{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3SFTKQURR6G3WRWTZ57GHP5RTF","short_pith_number":"pith:3SFTKQUR","canonical_record":{"source":{"id":"2408.10682","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T09:36:04Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"0bae0e96e9a9df6df26b19d088df2ed8b4185724413afd1be10e9d3269a9734d","abstract_canon_sha256":"26c37dc9d572fc04ebb261b1918c8927bb418fd8f85a05ab0a9f1ec22709129d"},"schema_version":"1.0"},"canonical_sha256":"dc8b3542918f8dbb46d3cf7e63bfb19975ad3abf392784fc772582ad2cb6034d","source":{"kind":"arxiv","id":"2408.10682","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10682","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10682v1","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10682","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_12","alias_value":"3SFTKQURR6G3","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_16","alias_value":"3SFTKQURR6G3WRWT","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_8","alias_value":"3SFTKQUR","created_at":"2026-07-05T08:57:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3SFTKQURR6G3WRWTZ57GHP5RTF","target":"record","payload":{"canonical_record":{"source":{"id":"2408.10682","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T09:36:04Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"0bae0e96e9a9df6df26b19d088df2ed8b4185724413afd1be10e9d3269a9734d","abstract_canon_sha256":"26c37dc9d572fc04ebb261b1918c8927bb418fd8f85a05ab0a9f1ec22709129d"},"schema_version":"1.0"},"canonical_sha256":"dc8b3542918f8dbb46d3cf7e63bfb19975ad3abf392784fc772582ad2cb6034d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:57:15.783726Z","signature_b64":"xaSMJ34wWYCzQXkpfuKGViFHeVW8MCaVKgs0Lkynf5SfMkBRYg731SgVImJ3G8wwHSvz38Sg7EvcEX6dW7gOAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dc8b3542918f8dbb46d3cf7e63bfb19975ad3abf392784fc772582ad2cb6034d","last_reissued_at":"2026-07-05T08:57:15.783230Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:57:15.783230Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.10682","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hNBiy9Wo4N0dw8a0f5tM/nA8x8D4SRY8hdGFHtaPELe6fqnvtwBcJ7+3z2/Z58ait0U+WPswFM6EMAcBZhkgBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T19:41:58.090058Z"},"content_sha256":"c4696d8cc397d2e10d919883d6d2da57b420b13d3b9fa91f78b1b145772ba613","schema_version":"1.0","event_id":"sha256:c4696d8cc397d2e10d919883d6d2da57b420b13d3b9fa91f78b1b145772ba613"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3SFTKQURR6G3WRWTZ57GHP5RTF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Hongbang Yuan, Jun Zhao, Kang Liu, Pengfei Cao, Yubo Chen, Zhuoran Jin","submitted_at":"2024-08-20T09:36:04Z","abstract_excerpt":"LLM have achieved success in many fields but still troubled by problematic content in the training corpora. LLM unlearning aims at reducing their influence and avoid undesirable behaviours. However, existing unlearning methods remain vulnerable to adversarial queries and the unlearned knowledge resurfaces after the manually designed attack queries. As part of a red-team effort to proactively assess the vulnerabilities of unlearned models, we design Dynamic Unlearning Attack (DUA), a dynamic and automated framework to attack these models and evaluate their robustness. It optimizes adversarial s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10682","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.10682/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TbEMPRemGfgi4+34VtpKyY3vrs5H0T3G3sRpCRNZ7jmBkPd2e4EDPk622DLDo8fsHp0wgyfDSos8/66qqvcZAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T19:41:58.090348Z"},"content_sha256":"7fe7a31b106fe85e77fdf825811bf1443492754747e6ac72a14e63513f640f54","schema_version":"1.0","event_id":"sha256:7fe7a31b106fe85e77fdf825811bf1443492754747e6ac72a14e63513f640f54"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3SFTKQURR6G3WRWTZ57GHP5RTF/bundle.json","state_url":"https://pith.science/pith/3SFTKQURR6G3WRWTZ57GHP5RTF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3SFTKQURR6G3WRWTZ57GHP5RTF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T19:41:58Z","links":{"resolver":"https://pith.science/pith/3SFTKQURR6G3WRWTZ57GHP5RTF","bundle":"https://pith.science/pith/3SFTKQURR6G3WRWTZ57GHP5RTF/bundle.json","state":"https://pith.science/pith/3SFTKQURR6G3WRWTZ57GHP5RTF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3SFTKQURR6G3WRWTZ57GHP5RTF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3SFTKQURR6G3WRWTZ57GHP5RTF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"26c37dc9d572fc04ebb261b1918c8927bb418fd8f85a05ab0a9f1ec22709129d","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T09:36:04Z","title_canon_sha256":"0bae0e96e9a9df6df26b19d088df2ed8b4185724413afd1be10e9d3269a9734d"},"schema_version":"1.0","source":{"id":"2408.10682","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10682","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10682v1","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10682","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_12","alias_value":"3SFTKQURR6G3","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_16","alias_value":"3SFTKQURR6G3WRWT","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_8","alias_value":"3SFTKQUR","created_at":"2026-07-05T08:57:15Z"}],"graph_snapshots":[{"event_id":"sha256:7fe7a31b106fe85e77fdf825811bf1443492754747e6ac72a14e63513f640f54","target":"graph","created_at":"2026-07-05T08:57:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.10682/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM have achieved success in many fields but still troubled by problematic content in the training corpora. LLM unlearning aims at reducing their influence and avoid undesirable behaviours. However, existing unlearning methods remain vulnerable to adversarial queries and the unlearned knowledge resurfaces after the manually designed attack queries. As part of a red-team effort to proactively assess the vulnerabilities of unlearned models, we design Dynamic Unlearning Attack (DUA), a dynamic and automated framework to attack these models and evaluate their robustness. It optimizes adversarial s","authors_text":"Hongbang Yuan, Jun Zhao, Kang Liu, Pengfei Cao, Yubo Chen, Zhuoran Jin","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T09:36:04Z","title":"Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10682","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c4696d8cc397d2e10d919883d6d2da57b420b13d3b9fa91f78b1b145772ba613","target":"record","created_at":"2026-07-05T08:57:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"26c37dc9d572fc04ebb261b1918c8927bb418fd8f85a05ab0a9f1ec22709129d","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T09:36:04Z","title_canon_sha256":"0bae0e96e9a9df6df26b19d088df2ed8b4185724413afd1be10e9d3269a9734d"},"schema_version":"1.0","source":{"id":"2408.10682","kind":"arxiv","version":1}},"canonical_sha256":"dc8b3542918f8dbb46d3cf7e63bfb19975ad3abf392784fc772582ad2cb6034d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dc8b3542918f8dbb46d3cf7e63bfb19975ad3abf392784fc772582ad2cb6034d","first_computed_at":"2026-07-05T08:57:15.783230Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:57:15.783230Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xaSMJ34wWYCzQXkpfuKGViFHeVW8MCaVKgs0Lkynf5SfMkBRYg731SgVImJ3G8wwHSvz38Sg7EvcEX6dW7gOAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:57:15.783726Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.10682","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c4696d8cc397d2e10d919883d6d2da57b420b13d3b9fa91f78b1b145772ba613","sha256:7fe7a31b106fe85e77fdf825811bf1443492754747e6ac72a14e63513f640f54"],"state_sha256":"ab8af425bc82ff41e1b4371432cd0a000722f137e9b5f227f319830c8e59c294"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KypvtbqQ8pMXHC5YPLzPzPqNWxVYtq03umk7o26btTKspzrI5b8ru3wLz7Lip+jHAEBVh4047oX1lNQM3HPMDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T19:41:58.092863Z","bundle_sha256":"a9694ec920e1215c4eca59ad15e4df0463eada3ae6cffb7900b1dc1d04a151b7"}}