{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:46QK5EICHX6EJG5VMNSWPN4TLT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1fe661a0d927b808413e93d978898558d6da88ababbf7212ce252b4deac4847d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","title_canon_sha256":"5f81856ae7d5d2a8780a124ebdcfe25ab7cedc6f54ef6346a70a0cb5afbf1e5a"},"schema_version":"1.0","source":{"id":"2303.14325","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.14325","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"arxiv_version","alias_value":"2303.14325v1","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.14325","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_12","alias_value":"46QK5EICHX6E","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_16","alias_value":"46QK5EICHX6EJG5V","created_at":"2026-07-05T05:54:39Z"},{"alias_kind":"pith_short_8","alias_value":"46QK5EIC","created_at":"2026-07-05T05:54:39Z"}],"graph_snapshots":[{"event_id":"sha256:07052eda88513a9d6c792b380a691ff216df9e97cc52059468f19c11a85f81d1","target":"graph","created_at":"2026-07-05T05:54:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.14325/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attack aims at inducing neural models to make incorrect predictions for poison data while keeping predictions on the clean dataset unchanged, which creates a considerable threat to current natural language processing (NLP) systems. Existing backdoor attacking systems face two severe issues:firstly, most backdoor triggers follow a uniform and usually input-independent pattern, e.g., insertion of specific trigger words, synonym replacement. This significantly hinders the stealthiness of the attacking model, leading the trained backdoor model being easily identified as malicious by model","authors_text":"Jiwei Li, Jun He, Lingjuan Lyu, Muqiao Yang, Tianwei Zhang, Xukun Zhou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","title":"Backdoor Attacks with Input-unique Triggers in NLP"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.14325","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2fad5009765af8c2389392f62c3aed0effcc27d6b7ec47def7956f88bdcba486","target":"record","created_at":"2026-07-05T05:54:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1fe661a0d927b808413e93d978898558d6da88ababbf7212ce252b4deac4847d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-03-25T01:41:54Z","title_canon_sha256":"5f81856ae7d5d2a8780a124ebdcfe25ab7cedc6f54ef6346a70a0cb5afbf1e5a"},"schema_version":"1.0","source":{"id":"2303.14325","kind":"arxiv","version":1}},"canonical_sha256":"e7a0ae91023dfc449bb5636567b7935cf5c53d55316b93eec839a462064f09e5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e7a0ae91023dfc449bb5636567b7935cf5c53d55316b93eec839a462064f09e5","first_computed_at":"2026-07-05T05:54:39.589941Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:54:39.589941Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fITXcaAGRgLG6orcPnZBhawaRmygZsSOB3Vz7MIQ4A7jBWIaakpSWUkv8JpZYS+7Qgr6a1SjYefhoxwF0FLSDw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:54:39.590350Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.14325","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2fad5009765af8c2389392f62c3aed0effcc27d6b7ec47def7956f88bdcba486","sha256:07052eda88513a9d6c792b380a691ff216df9e97cc52059468f19c11a85f81d1"],"state_sha256":"cd1e7d03e96bde72cc448692ca5c090e4837d8321a652af81b238c5e63b1a24c"}