{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:4STNE324CHM4O7UCG7HWLMZU3X","short_pith_number":"pith:4STNE324","canonical_record":{"source":{"id":"2507.22813","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-30T16:31:13Z","cross_cats_sorted":[],"title_canon_sha256":"f55decbb4e3b8f2a445e7ee5ccb42af2e177cdd8a93817c6de5b16835293d258","abstract_canon_sha256":"621f39459ace37164caa35b359b4b08465300f7040abad9480f1752018e6666f"},"schema_version":"1.0"},"canonical_sha256":"e4a6d26f5c11d9c77e8237cf65b334dddcc1465d45056e4c7fdef90351dbdd1f","source":{"kind":"arxiv","id":"2507.22813","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.22813","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"arxiv_version","alias_value":"2507.22813v1","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.22813","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"pith_short_12","alias_value":"4STNE324CHM4","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"pith_short_16","alias_value":"4STNE324CHM4O7UC","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"pith_short_8","alias_value":"4STNE324","created_at":"2026-07-05T11:45:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:4STNE324CHM4O7UCG7HWLMZU3X","target":"record","payload":{"canonical_record":{"source":{"id":"2507.22813","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-30T16:31:13Z","cross_cats_sorted":[],"title_canon_sha256":"f55decbb4e3b8f2a445e7ee5ccb42af2e177cdd8a93817c6de5b16835293d258","abstract_canon_sha256":"621f39459ace37164caa35b359b4b08465300f7040abad9480f1752018e6666f"},"schema_version":"1.0"},"canonical_sha256":"e4a6d26f5c11d9c77e8237cf65b334dddcc1465d45056e4c7fdef90351dbdd1f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:45:49.622664Z","signature_b64":"boU8PnUTl0p0zH3pbdTjX1O6C+aiXtqJ4XG35qBkTX70N/ftvmfmlTpeYgtYGfHQjPvz1xfNcg1eD9M9e4QOAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e4a6d26f5c11d9c77e8237cf65b334dddcc1465d45056e4c7fdef90351dbdd1f","last_reissued_at":"2026-07-05T11:45:49.622170Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:45:49.622170Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.22813","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v0XIIUhlBN00XQ3XxsmgG5n4SqU3Y2dYD/lfk6J3tXx1ekOPzRmISVKI8j+ytn1R+Hkf1M/zG/wUtbrj2uE8Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T06:11:32.138767Z"},"content_sha256":"3104744db66337c7d0319a868841aab78a79bf323394c5f6a1fd77acc29342d7","schema_version":"1.0","event_id":"sha256:3104744db66337c7d0319a868841aab78a79bf323394c5f6a1fd77acc29342d7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:4STNE324CHM4O7UCG7HWLMZU3X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hossein Mirzaei, Mackenzie W. Mathis, Masoud Hadi, Moein Madadi, Sepehr Rezaee, Zeinab Taghavi","submitted_at":"2025-07-30T16:31:13Z","abstract_excerpt":"Deep neural networks have demonstrated remarkable success across numerous tasks, yet they remain vulnerable to Trojan (backdoor) attacks, raising serious concerns about their safety in real-world mission-critical applications. A common countermeasure is trigger inversion -- reconstructing malicious \"shortcut\" patterns (triggers) inserted by an adversary during training. Current trigger-inversion methods typically search the full pixel space under specific assumptions but offer no assurances that the estimated trigger is more than an adversarial perturbation that flips the model output. Here, w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.22813","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.22813/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CPE/9xfvEg67V/0g8ZiP3lBWFG1lH5QUL9x67d+G/OVmDQSsOxHxdYzzjaYrMPMv8u8uRY2BZ069MMIupVm4AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T06:11:32.139274Z"},"content_sha256":"9332af94f5a7dfecba99544bbbe7f6b6b3447e05b739c2ebc88a6ac465bc3600","schema_version":"1.0","event_id":"sha256:9332af94f5a7dfecba99544bbbe7f6b6b3447e05b739c2ebc88a6ac465bc3600"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4STNE324CHM4O7UCG7HWLMZU3X/bundle.json","state_url":"https://pith.science/pith/4STNE324CHM4O7UCG7HWLMZU3X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4STNE324CHM4O7UCG7HWLMZU3X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T06:11:32Z","links":{"resolver":"https://pith.science/pith/4STNE324CHM4O7UCG7HWLMZU3X","bundle":"https://pith.science/pith/4STNE324CHM4O7UCG7HWLMZU3X/bundle.json","state":"https://pith.science/pith/4STNE324CHM4O7UCG7HWLMZU3X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4STNE324CHM4O7UCG7HWLMZU3X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:4STNE324CHM4O7UCG7HWLMZU3X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"621f39459ace37164caa35b359b4b08465300f7040abad9480f1752018e6666f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-30T16:31:13Z","title_canon_sha256":"f55decbb4e3b8f2a445e7ee5ccb42af2e177cdd8a93817c6de5b16835293d258"},"schema_version":"1.0","source":{"id":"2507.22813","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.22813","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"arxiv_version","alias_value":"2507.22813v1","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.22813","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"pith_short_12","alias_value":"4STNE324CHM4","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"pith_short_16","alias_value":"4STNE324CHM4O7UC","created_at":"2026-07-05T11:45:49Z"},{"alias_kind":"pith_short_8","alias_value":"4STNE324","created_at":"2026-07-05T11:45:49Z"}],"graph_snapshots":[{"event_id":"sha256:9332af94f5a7dfecba99544bbbe7f6b6b3447e05b739c2ebc88a6ac465bc3600","target":"graph","created_at":"2026-07-05T11:45:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.22813/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks have demonstrated remarkable success across numerous tasks, yet they remain vulnerable to Trojan (backdoor) attacks, raising serious concerns about their safety in real-world mission-critical applications. A common countermeasure is trigger inversion -- reconstructing malicious \"shortcut\" patterns (triggers) inserted by an adversary during training. Current trigger-inversion methods typically search the full pixel space under specific assumptions but offer no assurances that the estimated trigger is more than an adversarial perturbation that flips the model output. Here, w","authors_text":"Hossein Mirzaei, Mackenzie W. Mathis, Masoud Hadi, Moein Madadi, Sepehr Rezaee, Zeinab Taghavi","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.22813","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3104744db66337c7d0319a868841aab78a79bf323394c5f6a1fd77acc29342d7","target":"record","created_at":"2026-07-05T11:45:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"621f39459ace37164caa35b359b4b08465300f7040abad9480f1752018e6666f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-30T16:31:13Z","title_canon_sha256":"f55decbb4e3b8f2a445e7ee5ccb42af2e177cdd8a93817c6de5b16835293d258"},"schema_version":"1.0","source":{"id":"2507.22813","kind":"arxiv","version":1}},"canonical_sha256":"e4a6d26f5c11d9c77e8237cf65b334dddcc1465d45056e4c7fdef90351dbdd1f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e4a6d26f5c11d9c77e8237cf65b334dddcc1465d45056e4c7fdef90351dbdd1f","first_computed_at":"2026-07-05T11:45:49.622170Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:45:49.622170Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"boU8PnUTl0p0zH3pbdTjX1O6C+aiXtqJ4XG35qBkTX70N/ftvmfmlTpeYgtYGfHQjPvz1xfNcg1eD9M9e4QOAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:45:49.622664Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.22813","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3104744db66337c7d0319a868841aab78a79bf323394c5f6a1fd77acc29342d7","sha256:9332af94f5a7dfecba99544bbbe7f6b6b3447e05b739c2ebc88a6ac465bc3600"],"state_sha256":"ef6d7d432215c76829107660c725302605224a332e4d5a4b316aede41cd6334c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DZMTc13uxcbcghynSNw88RwB9zDlXgryqmZsdnuBt6bL3U9Z4S82guy/2vgfXpGovhaw9YXYc8ZdXWbT/KUfAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T06:11:32.143112Z","bundle_sha256":"fb392b3146d971f6fecca570f32d34f5f8d2b31323163a35c154ca437b93d895"}}