{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:A2PAD6S5JDJ2Z3CZRAX63GEQKA","short_pith_number":"pith:A2PAD6S5","canonical_record":{"source":{"id":"2503.01781","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-03T18:10:54Z","cross_cats_sorted":[],"title_canon_sha256":"c8dc0657753d67410b9d3c07df2fb564741209d6c4d5d6228f4330ec0c027734","abstract_canon_sha256":"e03200f5f6038997a8994085942c9852cdbe90d6f916122f9d6859def2acbd3a"},"schema_version":"1.0"},"canonical_sha256":"069e01fa5d48d3acec59882fed98905031e5cbec844a6e4161fa2df9f06790d5","source":{"kind":"arxiv","id":"2503.01781","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.01781","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"arxiv_version","alias_value":"2503.01781v2","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.01781","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"pith_short_12","alias_value":"A2PAD6S5JDJ2","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"pith_short_16","alias_value":"A2PAD6S5JDJ2Z3CZ","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"pith_short_8","alias_value":"A2PAD6S5","created_at":"2026-07-05T11:39:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:A2PAD6S5JDJ2Z3CZRAX63GEQKA","target":"record","payload":{"canonical_record":{"source":{"id":"2503.01781","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-03T18:10:54Z","cross_cats_sorted":[],"title_canon_sha256":"c8dc0657753d67410b9d3c07df2fb564741209d6c4d5d6228f4330ec0c027734","abstract_canon_sha256":"e03200f5f6038997a8994085942c9852cdbe90d6f916122f9d6859def2acbd3a"},"schema_version":"1.0"},"canonical_sha256":"069e01fa5d48d3acec59882fed98905031e5cbec844a6e4161fa2df9f06790d5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:39:50.288662Z","signature_b64":"KPXqrbnrr25B5rnWseQCvgqllPFcuIYbHcvWPYfmkgGkFwwY35wmRfz8QWlwB52zHlkOK+GsgpVY2ohcU5UeDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"069e01fa5d48d3acec59882fed98905031e5cbec844a6e4161fa2df9f06790d5","last_reissued_at":"2026-07-05T11:39:50.288113Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:39:50.288113Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.01781","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:39:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Anik+5Jy4qbgoh498uFOf3xokGo6xKRneCuq+Ofo9z1UDJ73lM65E/uJBkwlSsCHMnmEi7ks34pm52IIpW3uDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T01:24:44.621787Z"},"content_sha256":"cea2819de1fd8f0447fc0cd3433f259f0b9ffaaabef3ae2c0a7f9544a4757c1b","schema_version":"1.0","event_id":"sha256:cea2819de1fd8f0447fc0cd3433f259f0b9ffaaabef3ae2c0a7f9544a4757c1b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:A2PAD6S5JDJ2Z3CZRAX63GEQKA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cats Confuse Reasoning LLM: Query Agnostic Adversarial Triggers for Reasoning Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"James Zou, Meghana Rajeev, Nazneen Rajani, Oluwanifemi Bamgbose, Prapti Trivedi, Rajkumar Ramamurthy, Sathwik Tejaswi Madhusudan, Vikas Yadav","submitted_at":"2025-03-03T18:10:54Z","abstract_excerpt":"We investigate the robustness of reasoning models trained for step-by-step problem solving by introducing query-agnostic adversarial triggers - short, irrelevant text that, when appended to math problems, systematically mislead models to output incorrect answers without altering the problem's semantics. We propose CatAttack, an automated iterative attack pipeline for generating triggers on a weaker, less expensive proxy model (DeepSeek V3) and successfully transfer them to more advanced reasoning target models like DeepSeek R1 and DeepSeek R1-distilled-Qwen-32B, resulting in greater than 300% "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.01781","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.01781/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:39:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YFrzGVq+JrVKiA0PYReHOzWgmyNmuCP+SjEW2JqoQOll3f4Qe3vO09KIY+MSsPlDk8ni5M338/dfHejvDooxBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T01:24:44.622173Z"},"content_sha256":"0257a59cc46c0bd6ea3a1c48bbcba7cd9611615ecebf914f28a95a2f80e48773","schema_version":"1.0","event_id":"sha256:0257a59cc46c0bd6ea3a1c48bbcba7cd9611615ecebf914f28a95a2f80e48773"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/A2PAD6S5JDJ2Z3CZRAX63GEQKA/bundle.json","state_url":"https://pith.science/pith/A2PAD6S5JDJ2Z3CZRAX63GEQKA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/A2PAD6S5JDJ2Z3CZRAX63GEQKA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T01:24:44Z","links":{"resolver":"https://pith.science/pith/A2PAD6S5JDJ2Z3CZRAX63GEQKA","bundle":"https://pith.science/pith/A2PAD6S5JDJ2Z3CZRAX63GEQKA/bundle.json","state":"https://pith.science/pith/A2PAD6S5JDJ2Z3CZRAX63GEQKA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/A2PAD6S5JDJ2Z3CZRAX63GEQKA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:A2PAD6S5JDJ2Z3CZRAX63GEQKA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e03200f5f6038997a8994085942c9852cdbe90d6f916122f9d6859def2acbd3a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-03T18:10:54Z","title_canon_sha256":"c8dc0657753d67410b9d3c07df2fb564741209d6c4d5d6228f4330ec0c027734"},"schema_version":"1.0","source":{"id":"2503.01781","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.01781","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"arxiv_version","alias_value":"2503.01781v2","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.01781","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"pith_short_12","alias_value":"A2PAD6S5JDJ2","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"pith_short_16","alias_value":"A2PAD6S5JDJ2Z3CZ","created_at":"2026-07-05T11:39:50Z"},{"alias_kind":"pith_short_8","alias_value":"A2PAD6S5","created_at":"2026-07-05T11:39:50Z"}],"graph_snapshots":[{"event_id":"sha256:0257a59cc46c0bd6ea3a1c48bbcba7cd9611615ecebf914f28a95a2f80e48773","target":"graph","created_at":"2026-07-05T11:39:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.01781/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We investigate the robustness of reasoning models trained for step-by-step problem solving by introducing query-agnostic adversarial triggers - short, irrelevant text that, when appended to math problems, systematically mislead models to output incorrect answers without altering the problem's semantics. We propose CatAttack, an automated iterative attack pipeline for generating triggers on a weaker, less expensive proxy model (DeepSeek V3) and successfully transfer them to more advanced reasoning target models like DeepSeek R1 and DeepSeek R1-distilled-Qwen-32B, resulting in greater than 300% ","authors_text":"James Zou, Meghana Rajeev, Nazneen Rajani, Oluwanifemi Bamgbose, Prapti Trivedi, Rajkumar Ramamurthy, Sathwik Tejaswi Madhusudan, Vikas Yadav","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-03T18:10:54Z","title":"Cats Confuse Reasoning LLM: Query Agnostic Adversarial Triggers for Reasoning Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.01781","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cea2819de1fd8f0447fc0cd3433f259f0b9ffaaabef3ae2c0a7f9544a4757c1b","target":"record","created_at":"2026-07-05T11:39:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e03200f5f6038997a8994085942c9852cdbe90d6f916122f9d6859def2acbd3a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-03T18:10:54Z","title_canon_sha256":"c8dc0657753d67410b9d3c07df2fb564741209d6c4d5d6228f4330ec0c027734"},"schema_version":"1.0","source":{"id":"2503.01781","kind":"arxiv","version":2}},"canonical_sha256":"069e01fa5d48d3acec59882fed98905031e5cbec844a6e4161fa2df9f06790d5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"069e01fa5d48d3acec59882fed98905031e5cbec844a6e4161fa2df9f06790d5","first_computed_at":"2026-07-05T11:39:50.288113Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:39:50.288113Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KPXqrbnrr25B5rnWseQCvgqllPFcuIYbHcvWPYfmkgGkFwwY35wmRfz8QWlwB52zHlkOK+GsgpVY2ohcU5UeDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:39:50.288662Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.01781","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cea2819de1fd8f0447fc0cd3433f259f0b9ffaaabef3ae2c0a7f9544a4757c1b","sha256:0257a59cc46c0bd6ea3a1c48bbcba7cd9611615ecebf914f28a95a2f80e48773"],"state_sha256":"5b6e3b1948f2a997a9730ef2cf172b32f2a3336af6bbb3b41d18046ddf47fc4d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1yLzmY+TIA3E2G2Fe0Il9I4jcA7oxXsgoUJnW/Jubaln4w2iqwCtxO+LXGIlp1IgARgpbTdKzzPy6isnoCDEBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T01:24:44.624545Z","bundle_sha256":"5802fed99b46fa7564fdacc02e01b01a24883c212288b5825c9eed314843de17"}}