Skip to contents

Combinator that limits the privacy loss of an odometer.

Usage

make_privacy_filter(odometer, d_in, d_out)

Arguments

odometer

A privacy odometer

d_in

Upper bound on the distance between adjacent datasets

d_out

Upper bound on the privacy loss

Value

Measurement

Details

Adjusts the queryable returned by the odometer to reject any query that would increase the total privacy loss above the privacy guarantee of the mechanism.

Required features: contrib

make_privacy_filter in Rust documentation.

Supporting Elements:

  • Input Domain: DI

  • Output Type: MI

  • Input Metric: MO

  • Output Measure: OdometerQueryable<Q, A, MI::Distance, MO::Distance>

Proof Definition:

(Proof Document)