{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:74OKFJHZKG7AOPODHARCH3ZC5U","short_pith_number":"pith:74OKFJHZ","canonical_record":{"source":{"id":"2109.04385","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-09-09T16:16:04Z","cross_cats_sorted":[],"title_canon_sha256":"a016d47fde9bfeb1f848ab8588522b4a94de50741c05cb773a635754c766fd04","abstract_canon_sha256":"156ed6611b36b2c004266dbf202883367c68d3c02a32c55ac81805ba0da4469e"},"schema_version":"1.0"},"canonical_sha256":"ff1ca2a4f951be073dc3382223ef22ed3e287bcb9fb67be5bfcc9361fca51fb4","source":{"kind":"arxiv","id":"2109.04385","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.04385","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"arxiv_version","alias_value":"2109.04385v1","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.04385","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"pith_short_12","alias_value":"74OKFJHZKG7A","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"pith_short_16","alias_value":"74OKFJHZKG7AOPOD","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"pith_short_8","alias_value":"74OKFJHZ","created_at":"2026-07-05T03:12:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:74OKFJHZKG7AOPODHARCH3ZC5U","target":"record","payload":{"canonical_record":{"source":{"id":"2109.04385","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-09-09T16:16:04Z","cross_cats_sorted":[],"title_canon_sha256":"a016d47fde9bfeb1f848ab8588522b4a94de50741c05cb773a635754c766fd04","abstract_canon_sha256":"156ed6611b36b2c004266dbf202883367c68d3c02a32c55ac81805ba0da4469e"},"schema_version":"1.0"},"canonical_sha256":"ff1ca2a4f951be073dc3382223ef22ed3e287bcb9fb67be5bfcc9361fca51fb4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:12:58.064253Z","signature_b64":"/LXTjT4h8vwK3E3UafWMDWac32M4/r3RGueeTibYbmj0XPgQ0TDccNHzsXdSr0pXlIGXXRBlyfjfixaFRdHuAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ff1ca2a4f951be073dc3382223ef22ed3e287bcb9fb67be5bfcc9361fca51fb4","last_reissued_at":"2026-07-05T03:12:58.063914Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:12:58.063914Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.04385","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:12:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2k9knYW6E8cF3CJEv8Q9UlXC9hrFdCUG5TxShM65nDtvpdj12UoqArYZNN+duC1wAwDhKeS+LZ4BIqX282ztBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:23:20.044121Z"},"content_sha256":"ab774cee85a7c0027ac6cc4fc81a93355a9e3b5e619ea6108df0f0626da5d547","schema_version":"1.0","event_id":"sha256:ab774cee85a7c0027ac6cc4fc81a93355a9e3b5e619ea6108df0f0626da5d547"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:74OKFJHZKG7AOPODHARCH3ZC5U","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Contrasting Human- and Machine-Generated Word-Level Adversarial Examples for Text Classification","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Bennett Kleinberg, Lewis D. Griffin, Max Bartolo, Maximilian Mozes, Pontus Stenetorp","submitted_at":"2021-09-09T16:16:04Z","abstract_excerpt":"Research shows that natural language processing models are generally considered to be vulnerable to adversarial attacks; but recent work has drawn attention to the issue of validating these adversarial inputs against certain criteria (e.g., the preservation of semantics and grammaticality). Enforcing constraints to uphold such criteria may render attacks unsuccessful, raising the question of whether valid attacks are actually feasible. In this work, we investigate this through the lens of human language ability. We report on crowdsourcing studies in which we task humans with iteratively modify"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.04385","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.04385/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:12:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qlqcm8YN21sjvVCCFggpPgnH+rGA8BOBF4aoXLchKHGvzrlbAJ9/vGbnFuIOxxBYMPnJYHnUrm5cMlDjZ6G8AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:23:20.045036Z"},"content_sha256":"12e81f1253be15f28d1ef0c33002f9eb837b81bfe48458fe0c4a91abbe8d2f21","schema_version":"1.0","event_id":"sha256:12e81f1253be15f28d1ef0c33002f9eb837b81bfe48458fe0c4a91abbe8d2f21"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/74OKFJHZKG7AOPODHARCH3ZC5U/bundle.json","state_url":"https://pith.science/pith/74OKFJHZKG7AOPODHARCH3ZC5U/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/74OKFJHZKG7AOPODHARCH3ZC5U/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T19:23:20Z","links":{"resolver":"https://pith.science/pith/74OKFJHZKG7AOPODHARCH3ZC5U","bundle":"https://pith.science/pith/74OKFJHZKG7AOPODHARCH3ZC5U/bundle.json","state":"https://pith.science/pith/74OKFJHZKG7AOPODHARCH3ZC5U/state.json","well_known_bundle":"https://pith.science/.well-known/pith/74OKFJHZKG7AOPODHARCH3ZC5U/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:74OKFJHZKG7AOPODHARCH3ZC5U","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"156ed6611b36b2c004266dbf202883367c68d3c02a32c55ac81805ba0da4469e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-09-09T16:16:04Z","title_canon_sha256":"a016d47fde9bfeb1f848ab8588522b4a94de50741c05cb773a635754c766fd04"},"schema_version":"1.0","source":{"id":"2109.04385","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.04385","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"arxiv_version","alias_value":"2109.04385v1","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.04385","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"pith_short_12","alias_value":"74OKFJHZKG7A","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"pith_short_16","alias_value":"74OKFJHZKG7AOPOD","created_at":"2026-07-05T03:12:58Z"},{"alias_kind":"pith_short_8","alias_value":"74OKFJHZ","created_at":"2026-07-05T03:12:58Z"}],"graph_snapshots":[{"event_id":"sha256:12e81f1253be15f28d1ef0c33002f9eb837b81bfe48458fe0c4a91abbe8d2f21","target":"graph","created_at":"2026-07-05T03:12:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.04385/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Research shows that natural language processing models are generally considered to be vulnerable to adversarial attacks; but recent work has drawn attention to the issue of validating these adversarial inputs against certain criteria (e.g., the preservation of semantics and grammaticality). Enforcing constraints to uphold such criteria may render attacks unsuccessful, raising the question of whether valid attacks are actually feasible. In this work, we investigate this through the lens of human language ability. We report on crowdsourcing studies in which we task humans with iteratively modify","authors_text":"Bennett Kleinberg, Lewis D. Griffin, Max Bartolo, Maximilian Mozes, Pontus Stenetorp","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-09-09T16:16:04Z","title":"Contrasting Human- and Machine-Generated Word-Level Adversarial Examples for Text Classification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.04385","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ab774cee85a7c0027ac6cc4fc81a93355a9e3b5e619ea6108df0f0626da5d547","target":"record","created_at":"2026-07-05T03:12:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"156ed6611b36b2c004266dbf202883367c68d3c02a32c55ac81805ba0da4469e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-09-09T16:16:04Z","title_canon_sha256":"a016d47fde9bfeb1f848ab8588522b4a94de50741c05cb773a635754c766fd04"},"schema_version":"1.0","source":{"id":"2109.04385","kind":"arxiv","version":1}},"canonical_sha256":"ff1ca2a4f951be073dc3382223ef22ed3e287bcb9fb67be5bfcc9361fca51fb4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ff1ca2a4f951be073dc3382223ef22ed3e287bcb9fb67be5bfcc9361fca51fb4","first_computed_at":"2026-07-05T03:12:58.063914Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:12:58.063914Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/LXTjT4h8vwK3E3UafWMDWac32M4/r3RGueeTibYbmj0XPgQ0TDccNHzsXdSr0pXlIGXXRBlyfjfixaFRdHuAg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:12:58.064253Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.04385","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ab774cee85a7c0027ac6cc4fc81a93355a9e3b5e619ea6108df0f0626da5d547","sha256:12e81f1253be15f28d1ef0c33002f9eb837b81bfe48458fe0c4a91abbe8d2f21"],"state_sha256":"d200129e852e46c02edca001c7978c127ab73eb1c0b1833c6c6fd4a25744da80"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yxi2MAcSR9Qmg7a+UJeeioBp4YOHk6wCO/U6r7ebvT1WPUjhVCmf6kzPbfxrA5xymZVxuk/uBG0TNcSTos0qDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T19:23:20.050819Z","bundle_sha256":"d30cd64dcb34753783b6d27211c9fd61f8b10b09d0a803c67250904acd98e484"}}