{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:4KME2CZKP6SADVQ7IZKFQD44CD","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e2f27c6129bba07387ee15fb0bd8fe1b29a1eb91fcd62ab589835e1eedc852a4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","title_canon_sha256":"ccd5d1eac3d14a236185a9fdd228ef4dcf96f517e9eaf9d6dd159ba6375624c6"},"schema_version":"1.0","source":{"id":"2608.05659","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05659","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05659v1","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05659","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_12","alias_value":"4KME2CZKP6SA","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_16","alias_value":"4KME2CZKP6SADVQ7","created_at":"2026-08-07T00:52:18Z"},{"alias_kind":"pith_short_8","alias_value":"4KME2CZK","created_at":"2026-08-07T00:52:18Z"}],"graph_snapshots":[{"event_id":"sha256:c5937f5886e371084385f66394194976419bf42c96a9c3d15702b19b9475f03c","target":"graph","created_at":"2026-08-07T00:52:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.05659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM customization platforms allow users to build task-specific models for code intelligence tasks by embedding instructions into system prompts, without modifying the underlying model parameters. While these platforms lower the barrier to developing customized LLMs, they also introduce a new attack surface: instruction backdoor attacks, in which adversaries implant hidden malicious behaviors into customized instructions. However, existing attacks suffer from two key limitations. First, they often rely on explicit trigger patterns readily detected by platform-side or user-side inspection. Secon","authors_text":"Baowen Xu, Chunrong Fang, Wei Cheng, Wising Sun, Yang Liu, Yuan Xiao, Yuchen Chen, Zhenyu Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","title":"Breaking Customized LLMs for Coding: Automated Red Teaming for Instruction Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05659","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a34b6477c632ba716f6f4b5d4578d733b8c6e0039767a7c617db4af9e9a49692","target":"record","created_at":"2026-08-07T00:52:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e2f27c6129bba07387ee15fb0bd8fe1b29a1eb91fcd62ab589835e1eedc852a4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T06:57:10Z","title_canon_sha256":"ccd5d1eac3d14a236185a9fdd228ef4dcf96f517e9eaf9d6dd159ba6375624c6"},"schema_version":"1.0","source":{"id":"2608.05659","kind":"arxiv","version":1}},"canonical_sha256":"e2984d0b2a7fa401d61f4654580f9c10db0574bc5310884d3efad53898f03045","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e2984d0b2a7fa401d61f4654580f9c10db0574bc5310884d3efad53898f03045","first_computed_at":"2026-08-07T00:52:18.773711Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-07T00:52:18.773711Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Zn9Uwj+riHzDC6ILmmd8X9f+/ReohrQuSIOHlV7FOVde3qDl0GNOsdbSeh3dsqJOyYo202iJwjrMVFl/xKRlDw==","signature_status":"signed_v1","signed_at":"2026-08-07T00:52:18.775625Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.05659","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a34b6477c632ba716f6f4b5d4578d733b8c6e0039767a7c617db4af9e9a49692","sha256:c5937f5886e371084385f66394194976419bf42c96a9c3d15702b19b9475f03c","sha256:f97d3e017f5d050550e85191ed729edd4dd2280819464cf44f12e8aa37d9b55a"],"state_sha256":"d4eed8a24c1dfa30390453141fc7b66c73136520ece617f80a9de9e8c97fb53d"}