{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:2KYVOA336V2AHJGOMIBGTOYM5S","short_pith_number":"pith:2KYVOA33","canonical_record":{"source":{"id":"2306.12043","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-21T06:20:51Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7b7f10265737002712a359eee0102784889ab3bdeeb7300eb05e3d86429c2ef9","abstract_canon_sha256":"69a5bfd077dd5374a9b37a427371e86458f03b196c18c48a5c8e3ddfe4602166"},"schema_version":"1.0"},"canonical_sha256":"d2b157037bf57403a4ce620269bb0cec95175b1c25ca2e772753bb43c464106d","source":{"kind":"arxiv","id":"2306.12043","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.12043","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"arxiv_version","alias_value":"2306.12043v1","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.12043","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_12","alias_value":"2KYVOA336V2A","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_16","alias_value":"2KYVOA336V2AHJGO","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_8","alias_value":"2KYVOA33","created_at":"2026-07-05T06:24:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:2KYVOA336V2AHJGOMIBGTOYM5S","target":"record","payload":{"canonical_record":{"source":{"id":"2306.12043","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-21T06:20:51Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7b7f10265737002712a359eee0102784889ab3bdeeb7300eb05e3d86429c2ef9","abstract_canon_sha256":"69a5bfd077dd5374a9b37a427371e86458f03b196c18c48a5c8e3ddfe4602166"},"schema_version":"1.0"},"canonical_sha256":"d2b157037bf57403a4ce620269bb0cec95175b1c25ca2e772753bb43c464106d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:24:01.178242Z","signature_b64":"nV+0WuH32ofg7nGHh5A9r3Y3KfKS2I8oLqpR9iN1nAa4E3yLA8aBfHTy6miSRNofFnZEpqWn0hSQLE8YkpKcDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d2b157037bf57403a4ce620269bb0cec95175b1c25ca2e772753bb43c464106d","last_reissued_at":"2026-07-05T06:24:01.177898Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:24:01.177898Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.12043","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:24:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AC/d5nk1qBzbMdvrl66AWBeqFBktIaFkf1pGN5fmnxp97BuaVMRpykg7VeIdSurhZcKyaD7z2m9y9EbhMeoLDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T05:57:00.740261Z"},"content_sha256":"5d132982b6492d6c247241b38898568458c4b0a5d913cede931117de3664ca01","schema_version":"1.0","event_id":"sha256:5d132982b6492d6c247241b38898568458c4b0a5d913cede931117de3664ca01"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:2KYVOA336V2AHJGOMIBGTOYM5S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sample Attackability in Natural Language Adversarial Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Mark Gales, Vyas Raina","submitted_at":"2023-06-21T06:20:51Z","abstract_excerpt":"Adversarial attack research in natural language processing (NLP) has made significant progress in designing powerful attack methods and defence approaches. However, few efforts have sought to identify which source samples are the most attackable or robust, i.e. can we determine for an unseen target model, which samples are the most vulnerable to an adversarial attack. This work formally extends the definition of sample attackability/robustness for NLP attacks. Experiments on two popular NLP datasets, four state of the art models and four different NLP adversarial attack methods, demonstrate th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.12043","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.12043/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:24:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hxmTBam+9SU9ob28Eb4f5sLLkN0PZ23ppcYK7mZ+jXzyTHOeQJyqQlhdDkRg2Hc2bENsiZLETOcGBELGBKUjBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T05:57:00.741181Z"},"content_sha256":"733413fee1b512562ba49879597991c903eb87f64c1fb5af4e25db9eb4f85099","schema_version":"1.0","event_id":"sha256:733413fee1b512562ba49879597991c903eb87f64c1fb5af4e25db9eb4f85099"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2KYVOA336V2AHJGOMIBGTOYM5S/bundle.json","state_url":"https://pith.science/pith/2KYVOA336V2AHJGOMIBGTOYM5S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2KYVOA336V2AHJGOMIBGTOYM5S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T05:57:00Z","links":{"resolver":"https://pith.science/pith/2KYVOA336V2AHJGOMIBGTOYM5S","bundle":"https://pith.science/pith/2KYVOA336V2AHJGOMIBGTOYM5S/bundle.json","state":"https://pith.science/pith/2KYVOA336V2AHJGOMIBGTOYM5S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2KYVOA336V2AHJGOMIBGTOYM5S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:2KYVOA336V2AHJGOMIBGTOYM5S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"69a5bfd077dd5374a9b37a427371e86458f03b196c18c48a5c8e3ddfe4602166","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-21T06:20:51Z","title_canon_sha256":"7b7f10265737002712a359eee0102784889ab3bdeeb7300eb05e3d86429c2ef9"},"schema_version":"1.0","source":{"id":"2306.12043","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.12043","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"arxiv_version","alias_value":"2306.12043v1","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.12043","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_12","alias_value":"2KYVOA336V2A","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_16","alias_value":"2KYVOA336V2AHJGO","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_8","alias_value":"2KYVOA33","created_at":"2026-07-05T06:24:01Z"}],"graph_snapshots":[{"event_id":"sha256:733413fee1b512562ba49879597991c903eb87f64c1fb5af4e25db9eb4f85099","target":"graph","created_at":"2026-07-05T06:24:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.12043/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attack research in natural language processing (NLP) has made significant progress in designing powerful attack methods and defence approaches. However, few efforts have sought to identify which source samples are the most attackable or robust, i.e. can we determine for an unseen target model, which samples are the most vulnerable to an adversarial attack. This work formally extends the definition of sample attackability/robustness for NLP attacks. Experiments on two popular NLP datasets, four state of the art models and four different NLP adversarial attack methods, demonstrate th","authors_text":"Mark Gales, Vyas Raina","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-21T06:20:51Z","title":"Sample Attackability in Natural Language Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.12043","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5d132982b6492d6c247241b38898568458c4b0a5d913cede931117de3664ca01","target":"record","created_at":"2026-07-05T06:24:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"69a5bfd077dd5374a9b37a427371e86458f03b196c18c48a5c8e3ddfe4602166","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-21T06:20:51Z","title_canon_sha256":"7b7f10265737002712a359eee0102784889ab3bdeeb7300eb05e3d86429c2ef9"},"schema_version":"1.0","source":{"id":"2306.12043","kind":"arxiv","version":1}},"canonical_sha256":"d2b157037bf57403a4ce620269bb0cec95175b1c25ca2e772753bb43c464106d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d2b157037bf57403a4ce620269bb0cec95175b1c25ca2e772753bb43c464106d","first_computed_at":"2026-07-05T06:24:01.177898Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:24:01.177898Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nV+0WuH32ofg7nGHh5A9r3Y3KfKS2I8oLqpR9iN1nAa4E3yLA8aBfHTy6miSRNofFnZEpqWn0hSQLE8YkpKcDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:24:01.178242Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.12043","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5d132982b6492d6c247241b38898568458c4b0a5d913cede931117de3664ca01","sha256:733413fee1b512562ba49879597991c903eb87f64c1fb5af4e25db9eb4f85099"],"state_sha256":"2ee9e9e6a0bb262dda709eb60661fea00923abb05242cba81720c7fb93054447"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LPfnXnEo9VOlAQ+8VYkPlt1bUMvrdmcNtCYp6lLeZoI87WbWiXfzDi76rngjpCEYGl4YnIbJ2xTqiFZ5bv0wBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T05:57:00.746580Z","bundle_sha256":"73e047a4d34a442c50be031d443cb425b4d197799967f8922bbc9d273dc6d429"}}