AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inference

[2608.14735] AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inference Skip to main content Search Submit Donate Log in Search arXiv Press Enter to search · Advanced search Computer Science > Cryptography and Security arXiv:2608.14735 (cs) [Submitted on 13 Aug 2026] Title: AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inference Authors: Faruk Alpay , Taylan Alpay View a PDF of the paper titled AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inference, by Faruk Alpay and 1 other authors View PDF HTML (experimental) Abstract: Exposure control lets an adversary rank authentic public posts to strengthen private-attribute inference without altering content. AccretionLink defines confidentiality and integrity games for this attack, models bounded selection odds through partial identification, and constructs dependence-aware time-uniform e-processes. On 52 held-out synthetic profiles, odds-four selection reduced aggregate negative log likelihood at every horizon. At eight posts the advantage was 0.01595 nats (95% CI [0.00890, 0.02336]), three of four target effects survived Holm adjustment, and label-blind model-guided selection caused 6/109 high-confidence false reversals. On 142 PAN15 test profiles, exploratory selection produced a 0.01227-nat advantage but no reversal. A separate TF-IDF selector retained a 0.01470-nat advantage against the unchanged G5 target, while matched identity shuffling did not reproduce it. Pixel 10 encoded all 1,622 held-out posts once with a fallback-free Tensor G5 graph. A P-256 checkpoint authenticated the selected-replay, actual-model, native-report, and operation digests; local KeyInfo identified the signing key as StrongBox-backed. Comments: 21 pages, 2 figures; includes proofs, reproducibility code, and Pixel 10/Tensor G5 verification artifacts as ancillary files Subjects: Cryptography and Security (cs.CR) ; Machine Learning (stat.ML) MSC classes: 62L10, 62B10, 62J15 ACM classes: K.6.5; I.2.6; G.3 Cite as: arXiv:2608.14735 [cs.CR] (or arXiv:2608.14735v1 [cs.CR] for this version) https://doi.org/10.48550/arXiv.2608.14735 Focus to learn more arXiv-issued DOI via DataCite Submission history From: Taylan Alpay [ view email ] [v1] Thu, 13 Aug 2026 09:12:30 UTC (634 KB) Full-text links: Access Paper: View a PDF of the paper titled AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inference, by Faruk Alpay and 1 other authors View PDF HTML (experimental) TeX Source view license Ancillary-file links: Ancillary files ( details ) : README.md SOURCE_MANIFEST.json code/LICENSE code/THIRD_PARTY_NOTICES.md code/android/app/build.gradle.kts code/android/app/proguard-rules.pro code/android/app/src/androidTest/java/dev/accretionlink/audit/inference/G5ExternalRawExtractorDeviceTest.java code/android/app/src/main/AndroidManifest.xml code/android/app/src/main/assets/academic/registered_experiment.json code/android/app/src/main/assets/academic/tensor_g5_execution.json code/android/app/src/main/cpp/CMakeLists.txt code/android/app/src/main/cpp/litert_async_jni.cpp code/android/app/src/main/cpp/third_party/litert_sdk/LITERT_SDK_PROVENANCE.md code/android/app/src/main/cpp/third_party/litert_sdk/litert/build_common/build_config.h.in code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/internal/litert_logging.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/internal/litert_logging.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/internal/litert_options_helper.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/internal/litert_runtime_c_api.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/internal/litert_scheduling_info.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_any.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_common.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_compiled_model.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_custom_op_kernel.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_custom_tensor_buffer.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_environment.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_environment_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_event.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_event_type.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_gl_types.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_layout.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_layout.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_metrics.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_model.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_model_types.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_op_code.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_op_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_opaque_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_opencl_types.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_platform_support.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_profiler.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_profiler_event.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_tensor_buffer.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_tensor_buffer_requirements.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_tensor_buffer_types.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/litert_webgpu_types.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_compiler_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_compiler_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_cpu_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_cpu_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_google_tensor_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_google_tensor_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_google_tensor_options_type.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_gpu_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_gpu_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_intel_openvino_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_intel_openvino_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_mediatek_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_mediatek_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_qualcomm_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_qualcomm_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_runtime_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_runtime_options.h code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_samsung_options.cc code/android/app/src/main/cpp/third_party/litert_sdk/litert/c/options/litert_samsung_options.h code/android/app/src/main/java/dev/accretionlink/audit/MainActivity.java code/android/app/src/main/java/dev/accretionlink/audit/academic/AcademicEvidence.java code/android/app/src/main/java/dev/accretionlink/audit/academic/AcademicEvidencePolicy.java code/android/app/src/main/java/dev/accretionlink/audit/academic/AcademicEvidenceRepository.java code/android/app/src/main/java/dev/accretionlink/audit/crypto/AuditTranscript.java code/android/app/src/main/java/dev/accretionlink/audit/inference/EmbeddingGemmaTokenizer.java code/android/app/src/main/java/dev/accretionlink/audit/inference/G5CompiledModelRunner.java code/android/app/src/main/java/dev/accretionlink/audit/inference/G5EmbeddingBatchExtractor.java code/android/app/src/main/java/dev/accretionlink/audit/inference/LinearPosteriorHead.java code/android/app/src/main/java/dev/accretionlink/audit/inference/LiteRtNativeAsyncEvidence.java code/android/app/src/main/java/dev/accretionlink/audit/inference/OnlineEmbeddingPipeline.java code/android/app/src/main/java/dev/accretionlink/audit/security/RuntimeArtifactVerifier.java code/android/app/src/main/java/dev/accretionlink/audit/security/SecurityOperationEngine.java code/android/app/src/main/java/dev/accretionlink/audit/security/SecurityReplayInputValidator.java code/android/app/src/main/java/dev/accretionlink/audit/security/SecurityReplayVerifier.java code/android/app/src/main/java/dev/accretionlink/audit/ui/ExposurePlotView.java code/android/app/src/main/res/drawable/chip_neutral_dark.xml code/android/app/src/main/res/drawable/chip_secure_dark.xml code/android/app/src/main/res/drawable/ic_app.xml code/android/app/src/main/res/drawable/panel_dark.xml code/android/app/src/main/res/drawable/panel_evidence.xml code/android/app/src/main/res/drawable/panel_metric.xml code/android/app/src/main/res/drawable/panel_outline.xml code/android/app/src/main/res/drawable/panel_security_contract.xml code/android/app/src/main/res/drawable/security_header.xml code/android/app/src/main/res/drawable/status_execution.xml code/android/app/src/main/res/drawable/status_sealed.xml code/android/app/src/main/res/drawable/table_header.xml code/android/app/src/main/res/layout/activity_main.xml code/android/app/src/main/res/values/colors.xml code/android/app/src/main/res/values/strings.xml code/android/app/src/main/res/values/themes.xml code/android/build.gradle.kts code/android/gradle.properties code/android/litert_npu_runtime_libraries/google_tensor_runtime/build.gradle.kts code/android/litert_npu_runtime_libraries/google_tensor_runtime/src/main/AndroidManifest.xml code/android/settings.gradle.kts code/android/tokenizer-native/CMakeLists.txt code/android/tokenizer-native/LICENSES/Apache-2.0.txt code/android/tokenizer-native/README.md code/android/tokenizer-native/THIRD_PARTY_NOTICES.md code/android/tokenizer-native/include/accretionlink/embeddinggemma_tokenizer.h code/android/tokenizer-native/run_pixel_parity.sh code/android/tokenizer-native/sentencepiece.lock.json code/android/tokenizer-native/src/embeddinggemma_tokenizer.cc code/android/tokenizer-native/src/tokenizer_jni.cc code/android/tokenizer-native/src/tokenizer_parity_main.cc code/configs/android_tokenizer_parity_evidence.schema.json code/configs/eicu_demo_external.json code/configs/embedding_archive_schema.json code/configs/embeddinggemma_head.json code/configs/embeddinggemma_online_runtime_evidence.schema.json code/configs/pan15_crossmodel_control.json code/configs/requirements.txt code/configs/synthpai_full.json code/experiments/__init__.py code/experiments/android_tokenizer_parity.py code/experiments/core.py code/experiments/embedding_head.py code/experiments/evaluate_embeddinggemma_locked_test.py code/experiments/evaluate_locked_test.py code/experiments/evaluate_pan15_crossmodel_control.py code/experiments/evaluate_pan15_external.py code/experiments/external_eicu.py code/experiments/g5_embedding_corpus.py code/experiments/locked_test_corpus.py code/experiments/metrics.py code/experiments/modeling.py code/experiments/pan15_external.py code/experiments/selection.py code/experiments/selection_protocol.py code/experiments/train_embedding_head.py code/experiments/verify_embeddinggemma_freeze.py code/experiments/verify_pretest_freeze.py code/models/candidate/embeddinggemma_linear_head_contract.json code/models/embeddinggemma_g5_contract.json code/scripts/build_android_academic_assets.py code/scripts/build_android_tokenizer_parity_fixture.py code/scripts/build_g5_embedding_corpus.py code/scripts/build_locked_test_corpus.py code/scripts/build_online_pipeline_evidence.py code/scripts/export_android_linear_head.py code/scripts/fetch_eicu_demo.sh code/scripts/fetch_embeddinggemma_g5.py code/scripts/fetch_synthpai.sh code/scripts/freeze_embeddinggemma_candidate.py code/scripts/pack_g5_embedding_archive.py code/scripts/pack_locked_test_embeddings.py code/scripts/pack_pan15_external_embeddings.py code/scripts/prepare_pan15_external.py code/scripts/verify_android_tokenizer_parity_evidence.py code/scripts/verify_audit_checkpoint.py code/scripts/verify_g5_embedding_batch.py code/scripts/verify_g5_evidence.py code/scripts/verify_pan15_external_device.py code/scripts/verify_tokenizer_not_packaged.py code/tests/conftest.py code/tests/test_android_tokenizer_parity.py code/tests/test_audit_checkpoint.py code/tests/test_contract.py code/tests/test_core.py code/tests/test_embedding_head.py code/tests/test_evaluate_locked.py code/tests/test_external_eicu.py code/tests/test_g5_contract.py code/tests/test_g5_embedding_corpus.py code/tests/test_locked_test_corpus.py code/tests/test_metrics.py code/tests/test_pack_g5_embedding_archive.py code/tests/test_pan15_crossmodel_control.py code/tests/test_pan15_external.py code/tests/test_selection.py code/tests/test_tokenizer_not_packaged.py data/DATA_MANIFEST.md data/sources.json results/accretionlink-security-checkpoint.json results/eicu_external_aggregate.json results/heldout_aggregate.json results/pan15_crossmodel_selector_aggregate.json results/pan15_crossmodel_selector_freeze.json results/pan15_external_aggregate.json results/pixel10_device_execution.json results/posttest_security_hardening_manifest.json results/pretest_freeze.json results/tensor_g5_live_hardened.json (185 additional files not shown) Current browse context: cs.CR < prev | next > new | recent | 2026-08 Change to browse by: cs stat stat.ML References & Citations NASA ADS Google Scholar Semantic Scholar export BibTeX citation Loading... BibTeX formatted citation × loading... Data provided by: Bookmark Bibliographic Tools Bibliographic and Citation Tools Bibliographic Explorer Toggle Bibliographic Explorer ( What is the Explorer? ) Connected Papers Toggle Connected Papers ( What is Connected Papers? ) Litmaps Toggle Litmaps ( What is Litmaps? ) scite.ai Toggle scite Smart Citations ( What are Smart Citations? ) Code, Data, Media Code, Data and Media Associated with this Article alphaXiv Toggle alphaXiv ( What is alphaXiv? ) Links to Code Toggle CatalyzeX Code Finder for Papers ( What is CatalyzeX? ) DagsHub Toggle DagsHub ( What is DagsHub? ) GotitPub Toggle Gotit.pub ( What is GotitPub? ) Huggingface Toggle Hugging Face ( What is Huggingface? ) ScienceCast Toggle ScienceCast ( What is ScienceCast? ) Demos Demos Replicate Toggle Replicate ( What is Replicate? ) Spaces Toggle Hugging Face Spaces ( What is Spaces? ) Spaces Toggle TXYZ.AI ( What is TXYZ.AI? ) Related Papers Recommenders and Search Tools Link to Influence Flower Influence Flower ( What are Influence Flowers? ) Core recommender toggle CORE Recommender ( What is CORE? ) Author Venue Institution Topic About arXivLabs arXivLabs: experimental projects with community collaborators arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website. Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them. Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs . Which authors of this paper are endorsers? | Disable MathJax ( What is MathJax? ) We gratefully acknowledge support from our major funders , member institutions , , and all contributors. About · Help · Contact · Subscribe · Copyright · Privacy · Accessibility · Operational Status (opens in new tab) Major funding support from

Related documents

• False data injection attack (FDIA): An overview and new metrics for fair evaluation of its countermeasure#680596
• Taipan: A Query-free Transfer-based Multiple Sensitive Attribute Inference Attack Solely from Auxiliary Graphs#1142618
• Capacitive Touchscreens at Risk: A Practical Side-Channel Attack on Smartphones via Electromagnetic Emanations#187243
• Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks#259572
• A taxonomy of attacks on the exposure notification system used by contact tracing applications#365633