{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3F6PTKFOBWOKOIJ2EIJCJDTVOJ","short_pith_number":"pith:3F6PTKFO","canonical_record":{"source":{"id":"2505.11586","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-16T17:59:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e1dbb38084c99a35a281d7604bc1cfcab4718484d9dc9b45258ecbad8e75c76b","abstract_canon_sha256":"164364cf391038208cb2e90e4582578d6150f97bae06638b380f7e6ea6075f00"},"schema_version":"1.0"},"canonical_sha256":"d97cf9a8ae0d9ca7213a2212248e7572798f73a1781a518bf0d1eb10b686b053","source":{"kind":"arxiv","id":"2505.11586","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.11586","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"arxiv_version","alias_value":"2505.11586v1","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.11586","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"pith_short_12","alias_value":"3F6PTKFOBWOK","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"pith_short_16","alias_value":"3F6PTKFOBWOKOIJ2","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"pith_short_8","alias_value":"3F6PTKFO","created_at":"2026-07-05T11:04:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3F6PTKFOBWOKOIJ2EIJCJDTVOJ","target":"record","payload":{"canonical_record":{"source":{"id":"2505.11586","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-16T17:59:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e1dbb38084c99a35a281d7604bc1cfcab4718484d9dc9b45258ecbad8e75c76b","abstract_canon_sha256":"164364cf391038208cb2e90e4582578d6150f97bae06638b380f7e6ea6075f00"},"schema_version":"1.0"},"canonical_sha256":"d97cf9a8ae0d9ca7213a2212248e7572798f73a1781a518bf0d1eb10b686b053","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:04:24.098964Z","signature_b64":"x4WDF0YvvOHqL2VmX/mVLDZKEVWITF29EyCM12dP5+5osAj/ZOj0Iy5fAA08fh8k9q22rJTCXRHtN7joW48aAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d97cf9a8ae0d9ca7213a2212248e7572798f73a1781a518bf0d1eb10b686b053","last_reissued_at":"2026-07-05T11:04:24.098426Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:04:24.098426Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.11586","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e3/YOXB3s5SL/faNy3yV4U356/uhE+0szMrrL1AGqD1LzJMWWg/VHZKDwqg5lBwtQ8QDGDjfZVmxUXGnLgbXCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T16:36:54.450227Z"},"content_sha256":"b4826800403be6f1546ffdb36714ea97ef8f07f85934f0daeb2e40a9b8e3b7dd","schema_version":"1.0","event_id":"sha256:b4826800403be6f1546ffdb36714ea97ef8f07f85934f0daeb2e40a9b8e3b7dd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3F6PTKFOBWOKOIJ2EIJCJDTVOJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Guowen Xu, Hanxiao Chen, Hongwei Li, Rui Zhang, Wenbo Jiang, Yang Zhang, Yuan Zhang, Yun Shen","submitted_at":"2025-05-16T17:59:53Z","abstract_excerpt":"Recent research highlights concerns about the trustworthiness of third-party Pre-Trained Language Models (PTLMs) due to potential backdoor attacks. These backdoored PTLMs, however, are effective only for specific pre-defined downstream tasks. In reality, these PTLMs can be adapted to many other unrelated downstream tasks. Such adaptation may lead to unforeseen consequences in downstream model outputs, consequently raising user suspicion and compromising attack stealthiness. We refer to this phenomenon as backdoor complications. In this paper, we undertake the first comprehensive quantification"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.11586","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.11586/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QezaMEoSl750ztH0Hd8aoiDAx3CWKfcHpPX07zfmoM5DPHlVfllcqcrGcDBNEDcbjyLlP9ZyvMx4o3WW6/+7Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T16:36:54.450573Z"},"content_sha256":"137dd555691a235301944452553f948951d0751d845a7e816ca308135dca802e","schema_version":"1.0","event_id":"sha256:137dd555691a235301944452553f948951d0751d845a7e816ca308135dca802e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3F6PTKFOBWOKOIJ2EIJCJDTVOJ/bundle.json","state_url":"https://pith.science/pith/3F6PTKFOBWOKOIJ2EIJCJDTVOJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3F6PTKFOBWOKOIJ2EIJCJDTVOJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T16:36:54Z","links":{"resolver":"https://pith.science/pith/3F6PTKFOBWOKOIJ2EIJCJDTVOJ","bundle":"https://pith.science/pith/3F6PTKFOBWOKOIJ2EIJCJDTVOJ/bundle.json","state":"https://pith.science/pith/3F6PTKFOBWOKOIJ2EIJCJDTVOJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3F6PTKFOBWOKOIJ2EIJCJDTVOJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3F6PTKFOBWOKOIJ2EIJCJDTVOJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"164364cf391038208cb2e90e4582578d6150f97bae06638b380f7e6ea6075f00","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-16T17:59:53Z","title_canon_sha256":"e1dbb38084c99a35a281d7604bc1cfcab4718484d9dc9b45258ecbad8e75c76b"},"schema_version":"1.0","source":{"id":"2505.11586","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.11586","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"arxiv_version","alias_value":"2505.11586v1","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.11586","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"pith_short_12","alias_value":"3F6PTKFOBWOK","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"pith_short_16","alias_value":"3F6PTKFOBWOKOIJ2","created_at":"2026-07-05T11:04:24Z"},{"alias_kind":"pith_short_8","alias_value":"3F6PTKFO","created_at":"2026-07-05T11:04:24Z"}],"graph_snapshots":[{"event_id":"sha256:137dd555691a235301944452553f948951d0751d845a7e816ca308135dca802e","target":"graph","created_at":"2026-07-05T11:04:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.11586/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent research highlights concerns about the trustworthiness of third-party Pre-Trained Language Models (PTLMs) due to potential backdoor attacks. These backdoored PTLMs, however, are effective only for specific pre-defined downstream tasks. In reality, these PTLMs can be adapted to many other unrelated downstream tasks. Such adaptation may lead to unforeseen consequences in downstream model outputs, consequently raising user suspicion and compromising attack stealthiness. We refer to this phenomenon as backdoor complications. In this paper, we undertake the first comprehensive quantification","authors_text":"Guowen Xu, Hanxiao Chen, Hongwei Li, Rui Zhang, Wenbo Jiang, Yang Zhang, Yuan Zhang, Yun Shen","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-16T17:59:53Z","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.11586","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b4826800403be6f1546ffdb36714ea97ef8f07f85934f0daeb2e40a9b8e3b7dd","target":"record","created_at":"2026-07-05T11:04:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"164364cf391038208cb2e90e4582578d6150f97bae06638b380f7e6ea6075f00","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-16T17:59:53Z","title_canon_sha256":"e1dbb38084c99a35a281d7604bc1cfcab4718484d9dc9b45258ecbad8e75c76b"},"schema_version":"1.0","source":{"id":"2505.11586","kind":"arxiv","version":1}},"canonical_sha256":"d97cf9a8ae0d9ca7213a2212248e7572798f73a1781a518bf0d1eb10b686b053","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d97cf9a8ae0d9ca7213a2212248e7572798f73a1781a518bf0d1eb10b686b053","first_computed_at":"2026-07-05T11:04:24.098426Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:24.098426Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"x4WDF0YvvOHqL2VmX/mVLDZKEVWITF29EyCM12dP5+5osAj/ZOj0Iy5fAA08fh8k9q22rJTCXRHtN7joW48aAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:24.098964Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.11586","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b4826800403be6f1546ffdb36714ea97ef8f07f85934f0daeb2e40a9b8e3b7dd","sha256:137dd555691a235301944452553f948951d0751d845a7e816ca308135dca802e"],"state_sha256":"e97eb0fe55c9d8808cf2931ce553d410b0e779633006d3271f599b58b4165ec2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eEAlpAfVWaYyjAvwiw9Iuhmi/hACSHJyxLO+CywhB+Sa6Hl1x6h05ByVBNb6sD9rP2qPZMg7IQLhAkSaQH0JBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T16:36:54.453058Z","bundle_sha256":"d897dbf4c824e9b699a3e7f07d14a9a5c0b8354cdc4f1c25d7a9855f66f0869a"}}