{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3XFYBEUBWJINH63QFYEXI6XC7Q","short_pith_number":"pith:3XFYBEUB","canonical_record":{"source":{"id":"2408.02882","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-08-06T01:20:12Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"cb75325ce798bbfa0733738410cbd590608bd68caff3a190a423c8cc5ac50511","abstract_canon_sha256":"ce31c6a190ee62a45068bdec8369d638221bbc1e5261061be14379885373cab2"},"schema_version":"1.0"},"canonical_sha256":"ddcb809281b250d3fb702e09747ae2fc17c7579a3c43a5f91889ab2b28e9c04e","source":{"kind":"arxiv","id":"2408.02882","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.02882","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"arxiv_version","alias_value":"2408.02882v1","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.02882","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"pith_short_12","alias_value":"3XFYBEUBWJIN","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"pith_short_16","alias_value":"3XFYBEUBWJINH63Q","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"pith_short_8","alias_value":"3XFYBEUB","created_at":"2026-07-05T08:52:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3XFYBEUBWJINH63QFYEXI6XC7Q","target":"record","payload":{"canonical_record":{"source":{"id":"2408.02882","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-08-06T01:20:12Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"cb75325ce798bbfa0733738410cbd590608bd68caff3a190a423c8cc5ac50511","abstract_canon_sha256":"ce31c6a190ee62a45068bdec8369d638221bbc1e5261061be14379885373cab2"},"schema_version":"1.0"},"canonical_sha256":"ddcb809281b250d3fb702e09747ae2fc17c7579a3c43a5f91889ab2b28e9c04e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:52:41.775439Z","signature_b64":"l0V3VH513ae86ZmZ5o1kMZXUhZE6kFhhtr6qkmd9zVxRXbKERSjNn61LCoHB6dXUvW8p0VTKFjJcJjeMv8mCBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ddcb809281b250d3fb702e09747ae2fc17c7579a3c43a5f91889ab2b28e9c04e","last_reissued_at":"2026-07-05T08:52:41.774857Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:52:41.774857Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.02882","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:52:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E8mb7RH1SLfbfuYv1E+eLiVcsfsO8K0ZW6Cu9ylTsZHhM2HyrRBk7WUeyMM+xECMwFZ2lU3rrWtG2rod3W4PBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:09:11.994133Z"},"content_sha256":"791a4797c652e5a56caaf7f82c6cb27d37ccb0b3488d2afdde305045ebf2817f","schema_version":"1.0","event_id":"sha256:791a4797c652e5a56caaf7f82c6cb27d37ccb0b3488d2afdde305045ebf2817f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3XFYBEUBWJINH63QFYEXI6XC7Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Compromising Embodied Agents with Contextual Backdoor Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.AI","authors_text":"Aishan Liu, Dacheng Tao, Jiakai Wang, Junqi Zhang, Qing Guo, Siyuan Liang, Tianlin Li, Tianyuan Zhang, Wenbo Zhou, Xianglong Liu, Yanjun Pu, Yuguang Zhou","submitted_at":"2024-08-06T01:20:12Z","abstract_excerpt":"Large language models (LLMs) have transformed the development of embodied intelligence. By providing a few contextual demonstrations, developers can utilize the extensive internal knowledge of LLMs to effortlessly translate complex tasks described in abstract language into sequences of code snippets, which will serve as the execution logic for embodied agents. However, this paper uncovers a significant backdoor security threat within this process and introduces a novel method called \\method{}. By poisoning just a few contextual demonstrations, attackers can covertly compromise the contextual e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.02882","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.02882/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:52:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"43G0Cj44XbmAbKoe6L1uz9NALTbvhwoSJ+SzfKJcw9OiMNCOElaFuxXICaGRmaUdqru058+1S9+F2/P1wv0RBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:09:11.995247Z"},"content_sha256":"55df3f0c7749e5604968971196d7db83d8e1f43007edab81b861034ebbf2efaa","schema_version":"1.0","event_id":"sha256:55df3f0c7749e5604968971196d7db83d8e1f43007edab81b861034ebbf2efaa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3XFYBEUBWJINH63QFYEXI6XC7Q/bundle.json","state_url":"https://pith.science/pith/3XFYBEUBWJINH63QFYEXI6XC7Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3XFYBEUBWJINH63QFYEXI6XC7Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T01:09:11Z","links":{"resolver":"https://pith.science/pith/3XFYBEUBWJINH63QFYEXI6XC7Q","bundle":"https://pith.science/pith/3XFYBEUBWJINH63QFYEXI6XC7Q/bundle.json","state":"https://pith.science/pith/3XFYBEUBWJINH63QFYEXI6XC7Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3XFYBEUBWJINH63QFYEXI6XC7Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3XFYBEUBWJINH63QFYEXI6XC7Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ce31c6a190ee62a45068bdec8369d638221bbc1e5261061be14379885373cab2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-08-06T01:20:12Z","title_canon_sha256":"cb75325ce798bbfa0733738410cbd590608bd68caff3a190a423c8cc5ac50511"},"schema_version":"1.0","source":{"id":"2408.02882","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.02882","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"arxiv_version","alias_value":"2408.02882v1","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.02882","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"pith_short_12","alias_value":"3XFYBEUBWJIN","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"pith_short_16","alias_value":"3XFYBEUBWJINH63Q","created_at":"2026-07-05T08:52:41Z"},{"alias_kind":"pith_short_8","alias_value":"3XFYBEUB","created_at":"2026-07-05T08:52:41Z"}],"graph_snapshots":[{"event_id":"sha256:55df3f0c7749e5604968971196d7db83d8e1f43007edab81b861034ebbf2efaa","target":"graph","created_at":"2026-07-05T08:52:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.02882/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have transformed the development of embodied intelligence. By providing a few contextual demonstrations, developers can utilize the extensive internal knowledge of LLMs to effortlessly translate complex tasks described in abstract language into sequences of code snippets, which will serve as the execution logic for embodied agents. However, this paper uncovers a significant backdoor security threat within this process and introduces a novel method called \\method{}. By poisoning just a few contextual demonstrations, attackers can covertly compromise the contextual e","authors_text":"Aishan Liu, Dacheng Tao, Jiakai Wang, Junqi Zhang, Qing Guo, Siyuan Liang, Tianlin Li, Tianyuan Zhang, Wenbo Zhou, Xianglong Liu, Yanjun Pu, Yuguang Zhou","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-08-06T01:20:12Z","title":"Compromising Embodied Agents with Contextual Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.02882","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:791a4797c652e5a56caaf7f82c6cb27d37ccb0b3488d2afdde305045ebf2817f","target":"record","created_at":"2026-07-05T08:52:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ce31c6a190ee62a45068bdec8369d638221bbc1e5261061be14379885373cab2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-08-06T01:20:12Z","title_canon_sha256":"cb75325ce798bbfa0733738410cbd590608bd68caff3a190a423c8cc5ac50511"},"schema_version":"1.0","source":{"id":"2408.02882","kind":"arxiv","version":1}},"canonical_sha256":"ddcb809281b250d3fb702e09747ae2fc17c7579a3c43a5f91889ab2b28e9c04e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ddcb809281b250d3fb702e09747ae2fc17c7579a3c43a5f91889ab2b28e9c04e","first_computed_at":"2026-07-05T08:52:41.774857Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:52:41.774857Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"l0V3VH513ae86ZmZ5o1kMZXUhZE6kFhhtr6qkmd9zVxRXbKERSjNn61LCoHB6dXUvW8p0VTKFjJcJjeMv8mCBw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:52:41.775439Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.02882","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:791a4797c652e5a56caaf7f82c6cb27d37ccb0b3488d2afdde305045ebf2817f","sha256:55df3f0c7749e5604968971196d7db83d8e1f43007edab81b861034ebbf2efaa"],"state_sha256":"147851f91e84291fa1f54c00fe28536d44cf1229f8f8315df133e171d82feb6a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GWOnSkh6edwY2hifnFeahNopKEWpOStkcf6o/Mioq63gMjx9hDn/8Mvj6HKbh6PKMkd/rpfhlneRl6wR28LABQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T01:09:12.000958Z","bundle_sha256":"bd9d0e1b03b3f8c8897d579cb747c51c72f77870af730a1e5bca170358565b3e"}}