{"id":"W4406379983","doi":"10.1145/3712311.3712321","title":"Multi-Analyst Differential Privacy with Fine-Grained Provenance for Databases","year":2025,"lang":"en","type":"article","venue":"ACM SIGMOD Record","topic":"Privacy-Preserving Technologies in Data","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Differential privacy; Privilege (computing); Computer science; Internet privacy; Safeguarding; Information privacy; Personally identifiable information; Computer security; Data mining","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaresearch","open_science"],"consensus_categories":["open_science"],"category_scores_codex":[0.0002141488,0.0002863611,0.0003742199,0.0002469399,0.0002110911,0.0001724831,0.02991145,0.00009275835,0.00001463651],"category_scores_gemma":[0.02704198,0.0002228794,0.0001008597,0.0008233015,0.0001240788,0.0007143552,0.05412843,0.0002401248,0.000007835182],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00007131634,"about_ca_system_score_gemma":0.0001592479,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001026707,"about_ca_topic_score_gemma":0.0002032275,"domain_scores_codex":[0.9978302,0.00004941825,0.0003571521,0.001008987,0.0002342683,0.0005199436],"domain_scores_gemma":[0.984844,0.0006148543,0.0001963557,0.01414794,0.0001400675,0.00005683656],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"not_applicable","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0002439121,0.0006407726,0.01367303,0.0003421501,0.0004781349,0.00003685054,0.00007389249,0.00001140537,0.00941284,0.01205446,0.6339018,0.3291307],"study_design_scores_gemma":[0.006501997,0.0007131668,0.009766649,0.0007202465,0.0002267728,0.00001732878,0.00003867292,0.6275309,0.04999449,0.1757922,0.1271,0.00159761],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.01781375,0.000112685,0.9595202,0.0201692,0.0005159922,0.0007790059,0.000106284,0.0008779297,0.0001049829],"genre_scores_gemma":[0.1399018,0.00002584231,0.8585773,0.0001785343,0.00004777461,0.0002872194,0.00006308797,0.00001864928,0.0008997705],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.6275195,"threshold_uncertainty_score":0.9811537,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0500052720731431,"score_gpt":0.3125504361115713,"score_spread":0.2625451640384282,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}