{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5A5FZJHW3QICC3SE5JIQLCMUN6","short_pith_number":"pith:5A5FZJHW","canonical_record":{"source":{"id":"2405.15245","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T06:13:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b66b8586e0a02040d8a555cf4d7f479e843b96aa54e0b7b489880302e0518a38","abstract_canon_sha256":"96fc2d9f1cee001e203eb6f37e4985afc93bae435532db4a2c81b37431f2fe5d"},"schema_version":"1.0"},"canonical_sha256":"e83a5ca4f6dc10216e44ea510589946f98e648de8a19424b0e35ff4fd97a2080","source":{"kind":"arxiv","id":"2405.15245","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.15245","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"arxiv_version","alias_value":"2405.15245v1","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.15245","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"pith_short_12","alias_value":"5A5FZJHW3QIC","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"pith_short_16","alias_value":"5A5FZJHW3QICC3SE","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"pith_short_8","alias_value":"5A5FZJHW","created_at":"2026-07-05T08:22:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5A5FZJHW3QICC3SE5JIQLCMUN6","target":"record","payload":{"canonical_record":{"source":{"id":"2405.15245","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T06:13:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b66b8586e0a02040d8a555cf4d7f479e843b96aa54e0b7b489880302e0518a38","abstract_canon_sha256":"96fc2d9f1cee001e203eb6f37e4985afc93bae435532db4a2c81b37431f2fe5d"},"schema_version":"1.0"},"canonical_sha256":"e83a5ca4f6dc10216e44ea510589946f98e648de8a19424b0e35ff4fd97a2080","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:22:46.816610Z","signature_b64":"luNvuSDV89rAVFE70CvORY1V+nYFebiLuOSmrrtinZnmMjp6XNf+2wtti8RTOyDbBZo0053u1bEd8svkqatcBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e83a5ca4f6dc10216e44ea510589946f98e648de8a19424b0e35ff4fd97a2080","last_reissued_at":"2026-07-05T08:22:46.816100Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:22:46.816100Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.15245","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:22:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2qPg051K6qx6mDCUbE/N31AWz/XyFSY5ONlR2ZFH+j5hnWCJ7mkomSu8x0zkYvSTb5mFChQzfiviH4O8nnqlBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T07:30:16.663919Z"},"content_sha256":"fd83bcd7d1d1a68c3647ac13a2fe1dce27202c3344fbc562181dcfa95596e622","schema_version":"1.0","event_id":"sha256:fd83bcd7d1d1a68c3647ac13a2fe1dce27202c3344fbc562181dcfa95596e622"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5A5FZJHW3QICC3SE5JIQLCMUN6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cooperative Backdoor Attack in Decentralized Reinforcement Learning with Theoretical Guarantee","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Dongxiao Yu, Mengtong Gao, Xiuzhen Cheng, Yifei Zou, Zuyuan Zhang","submitted_at":"2024-05-24T06:13:31Z","abstract_excerpt":"The safety of decentralized reinforcement learning (RL) is a challenging problem since malicious agents can share their poisoned policies with benign agents. The paper investigates a cooperative backdoor attack in a decentralized reinforcement learning scenario. Differing from the existing methods that hide a whole backdoor attack behind their shared policies, our method decomposes the backdoor behavior into multiple components according to the state space of RL. Each malicious agent hides one component in its policy and shares its policy with the benign agents. When a benign agent learns all "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.15245","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.15245/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:22:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eL5AV/GnUsrGJBtCDfomKkbYM5HdgfoVdeZEDs92QGw8r8t/nt1j7kza+prhbuigflwqi46B1ReMZS2PHXhSBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T07:30:16.664484Z"},"content_sha256":"eb5e4feeb1363a94b4d3e8ab7705bada0cdef11f50d37992306911da25bc480e","schema_version":"1.0","event_id":"sha256:eb5e4feeb1363a94b4d3e8ab7705bada0cdef11f50d37992306911da25bc480e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5A5FZJHW3QICC3SE5JIQLCMUN6/bundle.json","state_url":"https://pith.science/pith/5A5FZJHW3QICC3SE5JIQLCMUN6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5A5FZJHW3QICC3SE5JIQLCMUN6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T07:30:16Z","links":{"resolver":"https://pith.science/pith/5A5FZJHW3QICC3SE5JIQLCMUN6","bundle":"https://pith.science/pith/5A5FZJHW3QICC3SE5JIQLCMUN6/bundle.json","state":"https://pith.science/pith/5A5FZJHW3QICC3SE5JIQLCMUN6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5A5FZJHW3QICC3SE5JIQLCMUN6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5A5FZJHW3QICC3SE5JIQLCMUN6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"96fc2d9f1cee001e203eb6f37e4985afc93bae435532db4a2c81b37431f2fe5d","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T06:13:31Z","title_canon_sha256":"b66b8586e0a02040d8a555cf4d7f479e843b96aa54e0b7b489880302e0518a38"},"schema_version":"1.0","source":{"id":"2405.15245","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.15245","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"arxiv_version","alias_value":"2405.15245v1","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.15245","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"pith_short_12","alias_value":"5A5FZJHW3QIC","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"pith_short_16","alias_value":"5A5FZJHW3QICC3SE","created_at":"2026-07-05T08:22:46Z"},{"alias_kind":"pith_short_8","alias_value":"5A5FZJHW","created_at":"2026-07-05T08:22:46Z"}],"graph_snapshots":[{"event_id":"sha256:eb5e4feeb1363a94b4d3e8ab7705bada0cdef11f50d37992306911da25bc480e","target":"graph","created_at":"2026-07-05T08:22:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.15245/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The safety of decentralized reinforcement learning (RL) is a challenging problem since malicious agents can share their poisoned policies with benign agents. The paper investigates a cooperative backdoor attack in a decentralized reinforcement learning scenario. Differing from the existing methods that hide a whole backdoor attack behind their shared policies, our method decomposes the backdoor behavior into multiple components according to the state space of RL. Each malicious agent hides one component in its policy and shares its policy with the benign agents. When a benign agent learns all ","authors_text":"Dongxiao Yu, Mengtong Gao, Xiuzhen Cheng, Yifei Zou, Zuyuan Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T06:13:31Z","title":"Cooperative Backdoor Attack in Decentralized Reinforcement Learning with Theoretical Guarantee"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.15245","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fd83bcd7d1d1a68c3647ac13a2fe1dce27202c3344fbc562181dcfa95596e622","target":"record","created_at":"2026-07-05T08:22:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"96fc2d9f1cee001e203eb6f37e4985afc93bae435532db4a2c81b37431f2fe5d","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-24T06:13:31Z","title_canon_sha256":"b66b8586e0a02040d8a555cf4d7f479e843b96aa54e0b7b489880302e0518a38"},"schema_version":"1.0","source":{"id":"2405.15245","kind":"arxiv","version":1}},"canonical_sha256":"e83a5ca4f6dc10216e44ea510589946f98e648de8a19424b0e35ff4fd97a2080","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e83a5ca4f6dc10216e44ea510589946f98e648de8a19424b0e35ff4fd97a2080","first_computed_at":"2026-07-05T08:22:46.816100Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:22:46.816100Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"luNvuSDV89rAVFE70CvORY1V+nYFebiLuOSmrrtinZnmMjp6XNf+2wtti8RTOyDbBZo0053u1bEd8svkqatcBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:22:46.816610Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.15245","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fd83bcd7d1d1a68c3647ac13a2fe1dce27202c3344fbc562181dcfa95596e622","sha256:eb5e4feeb1363a94b4d3e8ab7705bada0cdef11f50d37992306911da25bc480e"],"state_sha256":"41ffd592f8f1f2ca5ec7f725fc18830f479f80fb4aeddb71a50051ae9c6e2baf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"80MTW2DxSq79ph8IDG5fAtIapXwHjKLusRHm2Ri5hS3D79Sou0ff4C4xreGTbJcTmNnLFaHbMcOYxtHMCo8NAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T07:30:16.670603Z","bundle_sha256":"107f03da1e662b3d75d875b20d7edb60396cf297237d1bd3a8fd9006dbf31168"}}