{"id":"W4406379983","doi":"10.1145/3712311.3712321","title":"Multi-Analyst Differential Privacy with Fine-Grained Provenance for Databases","year":2025,"lang":"en","type":"article","venue":"ACM SIGMOD Record","topic":"Privacy-Preserving Technologies in Data","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Differential privacy; Privilege (computing); Computer science; Internet privacy; Safeguarding; Information privacy; Personally identifiable information; Computer security; Data mining","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.02136705,0.0008088528,0.001573612,0.001672185,0.002153015,0.006329953,0.003251729,0.00262725,0.002434109],"category_scores_gemma":[0.07520528,0.001066044,0.00170427,0.003364222,0.004567609,0.01694154,0.009481632,0.005027968,0.0005558083],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.003154877,"about_ca_system_score_gemma":0.003961077,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001790567,"about_ca_topic_score_gemma":0.001522282,"domain_scores_codex":[0.9738542,0.009674724,0.001941631,0.004927848,0.008436843,0.001164765],"domain_scores_gemma":[0.9165019,0.03970913,0.006064337,0.02948606,0.00646981,0.001768797],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0006207539,0.0001494917,0.005205343,0.0005910263,0.0001774498,0.0004418619,0.00106311,0.07006955,0.005040496,0.807133,0.005441833,0.1040661],"study_design_scores_gemma":[0.0000557102,0.0001171783,0.0005335805,0.00009304965,0.00007245498,0.0005351614,0.0001274768,0.1806193,0.004053777,0.8026801,0.01106897,0.00004309815],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.009308852,0.00109201,0.9830886,0.002982491,0.0001224343,0.000166529,0.0004745654,0.0004276829,0.002336918],"genre_scores_gemma":[0.6599368,0.001424026,0.3319782,0.0009677623,0.0006786324,0.0002798285,0.0009791597,0.0001780277,0.003577531],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.02136705,"threshold_uncertainty_score":0.1130012,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0500052720731431,"score_gpt":0.3125504361115713,"score_spread":0.2625451640384282,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}