:G3SCX23D7BZJUP7MZPR3ENTDF7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Do Parameters Reveal More than Loss for Membership Inference?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Anshuman Suri, David Evans, Xiao Zhang","submitted_at":"2024-06-17T13:42:28Z","abstract_excerpt":"Membership inference attacks are used as a key tool for disclosure auditing. They aim to infer whether an individual record was used to train a model. While such evaluations are useful to demonstrate risk, they are computationally expensive and often make strong assumptions about potential adversaries' access to models and training environments, and thus do not provide tight bounds on leakage from potential attacks. We show how prior claims around black-box access being sufficient for optimal membership inference do not hold for stochastic gradient descent, and that optimal membership inferenc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.11544","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.11544/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:51:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oqDe247FmBsqaaUfT3OsdzaMUH1/Nh0qfmuP8//Fjb8MMvyF4lU5syPlJdIVwR8PiGV7xTNRj3dJuhdXfCrsBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T02:45:51.384077Z"},"content_sha256":"9c479a2e3515b293f2e7fab83d4edbb06b00e42ee44e0d53cec1c16b86943dc8","schema_version":"1.0","event_id":"sha256:9c479a2e3515b293f2e7fab83d4edbb06b00e42ee44e0d53cec1c16b86943dc8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/G3SCX23D7BZJUP7MZPR3ENTDF7/bundle.json","state_url":"https://pith.science/pith/G3SCX23D7BZJUP7MZPR3ENTDF7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/G3SCX23D7BZJUP7MZPR3ENTDF7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T02:45:51Z","links":{"resolver":"https://pith.science/pith/G3SCX23D7BZJUP7MZPR3ENTDF7","bundle":"https://pith.science/pith/G3SCX23D7BZJUP7MZPR3ENTDF7/bundle.json","state":"https://pith.science/pith/G3SCX23D7BZJUP7MZPR3ENTDF7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/G3SCX23D7BZJUP7MZPR3ENTDF7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:G3SCX23D7BZJUP7MZPR3ENTDF7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"15265ad3d34109fa5b34c3028e0f8a3758e7e5e808062bea2c315e16ab4cc6e2","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-17T13:42:28Z","title_canon_sha256":"a1c282a861ba86d81e174e5d8423419932bdbe39ad293e7977baa7ab4bea389c"},"schema_version":"1.0","source":{"id":"2406.11544","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.11544","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"arxiv_version","alias_value":"2406.11544v4","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.11544","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"pith_short_12","alias_value":"G3SCX23D7BZJ","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"pith_short_16","alias_value":"G3SCX23D7BZJUP7M","created_at":"2026-07-05T09:51:33Z"},{"alias_kind":"pith_short_8","alias_value":"G3SCX23D","created_at":"2026-07-05T09:51:33Z"}],"graph_snapshots":[{"event_id":"sha256:9c479a2e3515b293f2e7fab83d4edbb06b00e42ee44e0d53cec1c16b86943dc8","target":"graph","created_at":"2026-07-05T09:51:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.11544/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks are used as a key tool for disclosure auditing. They aim to infer whether an individual record was used to train a model. While such evaluations are useful to demonstrate risk, they are computationally expensive and often make strong assumptions about potential adversaries' access to models and training environments, and thus do not provide tight bounds on leakage from potential attacks. We show how prior claims around black-box access being sufficient for optimal membership inference do not hold for stochastic gradient descent, and that optimal membership inferenc","authors_text":"Anshuman Suri, David Evans, Xiao Zhang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-17T13:42:28Z","title":"Do Parameters Reveal More than Loss for Membership Inference?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.11544","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a1cf7b34f1006420319b410c7ff86f12b148723bc6e56c103513a50965c830fc","target":"record","created_at":"2026-07-05T09:51:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"15265ad3d34109fa5b34c3028e0f8a3758e7e5e808062bea2c315e16ab4cc6e2","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-17T13:42:28Z","title_canon_sha256":"a1c282a861ba86d81e174e5d8423419932bdbe39ad293e7977baa7ab4bea389c"},"schema_version":"1.0","source":{"id":"2406.11544","kind":"arxiv","version":4}},"canonical_sha256":"36e42beb63f8729a3feccbe3b236632fd0932463ee8f99b3bf919cfea99dab67","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"36e42beb63f8729a3feccbe3b236632fd0932463ee8f99b3bf919cfea99dab67","first_computed_at":"2026-07-05T09:51:33.624656Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:51:33.624656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8yBEmYPzZH9jBzYM5zUzo7hxImm4rS2jSe81MlFJobaIKRIFOGLhA1WZTOehrrYyvt7AeZAXcvpPeQGdf4iFBg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:51:33.625182Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.11544","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a1cf7b34f1006420319b410c7ff86f12b148723bc6e56c103513a50965c830fc","sha256:9c479a2e3515b293f2e7fab83d4edbb06b00e42ee44e0d53cec1c16b86943dc8"],"state_sha256":"a0e59db821912d1dec7b73499aaacfd498a875dd0b0d6376a851a83f573d8197"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"crIhYII3v5l29pZXhT4xfUnKLXubxIynED/PCG/nv/GS1oIaynEGpPIAT4ObRrstY0dwOpMy4i52iFi045IYCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T02:45:51.388968Z","bundle_sha256":"2968cb761767e87647e70884515de6b026f9f9efdb21cb422ef235bbfa9fb3f6"}}