{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:4DEF6526WE25E73EQY722MCWKF","short_pith_number":"pith:4DEF6526","canonical_record":{"source":{"id":"2006.11078","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-19T11:25:36Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"b18aadba41763543238d08b791c086ea968b3511bc59f920a3e0b0c57a72f999","abstract_canon_sha256":"0c5140abae7cbf13e4528b5c260c755d8956320be25d7a99e4c71533ed3acd3a"},"schema_version":"1.0"},"canonical_sha256":"e0c85f775eb135d27f64863fad3056517571b394780ba9eebecdb845d8574ea6","source":{"kind":"arxiv","id":"2006.11078","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.11078","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"arxiv_version","alias_value":"2006.11078v1","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.11078","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"pith_short_12","alias_value":"4DEF6526WE25","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"pith_short_16","alias_value":"4DEF6526WE25E73E","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"pith_short_8","alias_value":"4DEF6526","created_at":"2026-07-05T01:11:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:4DEF6526WE25E73EQY722MCWKF","target":"record","payload":{"canonical_record":{"source":{"id":"2006.11078","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-19T11:25:36Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"b18aadba41763543238d08b791c086ea968b3511bc59f920a3e0b0c57a72f999","abstract_canon_sha256":"0c5140abae7cbf13e4528b5c260c755d8956320be25d7a99e4c71533ed3acd3a"},"schema_version":"1.0"},"canonical_sha256":"e0c85f775eb135d27f64863fad3056517571b394780ba9eebecdb845d8574ea6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:11:35.182183Z","signature_b64":"FDWjv5ytIeHH/KNrq5x2d5Wi7VNqq6HXaAq7uTTn07thxB+ov57e0JXMEFyhn7SMpovnWApENg5IOi2zOFd5Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e0c85f775eb135d27f64863fad3056517571b394780ba9eebecdb845d8574ea6","last_reissued_at":"2026-07-05T01:11:35.181792Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:11:35.181792Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2006.11078","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:11:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+9R5+5jTCArky+CZqjAFTcR1bqYvEqZMheI/G/IPShgaikjR1PeTqMiOkrmAI2DqVqt9xTMzsYvpq/GOglITCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T22:53:10.428866Z"},"content_sha256":"5efe60cda491812f2a7ab591f55ee64ad9ef713ec6426b241b2dfe3e24cca683","schema_version":"1.0","event_id":"sha256:5efe60cda491812f2a7ab591f55ee64ad9ef713ec6426b241b2dfe3e24cca683"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:4DEF6526WE25E73EQY722MCWKF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Differentiable Language Model Adversarial Attacks on Categorical Sequence Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"A. Kravchenko, A. Zaytsev, E. Burnaev, I. Fursov, N. Kluchnikov","submitted_at":"2020-06-19T11:25:36Z","abstract_excerpt":"An adversarial attack paradigm explores various scenarios for the vulnerability of deep learning models: minor changes of the input can force a model failure. Most of the state of the art frameworks focus on adversarial attacks for images and other structured model inputs, but not for categorical sequences models.\n  Successful attacks on classifiers of categorical sequences are challenging because the model input is tokens from finite sets, so a classifier score is non-differentiable with respect to inputs, and gradient-based attacks are not applicable. Common approaches deal with this problem"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.11078","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2006.11078/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:11:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z+NcIZP36hJXD/owRtUoXHpW1sj3vGHpoNyetjya9zA537ua7/RE/XpK8j8+NOAcu0ZyJgSJ5Z7cYsBteI2XAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T22:53:10.429374Z"},"content_sha256":"24e5c7f73f8977948b7ad0e2d07ae9b941f3779b76dc9b913074efb45272c4c3","schema_version":"1.0","event_id":"sha256:24e5c7f73f8977948b7ad0e2d07ae9b941f3779b76dc9b913074efb45272c4c3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4DEF6526WE25E73EQY722MCWKF/bundle.json","state_url":"https://pith.science/pith/4DEF6526WE25E73EQY722MCWKF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4DEF6526WE25E73EQY722MCWKF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T22:53:10Z","links":{"resolver":"https://pith.science/pith/4DEF6526WE25E73EQY722MCWKF","bundle":"https://pith.science/pith/4DEF6526WE25E73EQY722MCWKF/bundle.json","state":"https://pith.science/pith/4DEF6526WE25E73EQY722MCWKF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4DEF6526WE25E73EQY722MCWKF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:4DEF6526WE25E73EQY722MCWKF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0c5140abae7cbf13e4528b5c260c755d8956320be25d7a99e4c71533ed3acd3a","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-19T11:25:36Z","title_canon_sha256":"b18aadba41763543238d08b791c086ea968b3511bc59f920a3e0b0c57a72f999"},"schema_version":"1.0","source":{"id":"2006.11078","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.11078","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"arxiv_version","alias_value":"2006.11078v1","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.11078","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"pith_short_12","alias_value":"4DEF6526WE25","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"pith_short_16","alias_value":"4DEF6526WE25E73E","created_at":"2026-07-05T01:11:35Z"},{"alias_kind":"pith_short_8","alias_value":"4DEF6526","created_at":"2026-07-05T01:11:35Z"}],"graph_snapshots":[{"event_id":"sha256:24e5c7f73f8977948b7ad0e2d07ae9b941f3779b76dc9b913074efb45272c4c3","target":"graph","created_at":"2026-07-05T01:11:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.11078/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"An adversarial attack paradigm explores various scenarios for the vulnerability of deep learning models: minor changes of the input can force a model failure. Most of the state of the art frameworks focus on adversarial attacks for images and other structured model inputs, but not for categorical sequences models.\n  Successful attacks on classifiers of categorical sequences are challenging because the model input is tokens from finite sets, so a classifier score is non-differentiable with respect to inputs, and gradient-based attacks are not applicable. Common approaches deal with this problem","authors_text":"A. Kravchenko, A. Zaytsev, E. Burnaev, I. Fursov, N. Kluchnikov","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-19T11:25:36Z","title":"Differentiable Language Model Adversarial Attacks on Categorical Sequence Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.11078","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5efe60cda491812f2a7ab591f55ee64ad9ef713ec6426b241b2dfe3e24cca683","target":"record","created_at":"2026-07-05T01:11:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0c5140abae7cbf13e4528b5c260c755d8956320be25d7a99e4c71533ed3acd3a","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-19T11:25:36Z","title_canon_sha256":"b18aadba41763543238d08b791c086ea968b3511bc59f920a3e0b0c57a72f999"},"schema_version":"1.0","source":{"id":"2006.11078","kind":"arxiv","version":1}},"canonical_sha256":"e0c85f775eb135d27f64863fad3056517571b394780ba9eebecdb845d8574ea6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e0c85f775eb135d27f64863fad3056517571b394780ba9eebecdb845d8574ea6","first_computed_at":"2026-07-05T01:11:35.181792Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:11:35.181792Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FDWjv5ytIeHH/KNrq5x2d5Wi7VNqq6HXaAq7uTTn07thxB+ov57e0JXMEFyhn7SMpovnWApENg5IOi2zOFd5Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:11:35.182183Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.11078","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5efe60cda491812f2a7ab591f55ee64ad9ef713ec6426b241b2dfe3e24cca683","sha256:24e5c7f73f8977948b7ad0e2d07ae9b941f3779b76dc9b913074efb45272c4c3"],"state_sha256":"6eb299e12e3df29951f0a277167d74a0b9710adc16db238f62436d627b6756c1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oR8gh0hl7frvWEoRRqxHGLQ7gsWt+gKUtLNGcjqGYNxfjtLyOgZKiQ1QqUVwftP1wOFUmrISfyTFY1WJAY+AAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T22:53:10.438229Z","bundle_sha256":"a3ce7afdc0417954e3b46b5018ef46fd98a576960e6367622810e1be2a1844b1"}}