{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ALF3ECORCYA2WOQPKZXG5655JH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d6b92c0a28e74197ef5f8f9c56cde1b133923011e3773aaa45a1346013506838","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-29T04:35:48Z","title_canon_sha256":"654b5326678fd427ab1b143aa41be0f89956ca132a56c74e634f622162ff8d53"},"schema_version":"1.0","source":{"id":"2401.15883","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.15883","created_at":"2026-07-05T10:09:02Z"},{"alias_kind":"arxiv_version","alias_value":"2401.15883v3","created_at":"2026-07-05T10:09:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.15883","created_at":"2026-07-05T10:09:02Z"},{"alias_kind":"pith_short_12","alias_value":"ALF3ECORCYA2","created_at":"2026-07-05T10:09:02Z"},{"alias_kind":"pith_short_16","alias_value":"ALF3ECORCYA2WOQP","created_at":"2026-07-05T10:09:02Z"},{"alias_kind":"pith_short_8","alias_value":"ALF3ECOR","created_at":"2026-07-05T10:09:02Z"}],"graph_snapshots":[{"event_id":"sha256:c76256189441dfaabd683730712037cd4ef2d35df484b9921d24b4eef0ef500f","target":"graph","created_at":"2026-07-05T10:09:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.15883/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Pre-trained models (PTMs) are widely adopted across various downstream tasks in the machine learning supply chain. Adopting untrustworthy PTMs introduces significant security risks, where adversaries can poison the model supply chain by embedding hidden malicious behaviors (backdoors) into PTMs. However, existing backdoor attacks to PTMs can only achieve partially task-agnostic and the embedded backdoors are easily erased during the fine-tuning process. This makes it challenging for the backdoors to persist and propagate through the supply chain. In this paper, we propose a novel and severer b","authors_text":"Hangcheng Liu, Hao Wang, Jialing He, Shangwei Guo, Tao Xiang, Tianwei Zhang","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-29T04:35:48Z","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.15883","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a13756e6d13e4c710b7fdee35bb59defbbb3bbff51fabf75ddf3bfda67a2108e","target":"record","created_at":"2026-07-05T10:09:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d6b92c0a28e74197ef5f8f9c56cde1b133923011e3773aaa45a1346013506838","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-29T04:35:48Z","title_canon_sha256":"654b5326678fd427ab1b143aa41be0f89956ca132a56c74e634f622162ff8d53"},"schema_version":"1.0","source":{"id":"2401.15883","kind":"arxiv","version":3}},"canonical_sha256":"02cbb209d11601ab3a0f566e6efbbd49cd6bafe7fcdedd593eeea3bb643cde67","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"02cbb209d11601ab3a0f566e6efbbd49cd6bafe7fcdedd593eeea3bb643cde67","first_computed_at":"2026-07-05T10:09:02.046926Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:09:02.046926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S7niWALKR2kJMJx88LwMqieNnUa4eshqYgh4UQTty2zvzRjyck3lEqFtwrxHiBI41VOKsOXXvzuHl2cjqoRXCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:09:02.047396Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.15883","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a13756e6d13e4c710b7fdee35bb59defbbb3bbff51fabf75ddf3bfda67a2108e","sha256:c76256189441dfaabd683730712037cd4ef2d35df484b9921d24b4eef0ef500f"],"state_sha256":"2a11fe07d4438365b9474e0ff3f19286d6fa84c5a3d2954cc4a24893d0aa9860"}