{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:46QK5EICHX6EJG5VMNSWPN4TLT","short_pith_number":"pith:46QK5EIC","canonical_record":{"source":{"id":"2303.14325","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","cross_cats_sorted":[],"title_canon_sha256":"5f81856ae7d5d2a8780a124ebdcfe25ab7cedc6f54ef6346a70a0cb5afbf1e5a","abstract_canon_sha256":"1fe661a0d927b808413e93d978898558d6da88ababbf7212ce252b4deac4847d"},"schema_version":"1.0"},"canonical_sha256":"e7a0ae91023dfc449bb5636567b7935cf5c53d55316b93eec839a462064f09e5","source":{"kind":"arxiv","id":"2303.14325","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.14325","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"arxiv_version","alias_value":"2303.14325v1","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.14325","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_12","alias_value":"46QK5EICHX6E","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_16","alias_value":"46QK5EICHX6EJG5V","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_8","alias_value":"46QK5EIC","created_at":"2026-07-05T05:54:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:46QK5EICHX6EJG5VMNSWPN4TLT","target":"record","payload":{"canonical_record":{"source":{"id":"2303.14325","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","cross_cats_sorted":[],"title_canon_sha256":"5f81856ae7d5d2a8780a124ebdcfe25ab7cedc6f54ef6346a70a0cb5afbf1e5a","abstract_canon_sha256":"1fe661a0d927b808413e93d978898558d6da88ababbf7212ce252b4deac4847d"},"schema_version":"1.0"},"canonical_sha256":"e7a0ae91023dfc449bb5636567b7935cf5c53d55316b93eec839a462064f09e5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:54:39.590350Z","signature_b64":"fITXcaAGRgLG6orcPnZBhawaRmygZsSOB3Vz7MIQ4A7jBWIaakpSWUkv8JpZYS+7Qgr6a1SjYefhoxwF0FLSDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e7a0ae91023dfc449bb5636567b7935cf5c53d55316b93eec839a462064f09e5","last_reissued_at":"2026-07-05T05:54:39.589941Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:54:39.589941Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.14325","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:54:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AhGWyLTzx6GICBSf3FWRnNPtfB/pWR6zAmxsNA4Huz2/RdN5RWW4ZXQzh8kDyAiVeakk40CEEKegclADCUlHDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:05:58.610728Z"},"content_sha256":"2fad5009765af8c2389392f62c3aed0effcc27d6b7ec47def7956f88bdcba486","schema_version":"1.0","event_id":"sha256:2fad5009765af8c2389392f62c3aed0effcc27d6b7ec47def7956f88bdcba486"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:46QK5EICHX6EJG5VMNSWPN4TLT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Attacks with Input-unique Triggers in NLP","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Jiwei Li, Jun He, Lingjuan Lyu, Muqiao Yang, Tianwei Zhang, Xukun Zhou","submitted_at":"2023-03-25T01:41:54Z","abstract_excerpt":"Backdoor attack aims at inducing neural models to make incorrect predictions for poison data while keeping predictions on the clean dataset unchanged, which creates a considerable threat to current natural language processing (NLP) systems. Existing backdoor attacking systems face two severe issues:firstly, most backdoor triggers follow a uniform and usually input-independent pattern, e.g., insertion of specific trigger words, synonym replacement. This significantly hinders the stealthiness of the attacking model, leading the trained backdoor model being easily identified as malicious by model"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.14325","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.14325/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:54:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9QiuiDxweDEvqh1AIPoYPAPfWxcmdFbnOoVGOsKiAVf9JTFq3E/CqwAZySC6dmvjrAz+U8NnuCdb0uyvTTJIBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:05:58.611233Z"},"content_sha256":"07052eda88513a9d6c792b380a691ff216df9e97cc52059468f19c11a85f81d1","schema_version":"1.0","event_id":"sha256:07052eda88513a9d6c792b380a691ff216df9e97cc52059468f19c11a85f81d1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/46QK5EICHX6EJG5VMNSWPN4TLT/bundle.json","state_url":"https://pith.science/pith/46QK5EICHX6EJG5VMNSWPN4TLT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/46QK5EICHX6EJG5VMNSWPN4TLT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T13:05:58Z","links":{"resolver":"https://pith.science/pith/46QK5EICHX6EJG5VMNSWPN4TLT","bundle":"https://pith.science/pith/46QK5EICHX6EJG5VMNSWPN4TLT/bundle.json","state":"https://pith.science/pith/46QK5EICHX6EJG5VMNSWPN4TLT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/46QK5EICHX6EJG5VMNSWPN4TLT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:46QK5EICHX6EJG5VMNSWPN4TLT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1fe661a0d927b808413e93d978898558d6da88ababbf7212ce252b4deac4847d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","title_canon_sha256":"5f81856ae7d5d2a8780a124ebdcfe25ab7cedc6f54ef6346a70a0cb5afbf1e5a"},"schema_version":"1.0","source":{"id":"2303.14325","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.14325","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"arxiv_version","alias_value":"2303.14325v1","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.14325","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_12","alias_value":"46QK5EICHX6E","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_16","alias_value":"46QK5EICHX6EJG5V","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_8","alias_value":"46QK5EIC","created_at":"2026-07-05T05:54:39Z"}],"graph_snapshots":[{"event_id":"sha256:07052eda88513a9d6c792b380a691ff216df9e97cc52059468f19c11a85f81d1","target":"graph","created_at":"2026-07-05T05:54:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.14325/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attack aims at inducing neural models to make incorrect predictions for poison data while keeping predictions on the clean dataset unchanged, which creates a considerable threat to current natural language processing (NLP) systems. Existing backdoor attacking systems face two severe issues:firstly, most backdoor triggers follow a uniform and usually input-independent pattern, e.g., insertion of specific trigger words, synonym replacement. This significantly hinders the stealthiness of the attacking model, leading the trained backdoor model being easily identified as malicious by model","authors_text":"Jiwei Li, Jun He, Lingjuan Lyu, Muqiao Yang, Tianwei Zhang, Xukun Zhou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","title":"Backdoor Attacks with Input-unique Triggers in NLP"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.14325","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2fad5009765af8c2389392f62c3aed0effcc27d6b7ec47def7956f88bdcba486","target":"record","created_at":"2026-07-05T05:54:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1fe661a0d927b808413e93d978898558d6da88ababbf7212ce252b4deac4847d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","title_canon_sha256":"5f81856ae7d5d2a8780a124ebdcfe25ab7cedc6f54ef6346a70a0cb5afbf1e5a"},"schema_version":"1.0","source":{"id":"2303.14325","kind":"arxiv","version":1}},"canonical_sha256":"e7a0ae91023dfc449bb5636567b7935cf5c53d55316b93eec839a462064f09e5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e7a0ae91023dfc449bb5636567b7935cf5c53d55316b93eec839a462064f09e5","first_computed_at":"2026-07-05T05:54:39.589941Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:54:39.589941Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fITXcaAGRgLG6orcPnZBhawaRmygZsSOB3Vz7MIQ4A7jBWIaakpSWUkv8JpZYS+7Qgr6a1SjYefhoxwF0FLSDw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:54:39.590350Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.14325","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2fad5009765af8c2389392f62c3aed0effcc27d6b7ec47def7956f88bdcba486","sha256:07052eda88513a9d6c792b380a691ff216df9e97cc52059468f19c11a85f81d1"],"state_sha256":"cd1e7d03e96bde72cc448692ca5c090e4837d8321a652af81b238c5e63b1a24c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"48oraocKNFgaLlctIowZcc4jlvxK+YCPBRcpsReHu/aBj18HU+/VrsgeUSlqNZtiw9hUKY6BLsx5O5culkv1BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T13:05:58.614501Z","bundle_sha256":"ceff5c22fc992f67abdbf6de06962b59a2fa24ac94963c6b66cf9ceba28a1584"}}