{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:4SR4CHH5XFK643IXTHB7SU4JOH","short_pith_number":"pith:4SR4CHH5","canonical_record":{"source":{"id":"2310.19737","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-10-30T17:01:02Z","cross_cats_sorted":[],"title_canon_sha256":"d81f5fad328e7558a584e3acb8930b3c4c265594d0691c4c49c7828a191c5776","abstract_canon_sha256":"6a0d8167ae147f8f6fb940a00f83689325ccf1ac0188463eee15a8832261c779"},"schema_version":"1.0"},"canonical_sha256":"e4a3c11cfdb955ee6d1799c3f9538971e3acb2cd8def5cf3f1233e990b9ae9be","source":{"kind":"arxiv","id":"2310.19737","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.19737","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"arxiv_version","alias_value":"2310.19737v1","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.19737","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"pith_short_12","alias_value":"4SR4CHH5XFK6","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"pith_short_16","alias_value":"4SR4CHH5XFK643IX","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"pith_short_8","alias_value":"4SR4CHH5","created_at":"2026-07-05T07:06:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:4SR4CHH5XFK643IXTHB7SU4JOH","target":"record","payload":{"canonical_record":{"source":{"id":"2310.19737","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-10-30T17:01:02Z","cross_cats_sorted":[],"title_canon_sha256":"d81f5fad328e7558a584e3acb8930b3c4c265594d0691c4c49c7828a191c5776","abstract_canon_sha256":"6a0d8167ae147f8f6fb940a00f83689325ccf1ac0188463eee15a8832261c779"},"schema_version":"1.0"},"canonical_sha256":"e4a3c11cfdb955ee6d1799c3f9538971e3acb2cd8def5cf3f1233e990b9ae9be","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:06:54.470492Z","signature_b64":"1zbSh772RQGr956kmbonb9QGOivcL1eb+aUCUWkTHE75OT44s2tc5X2skUMdG9Mq226xmpQgyzbuFO0wEB3JDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e4a3c11cfdb955ee6d1799c3f9538971e3acb2cd8def5cf3f1233e990b9ae9be","last_reissued_at":"2026-07-05T07:06:54.469967Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:06:54.469967Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.19737","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RmIutfyK/NvwQViFIfk17clCZOefEP/3eBFgeeUiFed3n2W+M7lRubRxDv707AY7RuYwXIaSEPHaOSni68XgAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:46:28.723128Z"},"content_sha256":"9c568852b2a7cd9cc4c487897cd519f7f70e8d3e8a3d9f892d1b75571efee251","schema_version":"1.0","event_id":"sha256:9c568852b2a7cd9cc4c487897cd519f7f70e8d3e8a3d9f892d1b75571efee251"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:4SR4CHH5XFK643IXTHB7SU4JOH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"David Dobre, Gauthier Gidel, Leo Schwinn, Stephan G\\\"unnemann","submitted_at":"2023-10-30T17:01:02Z","abstract_excerpt":"Over the past decade, there has been extensive research aimed at enhancing the robustness of neural networks, yet this problem remains vastly unsolved. Here, one major impediment has been the overestimation of the robustness of new defense approaches due to faulty defense evaluations. Flawed robustness evaluations necessitate rectifications in subsequent works, dangerously slowing down the research and providing a false sense of security. In this context, we will face substantial challenges associated with an impending adversarial arms race in natural language processing, specifically with clo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.19737","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.19737/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P/ansU05CzUyHRCHNvTtCOp1222Qx6oVOoqe23fMaPkbcTYm+rYlHmFX/mNf5jMD8x4GXahO3d1XRPAm2pD3DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:46:28.723684Z"},"content_sha256":"20b2e8948e1b2ae573b9007c67a101fcefeabe65a2d74973a5b3f274d2c54c48","schema_version":"1.0","event_id":"sha256:20b2e8948e1b2ae573b9007c67a101fcefeabe65a2d74973a5b3f274d2c54c48"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4SR4CHH5XFK643IXTHB7SU4JOH/bundle.json","state_url":"https://pith.science/pith/4SR4CHH5XFK643IXTHB7SU4JOH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4SR4CHH5XFK643IXTHB7SU4JOH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T22:46:28Z","links":{"resolver":"https://pith.science/pith/4SR4CHH5XFK643IXTHB7SU4JOH","bundle":"https://pith.science/pith/4SR4CHH5XFK643IXTHB7SU4JOH/bundle.json","state":"https://pith.science/pith/4SR4CHH5XFK643IXTHB7SU4JOH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4SR4CHH5XFK643IXTHB7SU4JOH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:4SR4CHH5XFK643IXTHB7SU4JOH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6a0d8167ae147f8f6fb940a00f83689325ccf1ac0188463eee15a8832261c779","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-10-30T17:01:02Z","title_canon_sha256":"d81f5fad328e7558a584e3acb8930b3c4c265594d0691c4c49c7828a191c5776"},"schema_version":"1.0","source":{"id":"2310.19737","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.19737","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"arxiv_version","alias_value":"2310.19737v1","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.19737","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"pith_short_12","alias_value":"4SR4CHH5XFK6","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"pith_short_16","alias_value":"4SR4CHH5XFK643IX","created_at":"2026-07-05T07:06:54Z"},{"alias_kind":"pith_short_8","alias_value":"4SR4CHH5","created_at":"2026-07-05T07:06:54Z"}],"graph_snapshots":[{"event_id":"sha256:20b2e8948e1b2ae573b9007c67a101fcefeabe65a2d74973a5b3f274d2c54c48","target":"graph","created_at":"2026-07-05T07:06:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.19737/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Over the past decade, there has been extensive research aimed at enhancing the robustness of neural networks, yet this problem remains vastly unsolved. Here, one major impediment has been the overestimation of the robustness of new defense approaches due to faulty defense evaluations. Flawed robustness evaluations necessitate rectifications in subsequent works, dangerously slowing down the research and providing a false sense of security. In this context, we will face substantial challenges associated with an impending adversarial arms race in natural language processing, specifically with clo","authors_text":"David Dobre, Gauthier Gidel, Leo Schwinn, Stephan G\\\"unnemann","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-10-30T17:01:02Z","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.19737","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9c568852b2a7cd9cc4c487897cd519f7f70e8d3e8a3d9f892d1b75571efee251","target":"record","created_at":"2026-07-05T07:06:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6a0d8167ae147f8f6fb940a00f83689325ccf1ac0188463eee15a8832261c779","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-10-30T17:01:02Z","title_canon_sha256":"d81f5fad328e7558a584e3acb8930b3c4c265594d0691c4c49c7828a191c5776"},"schema_version":"1.0","source":{"id":"2310.19737","kind":"arxiv","version":1}},"canonical_sha256":"e4a3c11cfdb955ee6d1799c3f9538971e3acb2cd8def5cf3f1233e990b9ae9be","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e4a3c11cfdb955ee6d1799c3f9538971e3acb2cd8def5cf3f1233e990b9ae9be","first_computed_at":"2026-07-05T07:06:54.469967Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:06:54.469967Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1zbSh772RQGr956kmbonb9QGOivcL1eb+aUCUWkTHE75OT44s2tc5X2skUMdG9Mq226xmpQgyzbuFO0wEB3JDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:06:54.470492Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.19737","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9c568852b2a7cd9cc4c487897cd519f7f70e8d3e8a3d9f892d1b75571efee251","sha256:20b2e8948e1b2ae573b9007c67a101fcefeabe65a2d74973a5b3f274d2c54c48"],"state_sha256":"b04d198a753794515371b6701182b752bf0e5d6f4736a095fd8bd5093f3d725f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bHP3kmAfmE6bIpvis7efC6+V0YHCqv50+0dN/g/BSkkLtq3tMqbN8rNWYuMt45zfzoy43bnegBRsq7VvL59sDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T22:46:28.727567Z","bundle_sha256":"7feb09aef6fbbbe9592a39a4734e880736e76dfd5fd1a845d393af605a4caa79"}}