{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:2BY2GJAYZTIOQSPGXHQ7CHNWQF","short_pith_number":"pith:2BY2GJAY","canonical_record":{"source":{"id":"2305.16444","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-25T19:42:51Z","cross_cats_sorted":[],"title_canon_sha256":"d73969adb7891be0ab19fa15f85f6e7b91cb04b7ab1b467c719a39fd9819bda2","abstract_canon_sha256":"577808e735c70dd240dd4389e10d9abbe4e11a51c4e9f236e85a3b7e032cda0f"},"schema_version":"1.0"},"canonical_sha256":"d071a32418ccd0e849e6b9e1f11db68165a328239c9b8b9e2d5b6ba1a8597505","source":{"kind":"arxiv","id":"2305.16444","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.16444","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"arxiv_version","alias_value":"2305.16444v1","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.16444","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"pith_short_12","alias_value":"2BY2GJAYZTIO","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"pith_short_16","alias_value":"2BY2GJAYZTIOQSPG","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"pith_short_8","alias_value":"2BY2GJAY","created_at":"2026-07-05T06:14:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:2BY2GJAYZTIOQSPGXHQ7CHNWQF","target":"record","payload":{"canonical_record":{"source":{"id":"2305.16444","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-25T19:42:51Z","cross_cats_sorted":[],"title_canon_sha256":"d73969adb7891be0ab19fa15f85f6e7b91cb04b7ab1b467c719a39fd9819bda2","abstract_canon_sha256":"577808e735c70dd240dd4389e10d9abbe4e11a51c4e9f236e85a3b7e032cda0f"},"schema_version":"1.0"},"canonical_sha256":"d071a32418ccd0e849e6b9e1f11db68165a328239c9b8b9e2d5b6ba1a8597505","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:14:13.064652Z","signature_b64":"Jmiccb0/TAB4rQ8fiPjoT8STORqcQd+t63byPwYk9IbbExNVzcP6fm2p51ehXY+o/7QAxz+5justoN5mJR+hCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d071a32418ccd0e849e6b9e1f11db68165a328239c9b8b9e2d5b6ba1a8597505","last_reissued_at":"2026-07-05T06:14:13.064183Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:14:13.064183Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.16444","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:14:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e8B3mvFhm3Znq2aYLutGIgT9XJeVRe/7oAkwTZ/WKUwpRG/fHf6HGeTB/DlKHWS202JQSoPZiW/g4Ni/21FPCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:32:59.917737Z"},"content_sha256":"7719f1321a7c25353b0923ce4e443840762c302b9f28405b682decb7ca605b53","schema_version":"1.0","event_id":"sha256:7719f1321a7c25353b0923ce4e443840762c302b9f28405b682decb7ca605b53"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:2BY2GJAYZTIOQSPGXHQ7CHNWQF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Alakananda Vempala, Ashim Gupta, Carter Wood Blum, Shalin Shah, Temma Choji, Vivek Srikumar, Yingjie Fei","submitted_at":"2023-05-25T19:42:51Z","abstract_excerpt":"Can language models transform inputs to protect text classifiers against adversarial attacks? In this work, we present ATINTER, a model that intercepts and learns to rewrite adversarial inputs to make them non-adversarial for a downstream text classifier. Our experiments on four datasets and five attack mechanisms reveal that ATINTER is effective at providing better adversarial robustness than existing defense approaches, without compromising task accuracy. For example, on sentiment classification using the SST-2 dataset, our method improves the adversarial accuracy over the best existing defe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.16444","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.16444/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:14:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kdokespHtWYE+UQaoOV4JDtIETr6Oka8jMPjfXsgqXbjy+vu+Znef4REJfgezYm06j6JSL/iRNVYeFiQw9NLCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:32:59.918272Z"},"content_sha256":"5ec24a08301ab605d71e712664bd713adf90d9b9c8bfb594b13bf995bf2deddb","schema_version":"1.0","event_id":"sha256:5ec24a08301ab605d71e712664bd713adf90d9b9c8bfb594b13bf995bf2deddb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2BY2GJAYZTIOQSPGXHQ7CHNWQF/bundle.json","state_url":"https://pith.science/pith/2BY2GJAYZTIOQSPGXHQ7CHNWQF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2BY2GJAYZTIOQSPGXHQ7CHNWQF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:32:59Z","links":{"resolver":"https://pith.science/pith/2BY2GJAYZTIOQSPGXHQ7CHNWQF","bundle":"https://pith.science/pith/2BY2GJAYZTIOQSPGXHQ7CHNWQF/bundle.json","state":"https://pith.science/pith/2BY2GJAYZTIOQSPGXHQ7CHNWQF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2BY2GJAYZTIOQSPGXHQ7CHNWQF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:2BY2GJAYZTIOQSPGXHQ7CHNWQF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"577808e735c70dd240dd4389e10d9abbe4e11a51c4e9f236e85a3b7e032cda0f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-25T19:42:51Z","title_canon_sha256":"d73969adb7891be0ab19fa15f85f6e7b91cb04b7ab1b467c719a39fd9819bda2"},"schema_version":"1.0","source":{"id":"2305.16444","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.16444","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"arxiv_version","alias_value":"2305.16444v1","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.16444","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"pith_short_12","alias_value":"2BY2GJAYZTIO","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"pith_short_16","alias_value":"2BY2GJAYZTIOQSPG","created_at":"2026-07-05T06:14:13Z"},{"alias_kind":"pith_short_8","alias_value":"2BY2GJAY","created_at":"2026-07-05T06:14:13Z"}],"graph_snapshots":[{"event_id":"sha256:5ec24a08301ab605d71e712664bd713adf90d9b9c8bfb594b13bf995bf2deddb","target":"graph","created_at":"2026-07-05T06:14:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.16444/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Can language models transform inputs to protect text classifiers against adversarial attacks? In this work, we present ATINTER, a model that intercepts and learns to rewrite adversarial inputs to make them non-adversarial for a downstream text classifier. Our experiments on four datasets and five attack mechanisms reveal that ATINTER is effective at providing better adversarial robustness than existing defense approaches, without compromising task accuracy. For example, on sentiment classification using the SST-2 dataset, our method improves the adversarial accuracy over the best existing defe","authors_text":"Alakananda Vempala, Ashim Gupta, Carter Wood Blum, Shalin Shah, Temma Choji, Vivek Srikumar, Yingjie Fei","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-25T19:42:51Z","title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.16444","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7719f1321a7c25353b0923ce4e443840762c302b9f28405b682decb7ca605b53","target":"record","created_at":"2026-07-05T06:14:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"577808e735c70dd240dd4389e10d9abbe4e11a51c4e9f236e85a3b7e032cda0f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-25T19:42:51Z","title_canon_sha256":"d73969adb7891be0ab19fa15f85f6e7b91cb04b7ab1b467c719a39fd9819bda2"},"schema_version":"1.0","source":{"id":"2305.16444","kind":"arxiv","version":1}},"canonical_sha256":"d071a32418ccd0e849e6b9e1f11db68165a328239c9b8b9e2d5b6ba1a8597505","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d071a32418ccd0e849e6b9e1f11db68165a328239c9b8b9e2d5b6ba1a8597505","first_computed_at":"2026-07-05T06:14:13.064183Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:14:13.064183Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Jmiccb0/TAB4rQ8fiPjoT8STORqcQd+t63byPwYk9IbbExNVzcP6fm2p51ehXY+o/7QAxz+5justoN5mJR+hCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:14:13.064652Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.16444","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7719f1321a7c25353b0923ce4e443840762c302b9f28405b682decb7ca605b53","sha256:5ec24a08301ab605d71e712664bd713adf90d9b9c8bfb594b13bf995bf2deddb"],"state_sha256":"4d3a55369fe3e5e679031778cc545ae6bf14fec82bfbb018e04255d49260ab70"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F7S49VtB5NlFJ9f1QiJxCSKsv8HJNQmE2YkQii67OK8F9oxAd2X3OdL6q2Y+QQZTBNOi1eYjoESbPzGBKUWeDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:32:59.923287Z","bundle_sha256":"e428b89cec87a512fef62294fd42d748e62f1b0f95858a5b55439cfdeb3fe55f"}}