{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:4KME2CZKP6SADVQ7IZKFQD44CD","short_pith_number":"pith:4KME2CZK","canonical_record":{"source":{"id":"2608.05659","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","cross_cats_sorted":[],"title_canon_sha256":"ccd5d1eac3d14a236185a9fdd228ef4dcf96f517e9eaf9d6dd159ba6375624c6","abstract_canon_sha256":"e2f27c6129bba07387ee15fb0bd8fe1b29a1eb91fcd62ab589835e1eedc852a4"},"schema_version":"1.0"},"canonical_sha256":"e2984d0b2a7fa401d61f4654580f9c10db0574bc5310884d3efad53898f03045","source":{"kind":"arxiv","id":"2608.05659","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05659","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05659v1","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05659","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_12","alias_value":"4KME2CZKP6SA","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_16","alias_value":"4KME2CZKP6SADVQ7","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_8","alias_value":"4KME2CZK","created_at":"2026-08-07T00:52:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:4KME2CZKP6SADVQ7IZKFQD44CD","target":"record","payload":{"canonical_record":{"source":{"id":"2608.05659","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","cross_cats_sorted":[],"title_canon_sha256":"ccd5d1eac3d14a236185a9fdd228ef4dcf96f517e9eaf9d6dd159ba6375624c6","abstract_canon_sha256":"e2f27c6129bba07387ee15fb0bd8fe1b29a1eb91fcd62ab589835e1eedc852a4"},"schema_version":"1.0"},"canonical_sha256":"e2984d0b2a7fa401d61f4654580f9c10db0574bc5310884d3efad53898f03045","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-07T00:52:18.775625Z","signature_b64":"Zn9Uwj+riHzDC6ILmmd8X9f+/ReohrQuSIOHlV7FOVde3qDl0GNOsdbSeh3dsqJOyYo202iJwjrMVFl/xKRlDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e2984d0b2a7fa401d61f4654580f9c10db0574bc5310884d3efad53898f03045","last_reissued_at":"2026-08-07T00:52:18.773711Z","signature_status":"signed_v1","first_computed_at":"2026-08-07T00:52:18.773711Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.05659","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:52:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kmCiLGq2xzzQsenCgRJ2nppnVVTElcYwENX/QTT7GI0A/Hq+vASam0yEbJk8udS5qkR9Ig/1do+Pd3FMlE69CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:27:44.313465Z"},"content_sha256":"a34b6477c632ba716f6f4b5d4578d733b8c6e0039767a7c617db4af9e9a49692","schema_version":"1.0","event_id":"sha256:a34b6477c632ba716f6f4b5d4578d733b8c6e0039767a7c617db4af9e9a49692"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:4KME2CZKP6SADVQ7IZKFQD44CD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking Customized LLMs for Coding: Automated Red Teaming for Instruction Backdoor Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Baowen Xu, Chunrong Fang, Wei Cheng, Wising Sun, Yang Liu, Yuan Xiao, Yuchen Chen, Zhenyu Chen","submitted_at":"2026-08-06T06:57:10Z","abstract_excerpt":"LLM customization platforms allow users to build task-specific models for code intelligence tasks by embedding instructions into system prompts, without modifying the underlying model parameters. While these platforms lower the barrier to developing customized LLMs, they also introduce a new attack surface: instruction backdoor attacks, in which adversaries implant hidden malicious behaviors into customized instructions. However, existing attacks suffer from two key limitations. First, they often rely on explicit trigger patterns readily detected by platform-side or user-side inspection. Secon"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05659","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.05659/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:52:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eiy+XPjGv9wwRVPfE/zBgFThg0cONK7F+M9C8XXugngQgPHbFjXhVxGBHHnbf1tw8oBoViskWjbdxNdaALC8Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:27:44.314041Z"},"content_sha256":"c5937f5886e371084385f66394194976419bf42c96a9c3d15702b19b9475f03c","schema_version":"1.0","event_id":"sha256:c5937f5886e371084385f66394194976419bf42c96a9c3d15702b19b9475f03c"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:4KME2CZKP6SADVQ7IZKFQD44CD","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2025.findings-acl.401) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Xi Li, Ruofan Mao, Yusen Zhang, Renze Lou, Chen Wu, and Jiaqi Wang. 2025. Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models. In Findings of the Association for Computational Linguistics: ACL 2025. Association for Compu","arxiv_id":"2608.05659","detector":"doi_compliance","evidence":{"ref_index":21,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/2025","reconstructed_doi":"10.18653/v1/2025.findings-acl.401"},"severity":"advisory","ref_index":21,"audited_at":"2026-08-08T04:48:08.086685Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2025.findings-acl.401","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"c8db61adb6aedffc685fd3bd339393ec61101a898964b21ca7305b2f29f1c9f8","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":18624,"payload_sha256":"d8d978fb0cf0e3ae4fbe15ec9529d52176398a68b1c4a36bc5e52e7622e7d5ef","signature_b64":"ycIWDGzFJhtJOWi/aOpFv/3geJSKZj3OA6aJSTQ93MyOXF+7HUUOgbYBKMvL7U5RhIB69hHzQ+0mVq48Um/2Dg==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-08T04:48:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2I+gMKLhPPix9SAWCKepoNUOuLfo8seR929r5tUrl5GWZxUeKkhYuHQBFS7u3kZIT5d2YFqTDj3HaKFoO0V6Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:27:44.316396Z"},"content_sha256":"f97d3e017f5d050550e85191ed729edd4dd2280819464cf44f12e8aa37d9b55a","schema_version":"1.0","event_id":"sha256:f97d3e017f5d050550e85191ed729edd4dd2280819464cf44f12e8aa37d9b55a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4KME2CZKP6SADVQ7IZKFQD44CD/bundle.json","state_url":"https://pith.science/pith/4KME2CZKP6SADVQ7IZKFQD44CD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4KME2CZKP6SADVQ7IZKFQD44CD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T12:27:44Z","links":{"resolver":"https://pith.science/pith/4KME2CZKP6SADVQ7IZKFQD44CD","bundle":"https://pith.science/pith/4KME2CZKP6SADVQ7IZKFQD44CD/bundle.json","state":"https://pith.science/pith/4KME2CZKP6SADVQ7IZKFQD44CD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4KME2CZKP6SADVQ7IZKFQD44CD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:4KME2CZKP6SADVQ7IZKFQD44CD","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e2f27c6129bba07387ee15fb0bd8fe1b29a1eb91fcd62ab589835e1eedc852a4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","title_canon_sha256":"ccd5d1eac3d14a236185a9fdd228ef4dcf96f517e9eaf9d6dd159ba6375624c6"},"schema_version":"1.0","source":{"id":"2608.05659","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05659","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05659v1","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05659","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_12","alias_value":"4KME2CZKP6SA","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_16","alias_value":"4KME2CZKP6SADVQ7","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_8","alias_value":"4KME2CZK","created_at":"2026-08-07T00:52:18Z"}],"graph_snapshots":[{"event_id":"sha256:c5937f5886e371084385f66394194976419bf42c96a9c3d15702b19b9475f03c","target":"graph","created_at":"2026-08-07T00:52:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.05659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM customization platforms allow users to build task-specific models for code intelligence tasks by embedding instructions into system prompts, without modifying the underlying model parameters. While these platforms lower the barrier to developing customized LLMs, they also introduce a new attack surface: instruction backdoor attacks, in which adversaries implant hidden malicious behaviors into customized instructions. However, existing attacks suffer from two key limitations. First, they often rely on explicit trigger patterns readily detected by platform-side or user-side inspection. Secon","authors_text":"Baowen Xu, Chunrong Fang, Wei Cheng, Wising Sun, Yang Liu, Yuan Xiao, Yuchen Chen, Zhenyu Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","title":"Breaking Customized LLMs for Coding: Automated Red Teaming for Instruction Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05659","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a34b6477c632ba716f6f4b5d4578d733b8c6e0039767a7c617db4af9e9a49692","target":"record","created_at":"2026-08-07T00:52:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e2f27c6129bba07387ee15fb0bd8fe1b29a1eb91fcd62ab589835e1eedc852a4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","title_canon_sha256":"ccd5d1eac3d14a236185a9fdd228ef4dcf96f517e9eaf9d6dd159ba6375624c6"},"schema_version":"1.0","source":{"id":"2608.05659","kind":"arxiv","version":1}},"canonical_sha256":"e2984d0b2a7fa401d61f4654580f9c10db0574bc5310884d3efad53898f03045","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e2984d0b2a7fa401d61f4654580f9c10db0574bc5310884d3efad53898f03045","first_computed_at":"2026-08-07T00:52:18.773711Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-07T00:52:18.773711Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Zn9Uwj+riHzDC6ILmmd8X9f+/ReohrQuSIOHlV7FOVde3qDl0GNOsdbSeh3dsqJOyYo202iJwjrMVFl/xKRlDw==","signature_status":"signed_v1","signed_at":"2026-08-07T00:52:18.775625Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.05659","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a34b6477c632ba716f6f4b5d4578d733b8c6e0039767a7c617db4af9e9a49692","sha256:c5937f5886e371084385f66394194976419bf42c96a9c3d15702b19b9475f03c","sha256:f97d3e017f5d050550e85191ed729edd4dd2280819464cf44f12e8aa37d9b55a"],"state_sha256":"d4eed8a24c1dfa30390453141fc7b66c73136520ece617f80a9de9e8c97fb53d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iODrpxuXWTpOWMt5AYclKzwI+1U5W3g7u2KzjmtqF8AKZUNuFNYx/FLz/YoXn64upgidovfmh2Sbo1JLuvoiDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T12:27:44.318499Z","bundle_sha256":"7da67fd2b7f69bd000786f1c49031314318052ee7fcc004f68422cbbc7b28890"}}