{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:6GHCM3WCOZGOCGTWBPKPMJ2HBI","short_pith_number":"pith:6GHCM3WC","canonical_record":{"source":{"id":"2509.08746","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T13:40:54Z","cross_cats_sorted":[],"title_canon_sha256":"6dac3ff9fb6b4fd596eb3ded1a6325227ad44fb74e49a616430170962ed8a300","abstract_canon_sha256":"2d7870a55207d9588f8c529c6fd05f3c266ac9c41cf2f685ad097395947398f4"},"schema_version":"1.0"},"canonical_sha256":"f18e266ec2764ce11a760bd4f627470a15d60745b3d8cdb7950a87dcae6b5e76","source":{"kind":"arxiv","id":"2509.08746","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.08746","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"arxiv_version","alias_value":"2509.08746v1","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.08746","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"pith_short_12","alias_value":"6GHCM3WCOZGO","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"pith_short_16","alias_value":"6GHCM3WCOZGOCGTW","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"pith_short_8","alias_value":"6GHCM3WC","created_at":"2026-07-05T12:08:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:6GHCM3WCOZGOCGTWBPKPMJ2HBI","target":"record","payload":{"canonical_record":{"source":{"id":"2509.08746","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T13:40:54Z","cross_cats_sorted":[],"title_canon_sha256":"6dac3ff9fb6b4fd596eb3ded1a6325227ad44fb74e49a616430170962ed8a300","abstract_canon_sha256":"2d7870a55207d9588f8c529c6fd05f3c266ac9c41cf2f685ad097395947398f4"},"schema_version":"1.0"},"canonical_sha256":"f18e266ec2764ce11a760bd4f627470a15d60745b3d8cdb7950a87dcae6b5e76","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:08:35.317160Z","signature_b64":"tuAndCHPwDhiPEzhHjSzmPctTwALUiU093TdbYdW4h/sa6QeZNekTKiEL0+S2AnP+07ZHpjl8sr/gV9oU1mBDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f18e266ec2764ce11a760bd4f627470a15d60745b3d8cdb7950a87dcae6b5e76","last_reissued_at":"2026-07-05T12:08:35.316583Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:08:35.316583Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.08746","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:08:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pIQmrBDbT5OHCvGwqntB8Ck72exczINbzlY4JvP2jxtDYL7sxk706hjhFraFpmtFItRtOb2P6VjW09kkfsh+Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:06:16.218731Z"},"content_sha256":"faff9ad2fca9d86be5933c8515761443b74de820cc31d4fb0c005ed3d72d72b5","schema_version":"1.0","event_id":"sha256:faff9ad2fca9d86be5933c8515761443b74de820cc31d4fb0c005ed3d72d72b5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:6GHCM3WCOZGOCGTWBPKPMJ2HBI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stealth by Conformity: Evading Robust Aggregation through Adaptive Poisoning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ihsen Alouani, Jesus Martinez del Rincon, Ryan McGaughey","submitted_at":"2025-09-03T13:40:54Z","abstract_excerpt":"Federated Learning (FL) is a distributed learning paradigm designed to address privacy concerns. However, FL is vulnerable to poisoning attacks, where Byzantine clients compromise the integrity of the global model by submitting malicious updates. Robust aggregation methods have been widely adopted to mitigate such threats, relying on the core assumption that malicious updates are inherently out-of-distribution and can therefore be identified and excluded before aggregating client updates. In this paper, we challenge this underlying assumption by showing that a model can be poisoned while keepi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.08746","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.08746/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:08:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oETMcPDA2ABZn1yhY+6lPd1HLj0dCHduWSTNnu31fCuEa8tlAYxQ0m+vxaG+JhUuybi1ghK96aI1Km0O50uRCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:06:16.221960Z"},"content_sha256":"58ce0a5d294a41005a2399aced3b00ca1752dba5505f3e1561e045fc01fe99fb","schema_version":"1.0","event_id":"sha256:58ce0a5d294a41005a2399aced3b00ca1752dba5505f3e1561e045fc01fe99fb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6GHCM3WCOZGOCGTWBPKPMJ2HBI/bundle.json","state_url":"https://pith.science/pith/6GHCM3WCOZGOCGTWBPKPMJ2HBI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6GHCM3WCOZGOCGTWBPKPMJ2HBI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:06:16Z","links":{"resolver":"https://pith.science/pith/6GHCM3WCOZGOCGTWBPKPMJ2HBI","bundle":"https://pith.science/pith/6GHCM3WCOZGOCGTWBPKPMJ2HBI/bundle.json","state":"https://pith.science/pith/6GHCM3WCOZGOCGTWBPKPMJ2HBI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6GHCM3WCOZGOCGTWBPKPMJ2HBI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:6GHCM3WCOZGOCGTWBPKPMJ2HBI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2d7870a55207d9588f8c529c6fd05f3c266ac9c41cf2f685ad097395947398f4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T13:40:54Z","title_canon_sha256":"6dac3ff9fb6b4fd596eb3ded1a6325227ad44fb74e49a616430170962ed8a300"},"schema_version":"1.0","source":{"id":"2509.08746","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.08746","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"arxiv_version","alias_value":"2509.08746v1","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.08746","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"pith_short_12","alias_value":"6GHCM3WCOZGO","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"pith_short_16","alias_value":"6GHCM3WCOZGOCGTW","created_at":"2026-07-05T12:08:35Z"},{"alias_kind":"pith_short_8","alias_value":"6GHCM3WC","created_at":"2026-07-05T12:08:35Z"}],"graph_snapshots":[{"event_id":"sha256:58ce0a5d294a41005a2399aced3b00ca1752dba5505f3e1561e045fc01fe99fb","target":"graph","created_at":"2026-07-05T12:08:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.08746/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) is a distributed learning paradigm designed to address privacy concerns. However, FL is vulnerable to poisoning attacks, where Byzantine clients compromise the integrity of the global model by submitting malicious updates. Robust aggregation methods have been widely adopted to mitigate such threats, relying on the core assumption that malicious updates are inherently out-of-distribution and can therefore be identified and excluded before aggregating client updates. In this paper, we challenge this underlying assumption by showing that a model can be poisoned while keepi","authors_text":"Ihsen Alouani, Jesus Martinez del Rincon, Ryan McGaughey","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T13:40:54Z","title":"Stealth by Conformity: Evading Robust Aggregation through Adaptive Poisoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.08746","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:faff9ad2fca9d86be5933c8515761443b74de820cc31d4fb0c005ed3d72d72b5","target":"record","created_at":"2026-07-05T12:08:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2d7870a55207d9588f8c529c6fd05f3c266ac9c41cf2f685ad097395947398f4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-03T13:40:54Z","title_canon_sha256":"6dac3ff9fb6b4fd596eb3ded1a6325227ad44fb74e49a616430170962ed8a300"},"schema_version":"1.0","source":{"id":"2509.08746","kind":"arxiv","version":1}},"canonical_sha256":"f18e266ec2764ce11a760bd4f627470a15d60745b3d8cdb7950a87dcae6b5e76","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f18e266ec2764ce11a760bd4f627470a15d60745b3d8cdb7950a87dcae6b5e76","first_computed_at":"2026-07-05T12:08:35.316583Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:08:35.316583Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tuAndCHPwDhiPEzhHjSzmPctTwALUiU093TdbYdW4h/sa6QeZNekTKiEL0+S2AnP+07ZHpjl8sr/gV9oU1mBDA==","signature_status":"signed_v1","signed_at":"2026-07-05T12:08:35.317160Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.08746","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:faff9ad2fca9d86be5933c8515761443b74de820cc31d4fb0c005ed3d72d72b5","sha256:58ce0a5d294a41005a2399aced3b00ca1752dba5505f3e1561e045fc01fe99fb"],"state_sha256":"7654dbd661817a86405df131b88272dc42820625852e33987dce80766b9d3e76"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tDlSk1xGu9cE3MSJk/647VBligFP55OYDG1lFV7UAkfOm4wiEgZevHZwJ2Vj6dvJVHvLS4eghN6xvYsY2UQiDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:06:16.262458Z","bundle_sha256":"11dc14f899033adfe510c78cac658ea6180276e8c4407aba9cd85c00342761d5"}}