{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BB2BVX65WSAT3O5ZL557GA7JJC","short_pith_number":"pith:BB2BVX65","canonical_record":{"source":{"id":"2312.04004","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-12-07T02:44:35Z","cross_cats_sorted":[],"title_canon_sha256":"10e324c7e988844e432292370eab1917b1eb5b475c157a3a9087fd077cb34979","abstract_canon_sha256":"3a9b8593aab1caa6565fc26f1f632f0fe0970b4b6733bba7391c06ccb1d35895"},"schema_version":"1.0"},"canonical_sha256":"08741adfddb4813dbbb95f7bf303e9488afd924b1c2f8d086b852718e103b3d0","source":{"kind":"arxiv","id":"2312.04004","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04004","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04004v2","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04004","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"pith_short_12","alias_value":"BB2BVX65WSAT","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"pith_short_16","alias_value":"BB2BVX65WSAT3O5Z","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"pith_short_8","alias_value":"BB2BVX65","created_at":"2026-07-05T07:22:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BB2BVX65WSAT3O5ZL557GA7JJC","target":"record","payload":{"canonical_record":{"source":{"id":"2312.04004","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-12-07T02:44:35Z","cross_cats_sorted":[],"title_canon_sha256":"10e324c7e988844e432292370eab1917b1eb5b475c157a3a9087fd077cb34979","abstract_canon_sha256":"3a9b8593aab1caa6565fc26f1f632f0fe0970b4b6733bba7391c06ccb1d35895"},"schema_version":"1.0"},"canonical_sha256":"08741adfddb4813dbbb95f7bf303e9488afd924b1c2f8d086b852718e103b3d0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:22:27.529463Z","signature_b64":"7NFUuZhGGEVxFPCv9KC4yYoAVPSlDzqOLOUFupZGfyokeNjVsYMpUVvdM5O1U/CAjg5DOpHh8vkJqEBMvypkBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"08741adfddb4813dbbb95f7bf303e9488afd924b1c2f8d086b852718e103b3d0","last_reissued_at":"2026-07-05T07:22:27.528926Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:22:27.528926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.04004","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:22:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eOVmqKZMgCpUK/wQf+N6PCxWO7jGIqZNlWHNWMhoLLvIMBk4JyrQ2Ry2JuQFOW4n4j5AWwv9LjjM/2x1BzXzCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T20:37:38.769589Z"},"content_sha256":"45b1399285408910501926f9fc2693945e91ebbad1dee6f53c340d26e0e7aa2d","schema_version":"1.0","event_id":"sha256:45b1399285408910501926f9fc2693945e91ebbad1dee6f53c340d26e0e7aa2d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BB2BVX65WSAT3O5ZL557GA7JJC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Occlusion-based Detection of Trojan-triggering Inputs in Large Language Models of Code","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Aftab Hussain, Bowen Xu, Md Rafiqul Islam Rabin, Mohammad Amin Alipour, Toufique Ahmed","submitted_at":"2023-12-07T02:44:35Z","abstract_excerpt":"Large language models (LLMs) are becoming an integrated part of software development. These models are trained on large datasets for code, where it is hard to verify each data point. Therefore, a potential attack surface can be to inject poisonous data into the training data to make models vulnerable, aka trojaned. It can pose a significant threat by hiding manipulative behaviors inside models, leading to compromising the integrity of the models in downstream tasks.\n  In this paper, we propose an occlusion-based human-in-the-loop technique, OSeql, to distinguish trojan-triggering inputs of cod"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04004","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.04004/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:22:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rmMXnD+lSmGlYYo5j8sZSE33jzASw+Kg9VOkchPi5Je9XsFWmHbZABnYFEGYS9VfmuuymS7ActmhQWuoXXriAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T20:37:38.770463Z"},"content_sha256":"bff67edd28fe1f04061b068a0fd3716fc6bc4bcc89f6dbc4ae45721c34ee8ffd","schema_version":"1.0","event_id":"sha256:bff67edd28fe1f04061b068a0fd3716fc6bc4bcc89f6dbc4ae45721c34ee8ffd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BB2BVX65WSAT3O5ZL557GA7JJC/bundle.json","state_url":"https://pith.science/pith/BB2BVX65WSAT3O5ZL557GA7JJC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BB2BVX65WSAT3O5ZL557GA7JJC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T20:37:38Z","links":{"resolver":"https://pith.science/pith/BB2BVX65WSAT3O5ZL557GA7JJC","bundle":"https://pith.science/pith/BB2BVX65WSAT3O5ZL557GA7JJC/bundle.json","state":"https://pith.science/pith/BB2BVX65WSAT3O5ZL557GA7JJC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BB2BVX65WSAT3O5ZL557GA7JJC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BB2BVX65WSAT3O5ZL557GA7JJC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3a9b8593aab1caa6565fc26f1f632f0fe0970b4b6733bba7391c06ccb1d35895","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-12-07T02:44:35Z","title_canon_sha256":"10e324c7e988844e432292370eab1917b1eb5b475c157a3a9087fd077cb34979"},"schema_version":"1.0","source":{"id":"2312.04004","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04004","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04004v2","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04004","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"pith_short_12","alias_value":"BB2BVX65WSAT","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"pith_short_16","alias_value":"BB2BVX65WSAT3O5Z","created_at":"2026-07-05T07:22:27Z"},{"alias_kind":"pith_short_8","alias_value":"BB2BVX65","created_at":"2026-07-05T07:22:27Z"}],"graph_snapshots":[{"event_id":"sha256:bff67edd28fe1f04061b068a0fd3716fc6bc4bcc89f6dbc4ae45721c34ee8ffd","target":"graph","created_at":"2026-07-05T07:22:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.04004/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are becoming an integrated part of software development. These models are trained on large datasets for code, where it is hard to verify each data point. Therefore, a potential attack surface can be to inject poisonous data into the training data to make models vulnerable, aka trojaned. It can pose a significant threat by hiding manipulative behaviors inside models, leading to compromising the integrity of the models in downstream tasks.\n  In this paper, we propose an occlusion-based human-in-the-loop technique, OSeql, to distinguish trojan-triggering inputs of cod","authors_text":"Aftab Hussain, Bowen Xu, Md Rafiqul Islam Rabin, Mohammad Amin Alipour, Toufique Ahmed","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-12-07T02:44:35Z","title":"Occlusion-based Detection of Trojan-triggering Inputs in Large Language Models of Code"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04004","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:45b1399285408910501926f9fc2693945e91ebbad1dee6f53c340d26e0e7aa2d","target":"record","created_at":"2026-07-05T07:22:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3a9b8593aab1caa6565fc26f1f632f0fe0970b4b6733bba7391c06ccb1d35895","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-12-07T02:44:35Z","title_canon_sha256":"10e324c7e988844e432292370eab1917b1eb5b475c157a3a9087fd077cb34979"},"schema_version":"1.0","source":{"id":"2312.04004","kind":"arxiv","version":2}},"canonical_sha256":"08741adfddb4813dbbb95f7bf303e9488afd924b1c2f8d086b852718e103b3d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"08741adfddb4813dbbb95f7bf303e9488afd924b1c2f8d086b852718e103b3d0","first_computed_at":"2026-07-05T07:22:27.528926Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:22:27.528926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7NFUuZhGGEVxFPCv9KC4yYoAVPSlDzqOLOUFupZGfyokeNjVsYMpUVvdM5O1U/CAjg5DOpHh8vkJqEBMvypkBA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:22:27.529463Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.04004","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:45b1399285408910501926f9fc2693945e91ebbad1dee6f53c340d26e0e7aa2d","sha256:bff67edd28fe1f04061b068a0fd3716fc6bc4bcc89f6dbc4ae45721c34ee8ffd"],"state_sha256":"c58202c0059fdf9abd4fa4228d5ca3a49e3264cf4e5039994905e357ebddb9ab"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PqO3P5p+2ZbYf3cSyg33Hs681OlLY4m1Zo5Dg11p57Nf83ETGnxAWgFXKmvieM6EySIGUvnfEeO0+rRof7m1BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T20:37:38.778204Z","bundle_sha256":"a946d5958601ae5434e2c56318ff0ca2ac2b3a446195fc157d412701731bf754"}}