{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XBUUH2RCAIDH2POWZ5F5G2ZCAO","short_pith_number":"pith:XBUUH2RC","canonical_record":{"source":{"id":"2504.12806","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-04-17T10:12:38Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"4e95abd9eef2204cad97ec66df407cbf4ba4c603f60f5f5802d00f85c5d93918","abstract_canon_sha256":"b6f07cf332733a544873fd17bb01f5d2b08592c92d36fdfc0648e9a2432de210"},"schema_version":"1.0"},"canonical_sha256":"b86943ea2202067d3dd6cf4bd36b2203822222f798703436afff5a270ec3ee16","source":{"kind":"arxiv","id":"2504.12806","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.12806","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"arxiv_version","alias_value":"2504.12806v2","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.12806","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"pith_short_12","alias_value":"XBUUH2RCAIDH","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"pith_short_16","alias_value":"XBUUH2RCAIDH2POW","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"pith_short_8","alias_value":"XBUUH2RC","created_at":"2026-07-05T10:59:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XBUUH2RCAIDH2POWZ5F5G2ZCAO","target":"record","payload":{"canonical_record":{"source":{"id":"2504.12806","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-04-17T10:12:38Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"4e95abd9eef2204cad97ec66df407cbf4ba4c603f60f5f5802d00f85c5d93918","abstract_canon_sha256":"b6f07cf332733a544873fd17bb01f5d2b08592c92d36fdfc0648e9a2432de210"},"schema_version":"1.0"},"canonical_sha256":"b86943ea2202067d3dd6cf4bd36b2203822222f798703436afff5a270ec3ee16","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:59:28.927588Z","signature_b64":"h5m/+jaCOuGQu4ae8EKufS166NoFG63NF7Ye9i0bHzYdjvYGQeNdFuKL9eZxt6alcz+WhmwLjpzwK8wHMM+TAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b86943ea2202067d3dd6cf4bd36b2203822222f798703436afff5a270ec3ee16","last_reissued_at":"2026-07-05T10:59:28.927082Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:59:28.927082Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.12806","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:59:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z/nAERnYrwrieKPHsyxL2agRjwC45UY4TLLqKcnq8fNyEFmWFEp746fwN5E9I/BoQ0OcjuzkmWEgfr6Xs3EdCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T21:46:27.882208Z"},"content_sha256":"4d0a7770add9a950d56de28446d45b15e06829643b770824aee4d65dc229c4b6","schema_version":"1.0","event_id":"sha256:4d0a7770add9a950d56de28446d45b15e06829643b770824aee4d65dc229c4b6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XBUUH2RCAIDH2POWZ5F5G2ZCAO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Numerical Gradient Inversion Attack in Variational Quantum Neural-Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Chun-Fu Chen, Georgios Papadopoulos, Jamie Heredge, Marco Pistoia, Niraj Kumar, Shaltiel Eloul, Yash Satsangi","submitted_at":"2025-04-17T10:12:38Z","abstract_excerpt":"The loss landscape of Variational Quantum Neural Networks (VQNNs) is characterized by local minima that grow exponentially with increasing qubits. Because of this, it is more challenging to recover information from model gradients during training compared to classical Neural Networks (NNs). In this paper we present a numerical scheme that successfully reconstructs input training, real-world, practical data from trainable VQNNs' gradients. Our scheme is based on gradient inversion that works by combining gradients estimation with the finite difference method and adaptive low-pass filtering. The"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.12806","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.12806/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:59:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Aij3kon/jyd2Db9DSodorCM/UKS+grainp+dy7lrjg/dk6P+OJmqwPpC7dFubJpkzOE2p8RTm3N/IiC6BNc9BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T21:46:27.882802Z"},"content_sha256":"b0e3a8df5a9ed0081925097fe1fb615579c1c6f43ea05afd3406457db4a95261","schema_version":"1.0","event_id":"sha256:b0e3a8df5a9ed0081925097fe1fb615579c1c6f43ea05afd3406457db4a95261"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XBUUH2RCAIDH2POWZ5F5G2ZCAO/bundle.json","state_url":"https://pith.science/pith/XBUUH2RCAIDH2POWZ5F5G2ZCAO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XBUUH2RCAIDH2POWZ5F5G2ZCAO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T21:46:27Z","links":{"resolver":"https://pith.science/pith/XBUUH2RCAIDH2POWZ5F5G2ZCAO","bundle":"https://pith.science/pith/XBUUH2RCAIDH2POWZ5F5G2ZCAO/bundle.json","state":"https://pith.science/pith/XBUUH2RCAIDH2POWZ5F5G2ZCAO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XBUUH2RCAIDH2POWZ5F5G2ZCAO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XBUUH2RCAIDH2POWZ5F5G2ZCAO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b6f07cf332733a544873fd17bb01f5d2b08592c92d36fdfc0648e9a2432de210","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-04-17T10:12:38Z","title_canon_sha256":"4e95abd9eef2204cad97ec66df407cbf4ba4c603f60f5f5802d00f85c5d93918"},"schema_version":"1.0","source":{"id":"2504.12806","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.12806","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"arxiv_version","alias_value":"2504.12806v2","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.12806","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"pith_short_12","alias_value":"XBUUH2RCAIDH","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"pith_short_16","alias_value":"XBUUH2RCAIDH2POW","created_at":"2026-07-05T10:59:28Z"},{"alias_kind":"pith_short_8","alias_value":"XBUUH2RC","created_at":"2026-07-05T10:59:28Z"}],"graph_snapshots":[{"event_id":"sha256:b0e3a8df5a9ed0081925097fe1fb615579c1c6f43ea05afd3406457db4a95261","target":"graph","created_at":"2026-07-05T10:59:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.12806/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The loss landscape of Variational Quantum Neural Networks (VQNNs) is characterized by local minima that grow exponentially with increasing qubits. Because of this, it is more challenging to recover information from model gradients during training compared to classical Neural Networks (NNs). In this paper we present a numerical scheme that successfully reconstructs input training, real-world, practical data from trainable VQNNs' gradients. Our scheme is based on gradient inversion that works by combining gradients estimation with the finite difference method and adaptive low-pass filtering. The","authors_text":"Chun-Fu Chen, Georgios Papadopoulos, Jamie Heredge, Marco Pistoia, Niraj Kumar, Shaltiel Eloul, Yash Satsangi","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-04-17T10:12:38Z","title":"A Numerical Gradient Inversion Attack in Variational Quantum Neural-Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.12806","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4d0a7770add9a950d56de28446d45b15e06829643b770824aee4d65dc229c4b6","target":"record","created_at":"2026-07-05T10:59:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b6f07cf332733a544873fd17bb01f5d2b08592c92d36fdfc0648e9a2432de210","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-04-17T10:12:38Z","title_canon_sha256":"4e95abd9eef2204cad97ec66df407cbf4ba4c603f60f5f5802d00f85c5d93918"},"schema_version":"1.0","source":{"id":"2504.12806","kind":"arxiv","version":2}},"canonical_sha256":"b86943ea2202067d3dd6cf4bd36b2203822222f798703436afff5a270ec3ee16","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b86943ea2202067d3dd6cf4bd36b2203822222f798703436afff5a270ec3ee16","first_computed_at":"2026-07-05T10:59:28.927082Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:59:28.927082Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"h5m/+jaCOuGQu4ae8EKufS166NoFG63NF7Ye9i0bHzYdjvYGQeNdFuKL9eZxt6alcz+WhmwLjpzwK8wHMM+TAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:59:28.927588Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.12806","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4d0a7770add9a950d56de28446d45b15e06829643b770824aee4d65dc229c4b6","sha256:b0e3a8df5a9ed0081925097fe1fb615579c1c6f43ea05afd3406457db4a95261"],"state_sha256":"78981f519cdd9c74291f230d3a05ec09f09d0e816c2d49c77664fdd32ebb5009"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0JSBFFwdItlbdYSTny1a+KzXAcsq10DuA8ZzRHvsCWn9/X2APEF0ot80TlRT8IThyBr1bRvr0l2/VhSVNA2FDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T21:46:27.889948Z","bundle_sha256":"568101f0cc10eb3d961f272308ba6202f7e3c057abe3a84c4d8b13480bd3ef0a"}}