{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:BGBNZDLC7DZT3KNYQFKS4Q7AF7","short_pith_number":"pith:BGBNZDLC","canonical_record":{"source":{"id":"1912.06872","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-12-14T16:03:15Z","cross_cats_sorted":[],"title_canon_sha256":"30f9d301ad80b4471ecc0fa0565804aef84efb2d6313dfda94fc940a9285e0b9","abstract_canon_sha256":"42c7667496dbf302ba86788a986dbbdd152d284fb6ccf1b525a03d778e5b5018"},"schema_version":"1.0"},"canonical_sha256":"0982dc8d62f8f33da9b881552e43e02fe7f97474b110994fd398e2c5c25fedd8","source":{"kind":"arxiv","id":"1912.06872","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.06872","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"arxiv_version","alias_value":"1912.06872v1","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.06872","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"pith_short_12","alias_value":"BGBNZDLC7DZT","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"pith_short_16","alias_value":"BGBNZDLC7DZT3KNY","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"pith_short_8","alias_value":"BGBNZDLC","created_at":"2026-07-05T00:26:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:BGBNZDLC7DZT3KNYQFKS4Q7AF7","target":"record","payload":{"canonical_record":{"source":{"id":"1912.06872","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-12-14T16:03:15Z","cross_cats_sorted":[],"title_canon_sha256":"30f9d301ad80b4471ecc0fa0565804aef84efb2d6313dfda94fc940a9285e0b9","abstract_canon_sha256":"42c7667496dbf302ba86788a986dbbdd152d284fb6ccf1b525a03d778e5b5018"},"schema_version":"1.0"},"canonical_sha256":"0982dc8d62f8f33da9b881552e43e02fe7f97474b110994fd398e2c5c25fedd8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:26:16.245077Z","signature_b64":"JoYCwYkSu0KvJR5qVrdxBAYE1JW3QgIS8qhtePB7Nr5nYQ1evhBKosaLzTG0+kr8KMtEYlhcjkD8DGcPVJW/CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0982dc8d62f8f33da9b881552e43e02fe7f97474b110994fd398e2c5c25fedd8","last_reissued_at":"2026-07-05T00:26:16.244567Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:26:16.244567Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1912.06872","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:26:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DV9tUgN95MwNhvSBXAe7ZDsIXApOFM+9H2tg+x7LzLlAxgSKgZw3mPDtPeAN0RuWElFkwYzIN3amal9O06y5Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T14:00:22.461298Z"},"content_sha256":"510913628710f9c667a46b56cce123b46dc570eefd61dbf6d894e0c312b6f1d2","schema_version":"1.0","event_id":"sha256:510913628710f9c667a46b56cce123b46dc570eefd61dbf6d894e0c312b6f1d2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:BGBNZDLC7DZT3KNYQFKS4Q7AF7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Robust Toxic Content Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Anna Belova, Antonios Anastasopoulos, Keita Kurita","submitted_at":"2019-12-14T16:03:15Z","abstract_excerpt":"Toxic content detection aims to identify content that can offend or harm its recipients. Automated classifiers of toxic content need to be robust against adversaries who deliberately try to bypass filters. We propose a method of generating realistic model-agnostic attacks using a lexicon of toxic tokens, which attempts to mislead toxicity classifiers by diluting the toxicity signal either by obfuscating toxic tokens through character-level perturbations, or by injecting non-toxic distractor tokens. We show that these realistic attacks reduce the detection recall of state-of-the-art neural toxi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.06872","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1912.06872/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:26:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OKuSuzTZpvtQa/VadMU3C3zKDLI+pKZA7bhsl5SPAS1p7cmeq6xH/9lrKifk7JA2gsru8o++TZZgnT7xDeyVCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T14:00:22.463035Z"},"content_sha256":"20c5f44a1280cbe3223182f71cd8f00895a1e49ab9b515833894fa69d85b5f17","schema_version":"1.0","event_id":"sha256:20c5f44a1280cbe3223182f71cd8f00895a1e49ab9b515833894fa69d85b5f17"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BGBNZDLC7DZT3KNYQFKS4Q7AF7/bundle.json","state_url":"https://pith.science/pith/BGBNZDLC7DZT3KNYQFKS4Q7AF7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BGBNZDLC7DZT3KNYQFKS4Q7AF7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T14:00:22Z","links":{"resolver":"https://pith.science/pith/BGBNZDLC7DZT3KNYQFKS4Q7AF7","bundle":"https://pith.science/pith/BGBNZDLC7DZT3KNYQFKS4Q7AF7/bundle.json","state":"https://pith.science/pith/BGBNZDLC7DZT3KNYQFKS4Q7AF7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BGBNZDLC7DZT3KNYQFKS4Q7AF7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:BGBNZDLC7DZT3KNYQFKS4Q7AF7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"42c7667496dbf302ba86788a986dbbdd152d284fb6ccf1b525a03d778e5b5018","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-12-14T16:03:15Z","title_canon_sha256":"30f9d301ad80b4471ecc0fa0565804aef84efb2d6313dfda94fc940a9285e0b9"},"schema_version":"1.0","source":{"id":"1912.06872","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.06872","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"arxiv_version","alias_value":"1912.06872v1","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.06872","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"pith_short_12","alias_value":"BGBNZDLC7DZT","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"pith_short_16","alias_value":"BGBNZDLC7DZT3KNY","created_at":"2026-07-05T00:26:16Z"},{"alias_kind":"pith_short_8","alias_value":"BGBNZDLC","created_at":"2026-07-05T00:26:16Z"}],"graph_snapshots":[{"event_id":"sha256:20c5f44a1280cbe3223182f71cd8f00895a1e49ab9b515833894fa69d85b5f17","target":"graph","created_at":"2026-07-05T00:26:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1912.06872/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Toxic content detection aims to identify content that can offend or harm its recipients. Automated classifiers of toxic content need to be robust against adversaries who deliberately try to bypass filters. We propose a method of generating realistic model-agnostic attacks using a lexicon of toxic tokens, which attempts to mislead toxicity classifiers by diluting the toxicity signal either by obfuscating toxic tokens through character-level perturbations, or by injecting non-toxic distractor tokens. We show that these realistic attacks reduce the detection recall of state-of-the-art neural toxi","authors_text":"Anna Belova, Antonios Anastasopoulos, Keita Kurita","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-12-14T16:03:15Z","title":"Towards Robust Toxic Content Classification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.06872","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:510913628710f9c667a46b56cce123b46dc570eefd61dbf6d894e0c312b6f1d2","target":"record","created_at":"2026-07-05T00:26:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"42c7667496dbf302ba86788a986dbbdd152d284fb6ccf1b525a03d778e5b5018","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-12-14T16:03:15Z","title_canon_sha256":"30f9d301ad80b4471ecc0fa0565804aef84efb2d6313dfda94fc940a9285e0b9"},"schema_version":"1.0","source":{"id":"1912.06872","kind":"arxiv","version":1}},"canonical_sha256":"0982dc8d62f8f33da9b881552e43e02fe7f97474b110994fd398e2c5c25fedd8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0982dc8d62f8f33da9b881552e43e02fe7f97474b110994fd398e2c5c25fedd8","first_computed_at":"2026-07-05T00:26:16.244567Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:26:16.244567Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JoYCwYkSu0KvJR5qVrdxBAYE1JW3QgIS8qhtePB7Nr5nYQ1evhBKosaLzTG0+kr8KMtEYlhcjkD8DGcPVJW/CA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:26:16.245077Z","signed_message":"canonical_sha256_bytes"},"source_id":"1912.06872","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:510913628710f9c667a46b56cce123b46dc570eefd61dbf6d894e0c312b6f1d2","sha256:20c5f44a1280cbe3223182f71cd8f00895a1e49ab9b515833894fa69d85b5f17"],"state_sha256":"f92f2671e1345d2597e47b8c48dcca8091f8144d96c0baa07b3ab7e22b329363"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GmyK43kkcVzrc7PhDCLBTFE2pYWz9NEK4qUrR6kloLkixAdIbE4SEN6OXMUOHTTlkDEk052abGTKYrzUZSxlDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T14:00:22.473146Z","bundle_sha256":"edf6a92d945a992f33babcf67ed5f57daa7e4c369a18aaa3c1cb7ccfbf5afe19"}}