{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LFWLYNIRFUNSJBYLP4V6FKES5X","short_pith_number":"pith:LFWLYNIR","canonical_record":{"source":{"id":"2503.00383","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-03-01T07:15:21Z","cross_cats_sorted":["cs.AI","stat.ML"],"title_canon_sha256":"f04c1744d34637c89d8469c144270d2f93c9ca435fee0f2dbfda1511cb5c5df5","abstract_canon_sha256":"7cb8fd38d62703beedf406798246855b6599f43ce7c6f0f63a08670d56ebc8e6"},"schema_version":"1.0"},"canonical_sha256":"596cbc35112d1b24870b7f2be2a892edc17e393a7f91b0230d475a6975dff1fc","source":{"kind":"arxiv","id":"2503.00383","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.00383","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"arxiv_version","alias_value":"2503.00383v2","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.00383","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"pith_short_12","alias_value":"LFWLYNIRFUNS","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"pith_short_16","alias_value":"LFWLYNIRFUNSJBYL","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"pith_short_8","alias_value":"LFWLYNIR","created_at":"2026-07-05T10:43:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LFWLYNIRFUNSJBYLP4V6FKES5X","target":"record","payload":{"canonical_record":{"source":{"id":"2503.00383","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-03-01T07:15:21Z","cross_cats_sorted":["cs.AI","stat.ML"],"title_canon_sha256":"f04c1744d34637c89d8469c144270d2f93c9ca435fee0f2dbfda1511cb5c5df5","abstract_canon_sha256":"7cb8fd38d62703beedf406798246855b6599f43ce7c6f0f63a08670d56ebc8e6"},"schema_version":"1.0"},"canonical_sha256":"596cbc35112d1b24870b7f2be2a892edc17e393a7f91b0230d475a6975dff1fc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:43:44.548640Z","signature_b64":"zmltygIA6OdoHsAB1doiAISHpoIZfX3stS21thhdVDz3AKfGJsBLdLnqnUtz8KN+xz0TdrQYFFpHZmLmwRArBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"596cbc35112d1b24870b7f2be2a892edc17e393a7f91b0230d475a6975dff1fc","last_reissued_at":"2026-07-05T10:43:44.548146Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:43:44.548146Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.00383","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:43:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Sudwh6UuiVq++k9ZcyYD9crw+pEtDmlDA/0u4dRJC/t8wcr72jwPy3xP0l2MAkbpFjuP9rT6Gp1kyPCC/OsmBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T20:26:46.593935Z"},"content_sha256":"516daf3d6c01f03ae167f28c7ceeb693b389297bb400e7d1bd761749d2c28db4","schema_version":"1.0","event_id":"sha256:516daf3d6c01f03ae167f28c7ceeb693b389297bb400e7d1bd761749d2c28db4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LFWLYNIRFUNSJBYLP4V6FKES5X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alex C. Kot, Ling-Yu Duan, Meiwen Ding, Song Xia, Wenhan Yang, Xudong Jiang, Yi Yu, Zhuo Chen","submitted_at":"2025-03-01T07:15:21Z","abstract_excerpt":"By locally encoding raw data into intermediate features, collaborative inference enables end users to leverage powerful deep learning models without exposure of sensitive raw data to cloud servers. However, recent studies have revealed that these intermediate features may not sufficiently preserve privacy, as information can be leaked and raw data can be reconstructed via model inversion attacks (MIAs). Obfuscation-based methods, such as noise corruption, adversarial representation learning, and information filters, enhance the inversion robustness by obfuscating the task-irrelevant redundancy"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.00383","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.00383/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:43:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o7HFsmtgdATr0mI75pqmWP35GQWr1BtPn9ET7pwcgp+WoTR6yvnaNX0X3pnpTZWhtPw+0wyLiExzVEy2ul2ZDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T20:26:46.595268Z"},"content_sha256":"a22a6f7834d7ba61f7d1f34ec00f0d01b15c9cd31b8243618bcd1c947e0ce620","schema_version":"1.0","event_id":"sha256:a22a6f7834d7ba61f7d1f34ec00f0d01b15c9cd31b8243618bcd1c947e0ce620"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LFWLYNIRFUNSJBYLP4V6FKES5X/bundle.json","state_url":"https://pith.science/pith/LFWLYNIRFUNSJBYLP4V6FKES5X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LFWLYNIRFUNSJBYLP4V6FKES5X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T20:26:46Z","links":{"resolver":"https://pith.science/pith/LFWLYNIRFUNSJBYLP4V6FKES5X","bundle":"https://pith.science/pith/LFWLYNIRFUNSJBYLP4V6FKES5X/bundle.json","state":"https://pith.science/pith/LFWLYNIRFUNSJBYLP4V6FKES5X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LFWLYNIRFUNSJBYLP4V6FKES5X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LFWLYNIRFUNSJBYLP4V6FKES5X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7cb8fd38d62703beedf406798246855b6599f43ce7c6f0f63a08670d56ebc8e6","cross_cats_sorted":["cs.AI","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-03-01T07:15:21Z","title_canon_sha256":"f04c1744d34637c89d8469c144270d2f93c9ca435fee0f2dbfda1511cb5c5df5"},"schema_version":"1.0","source":{"id":"2503.00383","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.00383","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"arxiv_version","alias_value":"2503.00383v2","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.00383","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"pith_short_12","alias_value":"LFWLYNIRFUNS","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"pith_short_16","alias_value":"LFWLYNIRFUNSJBYL","created_at":"2026-07-05T10:43:44Z"},{"alias_kind":"pith_short_8","alias_value":"LFWLYNIR","created_at":"2026-07-05T10:43:44Z"}],"graph_snapshots":[{"event_id":"sha256:a22a6f7834d7ba61f7d1f34ec00f0d01b15c9cd31b8243618bcd1c947e0ce620","target":"graph","created_at":"2026-07-05T10:43:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.00383/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"By locally encoding raw data into intermediate features, collaborative inference enables end users to leverage powerful deep learning models without exposure of sensitive raw data to cloud servers. However, recent studies have revealed that these intermediate features may not sufficiently preserve privacy, as information can be leaked and raw data can be reconstructed via model inversion attacks (MIAs). Obfuscation-based methods, such as noise corruption, adversarial representation learning, and information filters, enhance the inversion robustness by obfuscating the task-irrelevant redundancy","authors_text":"Alex C. Kot, Ling-Yu Duan, Meiwen Ding, Song Xia, Wenhan Yang, Xudong Jiang, Yi Yu, Zhuo Chen","cross_cats":["cs.AI","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-03-01T07:15:21Z","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.00383","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:516daf3d6c01f03ae167f28c7ceeb693b389297bb400e7d1bd761749d2c28db4","target":"record","created_at":"2026-07-05T10:43:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7cb8fd38d62703beedf406798246855b6599f43ce7c6f0f63a08670d56ebc8e6","cross_cats_sorted":["cs.AI","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-03-01T07:15:21Z","title_canon_sha256":"f04c1744d34637c89d8469c144270d2f93c9ca435fee0f2dbfda1511cb5c5df5"},"schema_version":"1.0","source":{"id":"2503.00383","kind":"arxiv","version":2}},"canonical_sha256":"596cbc35112d1b24870b7f2be2a892edc17e393a7f91b0230d475a6975dff1fc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"596cbc35112d1b24870b7f2be2a892edc17e393a7f91b0230d475a6975dff1fc","first_computed_at":"2026-07-05T10:43:44.548146Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:43:44.548146Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zmltygIA6OdoHsAB1doiAISHpoIZfX3stS21thhdVDz3AKfGJsBLdLnqnUtz8KN+xz0TdrQYFFpHZmLmwRArBA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:43:44.548640Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.00383","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:516daf3d6c01f03ae167f28c7ceeb693b389297bb400e7d1bd761749d2c28db4","sha256:a22a6f7834d7ba61f7d1f34ec00f0d01b15c9cd31b8243618bcd1c947e0ce620"],"state_sha256":"abc74cf323a6d261abdda9b0b3112bcee4bd2c62b8e5923c22c3bcb9ff5745a6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZuPlW2YoucRnJsWvh6oipLGzYWxQm/9JpYRMSVn/EG24boDradf3ELWZfnshyeXvamkgtzPkziU5uePCuKKICg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T20:26:46.599728Z","bundle_sha256":"37a25d20ca43b36fb2cccc11c9f68a65c830579294c955b0f03cb6069b9ad5b1"}}