{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:5ZHEIFPNE7ICIGIPC43CGR2DH7","short_pith_number":"pith:5ZHEIFPN","canonical_record":{"source":{"id":"2106.08970","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-16T17:09:55Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"93dee3c8af4ef827e196a6b551e5c6b28ed74aa4bba5148f2f3f93a9241237bd","abstract_canon_sha256":"b04546949bfd34b452c2d3da166b1912feb50c2ece1ec469a22d9379a27873b3"},"schema_version":"1.0"},"canonical_sha256":"ee4e4415ed27d024190f17362347433fe0abdaf43f0ccf602ff6d82c1e50bfd4","source":{"kind":"arxiv","id":"2106.08970","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.08970","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"arxiv_version","alias_value":"2106.08970v3","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.08970","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"pith_short_12","alias_value":"5ZHEIFPNE7IC","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"pith_short_16","alias_value":"5ZHEIFPNE7ICIGIP","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"pith_short_8","alias_value":"5ZHEIFPN","created_at":"2026-07-05T05:06:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:5ZHEIFPNE7ICIGIPC43CGR2DH7","target":"record","payload":{"canonical_record":{"source":{"id":"2106.08970","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-16T17:09:55Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"93dee3c8af4ef827e196a6b551e5c6b28ed74aa4bba5148f2f3f93a9241237bd","abstract_canon_sha256":"b04546949bfd34b452c2d3da166b1912feb50c2ece1ec469a22d9379a27873b3"},"schema_version":"1.0"},"canonical_sha256":"ee4e4415ed27d024190f17362347433fe0abdaf43f0ccf602ff6d82c1e50bfd4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:06:07.764307Z","signature_b64":"8ItPf3/s4Kto5isP8GfLoqMynSXZxrPh2RmNmVxVKp8j/pbH4mDtuWD3UTYjhf01YJYADx4uG/oQIKDHB3NpBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ee4e4415ed27d024190f17362347433fe0abdaf43f0ccf602ff6d82c1e50bfd4","last_reissued_at":"2026-07-05T05:06:07.763798Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:06:07.763798Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.08970","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:06:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KD6/OirgSDydfobQnoC7qaVMEvudHooB26EwB1RFgI+KrkfIENK7GdUQ2cSxwtk+zjUGt9/f/BnsB1niW6DwCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T13:11:23.694645Z"},"content_sha256":"9ac3501d27ef0daa86a02a17ad1061270a3a104f2bf000bfb8c292dc4d195fa0","schema_version":"1.0","event_id":"sha256:9ac3501d27ef0daa86a02a17ad1061270a3a104f2bf000bfb8c292dc4d195fa0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:5ZHEIFPNE7ICIGIPC43CGR2DH7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Hossein Souri, Liam Fowl, Micah Goldblum, Rama Chellappa, Tom Goldstein","submitted_at":"2021-06-16T17:09:55Z","abstract_excerpt":"As the curation of data for machine learning becomes increasingly automated, dataset tampering is a mounting threat. Backdoor attackers tamper with training data to embed a vulnerability in models that are trained on that data. This vulnerability is then activated at inference time by placing a \"trigger\" into the model's input. Typical backdoor attacks insert the trigger directly into the training data, although the presence of such an attack may be visible upon inspection. In contrast, the Hidden Trigger Backdoor Attack achieves poisoning without placing a trigger into the training data at al"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.08970","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.08970/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:06:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NL0ATFa6bXVyB/8mCx9wwyfcVZ+13rpyaVZxmDnKRHy474RfCAneUC39FmyRbnwKcBDGIqiH3wag7x9J5gvnDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T13:11:23.695159Z"},"content_sha256":"cb2bd653d07dc34289766f06c2ebd9c7d0fcd5aa1721f44fbd7434b5edc14a93","schema_version":"1.0","event_id":"sha256:cb2bd653d07dc34289766f06c2ebd9c7d0fcd5aa1721f44fbd7434b5edc14a93"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5ZHEIFPNE7ICIGIPC43CGR2DH7/bundle.json","state_url":"https://pith.science/pith/5ZHEIFPNE7ICIGIPC43CGR2DH7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5ZHEIFPNE7ICIGIPC43CGR2DH7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T13:11:23Z","links":{"resolver":"https://pith.science/pith/5ZHEIFPNE7ICIGIPC43CGR2DH7","bundle":"https://pith.science/pith/5ZHEIFPNE7ICIGIPC43CGR2DH7/bundle.json","state":"https://pith.science/pith/5ZHEIFPNE7ICIGIPC43CGR2DH7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5ZHEIFPNE7ICIGIPC43CGR2DH7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:5ZHEIFPNE7ICIGIPC43CGR2DH7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b04546949bfd34b452c2d3da166b1912feb50c2ece1ec469a22d9379a27873b3","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-16T17:09:55Z","title_canon_sha256":"93dee3c8af4ef827e196a6b551e5c6b28ed74aa4bba5148f2f3f93a9241237bd"},"schema_version":"1.0","source":{"id":"2106.08970","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.08970","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"arxiv_version","alias_value":"2106.08970v3","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.08970","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"pith_short_12","alias_value":"5ZHEIFPNE7IC","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"pith_short_16","alias_value":"5ZHEIFPNE7ICIGIP","created_at":"2026-07-05T05:06:07Z"},{"alias_kind":"pith_short_8","alias_value":"5ZHEIFPN","created_at":"2026-07-05T05:06:07Z"}],"graph_snapshots":[{"event_id":"sha256:cb2bd653d07dc34289766f06c2ebd9c7d0fcd5aa1721f44fbd7434b5edc14a93","target":"graph","created_at":"2026-07-05T05:06:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.08970/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As the curation of data for machine learning becomes increasingly automated, dataset tampering is a mounting threat. Backdoor attackers tamper with training data to embed a vulnerability in models that are trained on that data. This vulnerability is then activated at inference time by placing a \"trigger\" into the model's input. Typical backdoor attacks insert the trigger directly into the training data, although the presence of such an attack may be visible upon inspection. In contrast, the Hidden Trigger Backdoor Attack achieves poisoning without placing a trigger into the training data at al","authors_text":"Hossein Souri, Liam Fowl, Micah Goldblum, Rama Chellappa, Tom Goldstein","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-16T17:09:55Z","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.08970","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9ac3501d27ef0daa86a02a17ad1061270a3a104f2bf000bfb8c292dc4d195fa0","target":"record","created_at":"2026-07-05T05:06:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b04546949bfd34b452c2d3da166b1912feb50c2ece1ec469a22d9379a27873b3","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-16T17:09:55Z","title_canon_sha256":"93dee3c8af4ef827e196a6b551e5c6b28ed74aa4bba5148f2f3f93a9241237bd"},"schema_version":"1.0","source":{"id":"2106.08970","kind":"arxiv","version":3}},"canonical_sha256":"ee4e4415ed27d024190f17362347433fe0abdaf43f0ccf602ff6d82c1e50bfd4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ee4e4415ed27d024190f17362347433fe0abdaf43f0ccf602ff6d82c1e50bfd4","first_computed_at":"2026-07-05T05:06:07.763798Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:06:07.763798Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8ItPf3/s4Kto5isP8GfLoqMynSXZxrPh2RmNmVxVKp8j/pbH4mDtuWD3UTYjhf01YJYADx4uG/oQIKDHB3NpBg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:06:07.764307Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.08970","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9ac3501d27ef0daa86a02a17ad1061270a3a104f2bf000bfb8c292dc4d195fa0","sha256:cb2bd653d07dc34289766f06c2ebd9c7d0fcd5aa1721f44fbd7434b5edc14a93"],"state_sha256":"9bb71cba8149a170c9d1f64c665837c4c89edc18c9098ab2c085f216e364d408"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dU5ZBXwG095CXAjWlW4im7aLZ9c6C6SOeHipA+HfWlTeqSrv2Zp7/1DfL4kvfiaAXNIlnynnrnufAdYfi8LqAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T13:11:23.700878Z","bundle_sha256":"908d6cf612b4702c732aa60a991707502aa73e383f308468e9c5cec62454e137"}}