Summary abstract introduction core_assumptions efficiency_and_effectiveness privacy robustness fairness conclusion appendix_a appendix_b