{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:2SI3JKQH6E5HHDBD5KGCXSWTC3","short_pith_number":"pith:2SI3JKQH","canonical_record":{"source":{"id":"2408.07362","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-14T08:19:23Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"2a33ae9cf6988f12e46f6bf81957682e495b8f4b51ba37f6396daa71ab2e5769","abstract_canon_sha256":"b279b8212f9eb8bf00812d56a6e3c91532fa5bd3bafc5d10d3e047e21b08736f"},"schema_version":"1.0"},"canonical_sha256":"d491b4aa07f13a738c23ea8c2bcad316cbb28df05044ce0efdbeee9514d104f0","source":{"kind":"arxiv","id":"2408.07362","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.07362","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"arxiv_version","alias_value":"2408.07362v2","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.07362","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"pith_short_12","alias_value":"2SI3JKQH6E5H","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"pith_short_16","alias_value":"2SI3JKQH6E5HHDBD","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"pith_short_8","alias_value":"2SI3JKQH","created_at":"2026-07-05T09:01:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:2SI3JKQH6E5HHDBD5KGCXSWTC3","target":"record","payload":{"canonical_record":{"source":{"id":"2408.07362","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-14T08:19:23Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"2a33ae9cf6988f12e46f6bf81957682e495b8f4b51ba37f6396daa71ab2e5769","abstract_canon_sha256":"b279b8212f9eb8bf00812d56a6e3c91532fa5bd3bafc5d10d3e047e21b08736f"},"schema_version":"1.0"},"canonical_sha256":"d491b4aa07f13a738c23ea8c2bcad316cbb28df05044ce0efdbeee9514d104f0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:01:37.593617Z","signature_b64":"L0miXvqkwn4dv8CptiMJwaBAqrC8kbvicjxs9weQXswvlh29WzI5wfM0ty4i+hA3JEbmINoVXkubNWAyk0egCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d491b4aa07f13a738c23ea8c2bcad316cbb28df05044ce0efdbeee9514d104f0","last_reissued_at":"2026-07-05T09:01:37.593081Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:01:37.593081Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.07362","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:01:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"36yyFfy4WpeM5op8bmlrzHJgIC0fSyTlGUgq7dR34EYUAJvFI8RvOM2J9k2KesQC2iGQAgV9gmd9cUtXsQQpBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:25:00.874883Z"},"content_sha256":"5e7dc4ff6d08831a28a802feb9f5b573e510662b9bd6a13089802b8738467293","schema_version":"1.0","event_id":"sha256:5e7dc4ff6d08831a28a802feb9f5b573e510662b9bd6a13089802b8738467293"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:2SI3JKQH6E5HHDBD5KGCXSWTC3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BadMerging: Backdoor Attacks Against Model Merging","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Jianfeng Chi, Jinghuai Zhang, Kunlin Cai, Yang Zhang, Yuan Tian, Zheng Li","submitted_at":"2024-08-14T08:19:23Z","abstract_excerpt":"Fine-tuning pre-trained models for downstream tasks has led to a proliferation of open-sourced task-specific models. Recently, Model Merging (MM) has emerged as an effective approach to facilitate knowledge transfer among these independently fine-tuned models. MM directly combines multiple fine-tuned task-specific models into a merged model without additional training, and the resulting model shows enhanced capabilities in multiple tasks. Although MM provides great utility, it may come with security risks because an adversary can exploit MM to affect multiple downstream tasks. However, the sec"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.07362","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.07362/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:01:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gQ5Ex5dSS1WtsNKPudddlec4mhENKDqZOTCmOOBS5hbRHRyXQ7/1dfZsnXqYPJPt19GzhVc2nwY/tPh4ryUuBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:25:00.875380Z"},"content_sha256":"db8beda19e09988d242b49b46362aae4074d1efe5d82521514774e3015a547b5","schema_version":"1.0","event_id":"sha256:db8beda19e09988d242b49b46362aae4074d1efe5d82521514774e3015a547b5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2SI3JKQH6E5HHDBD5KGCXSWTC3/bundle.json","state_url":"https://pith.science/pith/2SI3JKQH6E5HHDBD5KGCXSWTC3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2SI3JKQH6E5HHDBD5KGCXSWTC3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T16:25:00Z","links":{"resolver":"https://pith.science/pith/2SI3JKQH6E5HHDBD5KGCXSWTC3","bundle":"https://pith.science/pith/2SI3JKQH6E5HHDBD5KGCXSWTC3/bundle.json","state":"https://pith.science/pith/2SI3JKQH6E5HHDBD5KGCXSWTC3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2SI3JKQH6E5HHDBD5KGCXSWTC3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2SI3JKQH6E5HHDBD5KGCXSWTC3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b279b8212f9eb8bf00812d56a6e3c91532fa5bd3bafc5d10d3e047e21b08736f","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-14T08:19:23Z","title_canon_sha256":"2a33ae9cf6988f12e46f6bf81957682e495b8f4b51ba37f6396daa71ab2e5769"},"schema_version":"1.0","source":{"id":"2408.07362","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.07362","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"arxiv_version","alias_value":"2408.07362v2","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.07362","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"pith_short_12","alias_value":"2SI3JKQH6E5H","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"pith_short_16","alias_value":"2SI3JKQH6E5HHDBD","created_at":"2026-07-05T09:01:37Z"},{"alias_kind":"pith_short_8","alias_value":"2SI3JKQH","created_at":"2026-07-05T09:01:37Z"}],"graph_snapshots":[{"event_id":"sha256:db8beda19e09988d242b49b46362aae4074d1efe5d82521514774e3015a547b5","target":"graph","created_at":"2026-07-05T09:01:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.07362/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Fine-tuning pre-trained models for downstream tasks has led to a proliferation of open-sourced task-specific models. Recently, Model Merging (MM) has emerged as an effective approach to facilitate knowledge transfer among these independently fine-tuned models. MM directly combines multiple fine-tuned task-specific models into a merged model without additional training, and the resulting model shows enhanced capabilities in multiple tasks. Although MM provides great utility, it may come with security risks because an adversary can exploit MM to affect multiple downstream tasks. However, the sec","authors_text":"Jianfeng Chi, Jinghuai Zhang, Kunlin Cai, Yang Zhang, Yuan Tian, Zheng Li","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-14T08:19:23Z","title":"BadMerging: Backdoor Attacks Against Model Merging"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.07362","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5e7dc4ff6d08831a28a802feb9f5b573e510662b9bd6a13089802b8738467293","target":"record","created_at":"2026-07-05T09:01:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b279b8212f9eb8bf00812d56a6e3c91532fa5bd3bafc5d10d3e047e21b08736f","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-14T08:19:23Z","title_canon_sha256":"2a33ae9cf6988f12e46f6bf81957682e495b8f4b51ba37f6396daa71ab2e5769"},"schema_version":"1.0","source":{"id":"2408.07362","kind":"arxiv","version":2}},"canonical_sha256":"d491b4aa07f13a738c23ea8c2bcad316cbb28df05044ce0efdbeee9514d104f0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d491b4aa07f13a738c23ea8c2bcad316cbb28df05044ce0efdbeee9514d104f0","first_computed_at":"2026-07-05T09:01:37.593081Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:01:37.593081Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L0miXvqkwn4dv8CptiMJwaBAqrC8kbvicjxs9weQXswvlh29WzI5wfM0ty4i+hA3JEbmINoVXkubNWAyk0egCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:01:37.593617Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.07362","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5e7dc4ff6d08831a28a802feb9f5b573e510662b9bd6a13089802b8738467293","sha256:db8beda19e09988d242b49b46362aae4074d1efe5d82521514774e3015a547b5"],"state_sha256":"5a6dd60929c53e07768870ee7a77fddb7d64ce27fd3c07a2ff20c2e53d74b791"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L4+INVzx0PYo/dBrYJCKFGOHzx+zqYlFg4gmbGaOzYcUCw4hgwZrqCRdzXDDRY8NMLrC21gnXzBbaZgSUCGBAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T16:25:00.878700Z","bundle_sha256":"5e0918090370708c96f11626ce36e8ccebd67607549361ec10d23b0feb306d27"}}