{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4SXUYQ4PBF4PYGY7QQBAK37KUZ","short_pith_number":"pith:4SXUYQ4P","canonical_record":{"source":{"id":"2404.04714","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-06T19:27:57Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"da0dd0bd905c3501809dbe9d27e9a8becf2f7d8b0397d397ecd91bcdeadefc26","abstract_canon_sha256":"c087c8dc17c2189dd58dcf69a8df6393f34cbbef6b9b5b0f77827dfc59a26145"},"schema_version":"1.0"},"canonical_sha256":"e4af4c438f0978fc1b1f8402056feaa67d7daf0c9df874ff512c22f24e62f77f","source":{"kind":"arxiv","id":"2404.04714","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.04714","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"arxiv_version","alias_value":"2404.04714v1","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.04714","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"pith_short_12","alias_value":"4SXUYQ4PBF4P","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"pith_short_16","alias_value":"4SXUYQ4PBF4PYGY7","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"pith_short_8","alias_value":"4SXUYQ4P","created_at":"2026-07-05T08:05:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4SXUYQ4PBF4PYGY7QQBAK37KUZ","target":"record","payload":{"canonical_record":{"source":{"id":"2404.04714","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-06T19:27:57Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"da0dd0bd905c3501809dbe9d27e9a8becf2f7d8b0397d397ecd91bcdeadefc26","abstract_canon_sha256":"c087c8dc17c2189dd58dcf69a8df6393f34cbbef6b9b5b0f77827dfc59a26145"},"schema_version":"1.0"},"canonical_sha256":"e4af4c438f0978fc1b1f8402056feaa67d7daf0c9df874ff512c22f24e62f77f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:05:20.602756Z","signature_b64":"2YfAgfdQpSd6hR1QAdbVzUw6aTw+CnqBPet4s18hzBXAISuZslCLvguvhvdOqBpYgtte7vuR1mfQceq6eBsUAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e4af4c438f0978fc1b1f8402056feaa67d7daf0c9df874ff512c22f24e62f77f","last_reissued_at":"2026-07-05T08:05:20.602343Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:05:20.602343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.04714","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:05:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+yIBUKN1mwhI1nSK7SDzPlwCIA/ViMTEW7SMoiUCD8VVOFkiGYlMhUMXaU7gjOJvsc+DRcsWQQJsFcJjdHl6Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:37:28.836876Z"},"content_sha256":"f2e4a3a9d83c733ffcb6cbfee84f47e5d968380b5125c731295aaf875a056cfd","schema_version":"1.0","event_id":"sha256:f2e4a3a9d83c733ffcb6cbfee84f47e5d968380b5125c731295aaf875a056cfd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4SXUYQ4PBF4PYGY7QQBAK37KUZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Data Poisoning Attacks on Off-Policy Policy Evaluation Methods","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Cynthia Rudin, Elita Lobo, Harvineet Singh, Himabindu Lakkaraju, Marek Petrik","submitted_at":"2024-04-06T19:27:57Z","abstract_excerpt":"Off-policy Evaluation (OPE) methods are a crucial tool for evaluating policies in high-stakes domains such as healthcare, where exploration is often infeasible, unethical, or expensive. However, the extent to which such methods can be trusted under adversarial threats to data quality is largely unexplored. In this work, we make the first attempt at investigating the sensitivity of OPE methods to marginal adversarial perturbations to the data. We design a generic data poisoning attack framework leveraging influence functions from robust statistics to carefully construct perturbations that maxim"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.04714","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.04714/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:05:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IrpoTwj6Dgq55C1w82VLpzoheMt6auzHJOuW41jdI0MCAZox+pR4CG8UJyotOZOmv4NJoxuubNncO8Rfz7LpDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:37:28.837383Z"},"content_sha256":"2f98dcad39464efa1420f4d4d03b7a0f9ebf9123be6b1e4d0bdc3dd8c1cc271e","schema_version":"1.0","event_id":"sha256:2f98dcad39464efa1420f4d4d03b7a0f9ebf9123be6b1e4d0bdc3dd8c1cc271e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4SXUYQ4PBF4PYGY7QQBAK37KUZ/bundle.json","state_url":"https://pith.science/pith/4SXUYQ4PBF4PYGY7QQBAK37KUZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4SXUYQ4PBF4PYGY7QQBAK37KUZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T15:37:28Z","links":{"resolver":"https://pith.science/pith/4SXUYQ4PBF4PYGY7QQBAK37KUZ","bundle":"https://pith.science/pith/4SXUYQ4PBF4PYGY7QQBAK37KUZ/bundle.json","state":"https://pith.science/pith/4SXUYQ4PBF4PYGY7QQBAK37KUZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4SXUYQ4PBF4PYGY7QQBAK37KUZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4SXUYQ4PBF4PYGY7QQBAK37KUZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c087c8dc17c2189dd58dcf69a8df6393f34cbbef6b9b5b0f77827dfc59a26145","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-06T19:27:57Z","title_canon_sha256":"da0dd0bd905c3501809dbe9d27e9a8becf2f7d8b0397d397ecd91bcdeadefc26"},"schema_version":"1.0","source":{"id":"2404.04714","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.04714","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"arxiv_version","alias_value":"2404.04714v1","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.04714","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"pith_short_12","alias_value":"4SXUYQ4PBF4P","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"pith_short_16","alias_value":"4SXUYQ4PBF4PYGY7","created_at":"2026-07-05T08:05:20Z"},{"alias_kind":"pith_short_8","alias_value":"4SXUYQ4P","created_at":"2026-07-05T08:05:20Z"}],"graph_snapshots":[{"event_id":"sha256:2f98dcad39464efa1420f4d4d03b7a0f9ebf9123be6b1e4d0bdc3dd8c1cc271e","target":"graph","created_at":"2026-07-05T08:05:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.04714/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Off-policy Evaluation (OPE) methods are a crucial tool for evaluating policies in high-stakes domains such as healthcare, where exploration is often infeasible, unethical, or expensive. However, the extent to which such methods can be trusted under adversarial threats to data quality is largely unexplored. In this work, we make the first attempt at investigating the sensitivity of OPE methods to marginal adversarial perturbations to the data. We design a generic data poisoning attack framework leveraging influence functions from robust statistics to carefully construct perturbations that maxim","authors_text":"Cynthia Rudin, Elita Lobo, Harvineet Singh, Himabindu Lakkaraju, Marek Petrik","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-06T19:27:57Z","title":"Data Poisoning Attacks on Off-Policy Policy Evaluation Methods"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.04714","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f2e4a3a9d83c733ffcb6cbfee84f47e5d968380b5125c731295aaf875a056cfd","target":"record","created_at":"2026-07-05T08:05:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c087c8dc17c2189dd58dcf69a8df6393f34cbbef6b9b5b0f77827dfc59a26145","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-06T19:27:57Z","title_canon_sha256":"da0dd0bd905c3501809dbe9d27e9a8becf2f7d8b0397d397ecd91bcdeadefc26"},"schema_version":"1.0","source":{"id":"2404.04714","kind":"arxiv","version":1}},"canonical_sha256":"e4af4c438f0978fc1b1f8402056feaa67d7daf0c9df874ff512c22f24e62f77f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e4af4c438f0978fc1b1f8402056feaa67d7daf0c9df874ff512c22f24e62f77f","first_computed_at":"2026-07-05T08:05:20.602343Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:05:20.602343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2YfAgfdQpSd6hR1QAdbVzUw6aTw+CnqBPet4s18hzBXAISuZslCLvguvhvdOqBpYgtte7vuR1mfQceq6eBsUAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:05:20.602756Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.04714","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f2e4a3a9d83c733ffcb6cbfee84f47e5d968380b5125c731295aaf875a056cfd","sha256:2f98dcad39464efa1420f4d4d03b7a0f9ebf9123be6b1e4d0bdc3dd8c1cc271e"],"state_sha256":"2deb89870c0eebc9a6c3c7986c455c2745e41b926cca99355dac2258c97d4605"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HDCsiflK/GMzW0IWAHPg3FN+R3z39VFi0gQDfAK3vzPH3qHvHs8B+kccUjDgjphJgd/awyUMMQ2OivfZBfnSBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T15:37:28.842699Z","bundle_sha256":"4ae58083d783e10e9f9fd72a1774ed42f5332ae0e92aa7a383f979e509ee976b"}}