{"id":"06d6073c2977dc1f49ef9b5b23d32a5e92eb5b63d0bf580741f69d79b56d7fa6","title":"arXiv paper: AEGIS aims to mask identity in animated 3D facial avatars","argument":"Authors Dawid Wolkiewicz, Anastasiya Pechko, Przemysław Spurek and Piotr Syga present AEGIS, a method for hiding a 3D facial avatar’s identity from automated face recognition. They target 3D Gaussian Splatting avatars, where identity protection needs to hold across different viewpoints and animation, rather than only in a single 2D image. AEGIS adds adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks. The authors say this embeds protection in the 3D representation without changing the avatar’s geometry or requiring retraining. In their evaluation against black-box recognizers, they report face retrieval and verification accuracy falling to near-zero while perceptual fidelity remains high. They also report preserving key facial attributes, including age, gender and emotion, and introduce a viewpoint-robust leakage metric to measure residual identity leakage across rendered viewpoints. The paper frames this as a response to identity theft risks in systems using biometric authentication. The supplied abstract does not give numerical evaluation results or identify the recognizers tested, so the reported performance cannot be assessed in detail from this evidence alone.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied abstract reports near-zero accuracy and high perceptual fidelity but gives no numerical evaluation results. The supplied abstract does not identify the black-box recognizers or provide the evaluation conditions.","speaker":{"name":"Wolkiewicz, Dawid, Pechko, Anastasiya, Spurek, Przemysław, Syga, Piotr","roleAtSource":"Article author"},"source":{"title":"AEGIS: Preserving Privacy of 3D Facial Avatars with Adversarial Perturbations","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2511.17747","publishedAt":"2025-11-21","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors present AEGIS as a framework for masking identity in 3D Gaussian avatars from automated face recognition.","excerpt":"we present AEGIS, the first privacy-preserving identity masking framework for 3D Gaussian avatars, concealing identity from automated face recognition","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"AEGIS applies adversarial perturbations to base (DC) color coefficients, guided by an ensemble of pre-trained face verification networks.","excerpt":"AEGIS applies adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"The authors report near-zero face retrieval and verification accuracy against black-box recognizers while maintaining high perceptual fidelity.","excerpt":"against black-box recognizers, AEGIS reduces face retrieval and verification accuracy to near-zero while maintaining high perceptual fidelity.","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"The authors introduce a metric for measuring identity leakage across rendered viewpoints.","excerpt":"a viewpoint-robust leakage metric that quantifies residual identity leakage across an avatar's rendered viewpoints","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"The authors describe identity theft as a risk associated with photorealistic 3D facial avatars, particularly in systems using biometric authentication.","excerpt":"introduces new risks of online identity theft, especially in systems that rely on biometric authentication.","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2511.17747","checkedAt":"2026-11-09T06:54:25.409Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which black-box recognizers and evaluation conditions underlie the reported near-zero face retrieval and verification accuracy?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv paper: AEGIS aims to mask identity in animated 3D facial avatars","summary":"Authors Dawid Wolkiewicz, Anastasiya Pechko, Przemysław Spurek and Piotr Syga present AEGIS, a method for hiding a 3D facial avatar’s identity from automated face recognition. They target 3D Gaussian Splatting avatars, where identity protection needs to hold across different viewpoints and animation, rather than only in a single 2D image. AEGIS adds adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks. The authors say this embeds protection in the 3D representation without changing the avatar’s geometry or requiring retraining. In their evaluation against black-box recognizers, they report face retrieval and verification accuracy falling to near-zero while perceptual fidelity remains high. They also report preserving key facial attributes, including age, gender and emotion, and introduce a viewpoint-robust leakage metric to measure residual identity leakage across rendered viewpoints. The paper frames this as a response to identity theft risks in systems using biometric authentication. The supplied abstract does not give numerical evaluation results or identify the recognizers tested, so the reported performance cannot be assessed in detail from this evidence alone.","question":"Which black-box recognizers and evaluation conditions underlie the reported near-zero face retrieval and verification accuracy?","claims":[{"text":"The authors present AEGIS as a framework for masking identity in 3D Gaussian avatars from automated face recognition.","excerpt":"we present AEGIS, the first privacy-preserving identity masking framework for 3D Gaussian avatars, concealing identity from automated face recognition","support":"source-stated"},{"text":"AEGIS applies adversarial perturbations to base (DC) color coefficients, guided by an ensemble of pre-trained face verification networks.","excerpt":"AEGIS applies adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks","support":"source-stated"},{"text":"The authors report near-zero face retrieval and verification accuracy against black-box recognizers while maintaining high perceptual fidelity.","excerpt":"against black-box recognizers, AEGIS reduces face retrieval and verification accuracy to near-zero while maintaining high perceptual fidelity.","support":"source-stated"},{"text":"The authors introduce a metric for measuring identity leakage across rendered viewpoints.","excerpt":"a viewpoint-robust leakage metric that quantifies residual identity leakage across an avatar's rendered viewpoints","support":"source-stated"},{"text":"The authors describe identity theft as a risk associated with photorealistic 3D facial avatars, particularly in systems using biometric authentication.","excerpt":"introduces new risks of online identity theft, especially in systems that rely on biometric authentication.","support":"source-stated"}],"limitations":["The supplied abstract reports near-zero accuracy and high perceptual fidelity but gives no numerical evaluation results.","The supplied abstract does not identify the black-box recognizers or provide the evaluation conditions."],"mediaId":"f482ca49abff6eefd56ac7fbef14d57b6a2a9c05d0d071c86eef299336363b32","correctionReason":null,"id":"06d6073c2977dc1f49ef9b5b23d32a5e92eb5b63d0bf580741f69d79b56d7fa6","publicationId":"2a70e9e9-a34b-4755-8d9c-75805b74d2c8","version":1,"sourceUrl":"https://arxiv.org/abs/2511.17747","sourceTitle":"AEGIS: Preserving Privacy of 3D Facial Avatars with Adversarial Perturbations","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2025-11-21","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:06:23.302Z","createdAt":"2026-11-09T06:39:45.590Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"f482ca49abff6eefd56ac7fbef14d57b6a2a9c05d0d071c86eef299336363b32","kind":"article","url":"https://arxiv.org/abs/2511.17747","sourceUrl":"https://arxiv.org/abs/2511.17747","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T06:39:04.557Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2511.17747","checkedAt":"2026-11-09T06:54:25.409Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"f482ca49abff6eefd56ac7fbef14d57b6a2a9c05d0d071c86eef299336363b32","confidence":0.76,"provider":"typesafe","model":"jev-1.13.0","inputHash":"4aec15ad92f44dcc1a406295099c43d69729d13d26c6caa521e43c27755545bd","decidedAt":"2026-11-09T06:39:05.138Z"},"provenance":{"textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observationId":"6e13ba364ec7f6ad9ce2690d315a26c17e4e20fa1dfd27cfbc558b779f0ec087","retrievedAt":"2026-11-09T06:39:04.476Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"cc06bb55-5cba-47f6-8997-b0fef18c251d"},"reviewer":{"model":"gpt-6-luna","runId":"761a6d91-d543-4001-8214-d0308c5cf000"}},"audit":{"status":"passed","reviewedAt":"2026-11-09T06:39:45.590Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Wolkiewicz, Dawid","url":null,"kind":"unknown"},{"name":"Pechko, Anastasiya","url":null,"kind":"unknown"},{"name":"Spurek, Przemysław","url":null,"kind":"unknown"},{"name":"Syga, Piotr","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Wolkiewicz, Dawid","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Wolkiewicz, Dawid","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}},{"actor":{"name":"Pechko, Anastasiya","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Pechko, Anastasiya","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}},{"actor":{"name":"Spurek, Przemysław","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Spurek, Przemysław","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}},{"actor":{"name":"Syga, Piotr","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Syga, Piotr","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}}],"participationCoverage":{"total":4,"returned":4,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2511.17747","snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z","basis":"publisher-page-metadata","sourceLinks":45,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/06d6073c2977dc1f49ef9b5b23d32a5e92eb5b63d0bf580741f69d79b56d7fa6/source"}},"canonicalUrl":"https://escapemeridian.com/readings/arxiv-paper-aegis-aims-to-mask-identity-in-animated-3d-facial-06d6073c","formats":{"html":"/readings/arxiv-paper-aegis-aims-to-mask-identity-in-animated-3d-facial-06d6073c","markdown":"/readings/arxiv-paper-aegis-aims-to-mask-identity-in-animated-3d-facial-06d6073c.md","json":"/readings/arxiv-paper-aegis-aims-to-mask-identity-in-animated-3d-facial-06d6073c.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-pre-training","name":"Pre-training","explanation":"A model's initial training on a large dataset, before further adaptation for particular uses.","referenceUrl":"https://developers.google.com/machine-learning/glossary#pre-training"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"06d6073c2977dc1f49ef9b5b23d32a5e92eb5b63d0bf580741f69d79b56d7fa6","revision":"2a70e9e9-a34b-4755-8d9c-75805b74d2c8","revisionKind":"publication-id","title":"arXiv paper: AEGIS aims to mask identity in animated 3D facial avatars","url":"https://escapemeridian.com/readings/arxiv-paper-aegis-aims-to-mask-identity-in-animated-3d-facial-06d6073c"},"source":{"type":"source","id":"https://arxiv.org/abs/2511.17747","revision":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","revisionKind":"sha256-source-text","title":"AEGIS: Preserving Privacy of 3D Facial Avatars with Adversarial Perturbations","url":"https://arxiv.org/abs/2511.17747"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"06d6073c2977dc1f49ef9b5b23d32a5e92eb5b63d0bf580741f69d79b56d7fa6","title":"arXiv paper: AEGIS aims to mask identity in animated 3D facial avatars","argument":"Authors Dawid Wolkiewicz, Anastasiya Pechko, Przemysław Spurek and Piotr Syga present AEGIS, a method for hiding a 3D facial avatar’s identity from automated face recognition. They target 3D Gaussian Splatting avatars, where identity protection needs to hold across different viewpoints and animation, rather than only in a single 2D image. AEGIS adds adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks. The authors say this embeds protection in the 3D representation without changing the avatar’s geometry or requiring retraining. In their evaluation against black-box recognizers, they report face retrieval and verification accuracy falling to near-zero while perceptual fidelity remains high. They also report preserving key facial attributes, including age, gender and emotion, and introduce a viewpoint-robust leakage metric to measure residual identity leakage across rendered viewpoints. The paper frames this as a response to identity theft risks in systems using biometric authentication. The supplied abstract does not give numerical evaluation results or identify the recognizers tested, so the reported performance cannot be assessed in detail from this evidence alone.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied abstract reports near-zero accuracy and high perceptual fidelity but gives no numerical evaluation results. The supplied abstract does not identify the black-box recognizers or provide the evaluation conditions.","speaker":{"name":"Wolkiewicz, Dawid, Pechko, Anastasiya, Spurek, Przemysław, Syga, Piotr","roleAtSource":"Article author"},"source":{"title":"AEGIS: Preserving Privacy of 3D Facial Avatars with Adversarial Perturbations","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2511.17747","publishedAt":"2025-11-21","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors present AEGIS as a framework for masking identity in 3D Gaussian avatars from automated face recognition.","excerpt":"we present AEGIS, the first privacy-preserving identity masking framework for 3D Gaussian avatars, concealing identity from automated face recognition","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"AEGIS applies adversarial perturbations to base (DC) color coefficients, guided by an ensemble of pre-trained face verification networks.","excerpt":"AEGIS applies adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"The authors report near-zero face retrieval and verification accuracy against black-box recognizers while maintaining high perceptual fidelity.","excerpt":"against black-box recognizers, AEGIS reduces face retrieval and verification accuracy to near-zero while maintaining high perceptual fidelity.","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"The authors introduce a metric for measuring identity leakage across rendered viewpoints.","excerpt":"a viewpoint-robust leakage metric that quantifies residual identity leakage across an avatar's rendered viewpoints","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"},{"text":"The authors describe identity theft as a risk associated with photorealistic 3D facial avatars, particularly in systems using biometric authentication.","excerpt":"introduces new risks of online identity theft, especially in systems that rely on biometric authentication.","url":"https://arxiv.org/abs/2511.17747","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2511.17747","checkedAt":"2026-11-09T06:54:25.409Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which black-box recognizers and evaluation conditions underlie the reported near-zero face retrieval and verification accuracy?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv paper: AEGIS aims to mask identity in animated 3D facial avatars","summary":"Authors Dawid Wolkiewicz, Anastasiya Pechko, Przemysław Spurek and Piotr Syga present AEGIS, a method for hiding a 3D facial avatar’s identity from automated face recognition. They target 3D Gaussian Splatting avatars, where identity protection needs to hold across different viewpoints and animation, rather than only in a single 2D image. AEGIS adds adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks. The authors say this embeds protection in the 3D representation without changing the avatar’s geometry or requiring retraining. In their evaluation against black-box recognizers, they report face retrieval and verification accuracy falling to near-zero while perceptual fidelity remains high. They also report preserving key facial attributes, including age, gender and emotion, and introduce a viewpoint-robust leakage metric to measure residual identity leakage across rendered viewpoints. The paper frames this as a response to identity theft risks in systems using biometric authentication. The supplied abstract does not give numerical evaluation results or identify the recognizers tested, so the reported performance cannot be assessed in detail from this evidence alone.","question":"Which black-box recognizers and evaluation conditions underlie the reported near-zero face retrieval and verification accuracy?","claims":[{"text":"The authors present AEGIS as a framework for masking identity in 3D Gaussian avatars from automated face recognition.","excerpt":"we present AEGIS, the first privacy-preserving identity masking framework for 3D Gaussian avatars, concealing identity from automated face recognition","support":"source-stated"},{"text":"AEGIS applies adversarial perturbations to base (DC) color coefficients, guided by an ensemble of pre-trained face verification networks.","excerpt":"AEGIS applies adversarial perturbations to the base (DC) color coefficients of the Gaussian primitives, guided by an ensemble of pre-trained face verification networks","support":"source-stated"},{"text":"The authors report near-zero face retrieval and verification accuracy against black-box recognizers while maintaining high perceptual fidelity.","excerpt":"against black-box recognizers, AEGIS reduces face retrieval and verification accuracy to near-zero while maintaining high perceptual fidelity.","support":"source-stated"},{"text":"The authors introduce a metric for measuring identity leakage across rendered viewpoints.","excerpt":"a viewpoint-robust leakage metric that quantifies residual identity leakage across an avatar's rendered viewpoints","support":"source-stated"},{"text":"The authors describe identity theft as a risk associated with photorealistic 3D facial avatars, particularly in systems using biometric authentication.","excerpt":"introduces new risks of online identity theft, especially in systems that rely on biometric authentication.","support":"source-stated"}],"limitations":["The supplied abstract reports near-zero accuracy and high perceptual fidelity but gives no numerical evaluation results.","The supplied abstract does not identify the black-box recognizers or provide the evaluation conditions."],"mediaId":"f482ca49abff6eefd56ac7fbef14d57b6a2a9c05d0d071c86eef299336363b32","correctionReason":null,"id":"06d6073c2977dc1f49ef9b5b23d32a5e92eb5b63d0bf580741f69d79b56d7fa6","publicationId":"2a70e9e9-a34b-4755-8d9c-75805b74d2c8","version":1,"sourceUrl":"https://arxiv.org/abs/2511.17747","sourceTitle":"AEGIS: Preserving Privacy of 3D Facial Avatars with Adversarial Perturbations","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2025-11-21","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:06:23.302Z","createdAt":"2026-11-09T06:39:45.590Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"f482ca49abff6eefd56ac7fbef14d57b6a2a9c05d0d071c86eef299336363b32","kind":"article","url":"https://arxiv.org/abs/2511.17747","sourceUrl":"https://arxiv.org/abs/2511.17747","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T06:39:04.557Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2511.17747","checkedAt":"2026-11-09T06:54:25.409Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"f482ca49abff6eefd56ac7fbef14d57b6a2a9c05d0d071c86eef299336363b32","confidence":0.76,"provider":"typesafe","model":"jev-1.13.0","inputHash":"4aec15ad92f44dcc1a406295099c43d69729d13d26c6caa521e43c27755545bd","decidedAt":"2026-11-09T06:39:05.138Z"},"provenance":{"textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observationId":"6e13ba364ec7f6ad9ce2690d315a26c17e4e20fa1dfd27cfbc558b779f0ec087","retrievedAt":"2026-11-09T06:39:04.476Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"cc06bb55-5cba-47f6-8997-b0fef18c251d"},"reviewer":{"model":"gpt-6-luna","runId":"761a6d91-d543-4001-8214-d0308c5cf000"}},"audit":{"status":"passed","reviewedAt":"2026-11-09T06:39:45.590Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Wolkiewicz, Dawid","url":null,"kind":"unknown"},{"name":"Pechko, Anastasiya","url":null,"kind":"unknown"},{"name":"Spurek, Przemysław","url":null,"kind":"unknown"},{"name":"Syga, Piotr","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Wolkiewicz, Dawid","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Wolkiewicz, Dawid","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}},{"actor":{"name":"Pechko, Anastasiya","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Pechko, Anastasiya","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}},{"actor":{"name":"Spurek, Przemysław","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Spurek, Przemysław","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}},{"actor":{"name":"Syga, Piotr","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Syga, Piotr","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2511.17747","locator":"head/meta[name=author|citation_author]"},"assertionId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T06:54:25.409Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","sourceUrl":"https://arxiv.org/abs/2511.17747","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z"}}],"participationCoverage":{"total":4,"returned":4,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2511.17747","snapshotId":"3c176615af7690140e7613fc08115ad32d5b49764b7e92b6793a72cb0512b049","contentSha256":"1857f30105a56f3b29e7f6ad94b7a5e267a6f5f0fa20f0af111f12bb632051c1","textHash":"ef83adb2ba8005f8293bd53a6a10bc82eb8bdafe42a16bfe41e8cd0a100490d6","observedAt":"2026-11-09T06:54:25.409Z","basis":"publisher-page-metadata","sourceLinks":45,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/06d6073c2977dc1f49ef9b5b23d32a5e92eb5b63d0bf580741f69d79b56d7fa6/source"}}}],"audits":[{"publicationId":"2a70e9e9-a34b-4755-8d9c-75805b74d2c8","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading correctly names the four listed authors and keeps the method, results and identity-theft framing attributed to them ('they report', 'the authors say'). It identifies the source as an arXiv paper, which matches the page.","excerpt":"Authors:Dawid Wolkiewicz, Anastasiya Pechko, Przemysław Spurek, Piotr Syga"},{"dimension":"summary","status":"pass","explanation":"The title, summary and question faithfully convey the abstract: what AEGIS does, how it works, the reported results, the new metric and the motivation. It opens with a plain-language goal (hiding an avatar's identity from automated face recognition) that a general reader can follow. Technical terms such as 3D Gaussian Splatting, adversarial perturbations and DC color coefficients are kept exactly, in line with the term-tooltip policy. The question addresses a real gap left by the abstract.","excerpt":"concealing identity from automated face recognition while preserving the avatar's perceptual realism and animation usability"},{"dimension":"date","status":"pass","explanation":"originalPublished is 2025-11-21. This matches the v1 submission date. It is not the later v2 revision date (4 Nov 2026) or the feed date.","excerpt":"Submitted on 21 Nov 2025 (v1), last revised 4 Nov 2026 (this version, v2)"},{"dimension":"support","status":"pass","explanation":"Each claim, including no geometry change or retraining, near-zero accuracy, attribute preservation and the leakage metric, is stated in the abstract and presented as the authors' report. The limitations about missing numbers and unnamed recognizers are accurate. No benefits or impacts are invented beyond the source's framing.","excerpt":"without retraining or modifying the avatar's geometry. Evaluated against black-box recognizers, AEGIS reduces face retrieval and verification accuracy to near-zero"},{"dimension":"media","status":"pass","explanation":"The selected media is the verified arXiv abstract page for this paper. It is the direct original source, and it is the only supplied candidate.","excerpt":null}],"createdAt":"2026-11-09T06:39:45.590Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}