{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:BLBMN3M3ST65M2QYQ7OHCYUKTP","short_pith_number":"pith:BLBMN3M3","canonical_record":{"source":{"id":"2602.10382","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-11T00:04:32Z","cross_cats_sorted":[],"title_canon_sha256":"5b6d09b6c636a84b28d309f65598d2a888e73566b5e5282c67e28bde850b9247","abstract_canon_sha256":"319f3ca31031dfc7519237fc1884dce25bde3379ac870172a46fa28685f78c65"},"schema_version":"1.0"},"canonical_sha256":"0ac2c6ed9b94fdd66a1887dc71628a9bc0406f3c1771a6f140ebe5e689847334","source":{"kind":"arxiv","id":"2602.10382","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.10382","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"arxiv_version","alias_value":"2602.10382v3","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.10382","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"pith_short_12","alias_value":"BLBMN3M3ST65","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"pith_short_16","alias_value":"BLBMN3M3ST65M2QY","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"pith_short_8","alias_value":"BLBMN3M3","created_at":"2026-07-21T02:21:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:BLBMN3M3ST65M2QYQ7OHCYUKTP","target":"record","payload":{"canonical_record":{"source":{"id":"2602.10382","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-11T00:04:32Z","cross_cats_sorted":[],"title_canon_sha256":"5b6d09b6c636a84b28d309f65598d2a888e73566b5e5282c67e28bde850b9247","abstract_canon_sha256":"319f3ca31031dfc7519237fc1884dce25bde3379ac870172a46fa28685f78c65"},"schema_version":"1.0"},"canonical_sha256":"0ac2c6ed9b94fdd66a1887dc71628a9bc0406f3c1771a6f140ebe5e689847334","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-21T02:21:31.335416Z","signature_b64":"bVEd8zYkBT1+Eag1v2iwSiTFUEbYCdraIqyT55QT4Hyf4+3cytG8v7MqrE94HwuWAJdM+/rauUJSUdhXHR9fDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0ac2c6ed9b94fdd66a1887dc71628a9bc0406f3c1771a6f140ebe5e689847334","last_reissued_at":"2026-07-21T02:21:31.334529Z","signature_status":"signed_v1","first_computed_at":"2026-07-21T02:21:31.334529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2602.10382","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T02:21:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qeCRRC2uEMYdicz+2DsWPY+zYkhaMEG/PMlRlzgO2EaFD5oP/Dis33xj0J/KRV4SMOWH3Oc1WAsT4cmKBtC3Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:22:33.176106Z"},"content_sha256":"fc2cd7842ec834382f3262b263f567d1c69df92e1f13f5e907d234d8af49bd1b","schema_version":"1.0","event_id":"sha256:fc2cd7842ec834382f3262b263f567d1c69df92e1f13f5e907d234d8af49bd1b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:BLBMN3M3ST65M2QYQ7OHCYUKTP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Language Triggers Hijack Language Circuits: A Mechanistic Analysis of Backdoor Behaviors in Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Beno\\^it Sagot, Djam\\'e Seddah, Francis Kulumba, Th\\'eo Lasnier, Wissam Antoun","submitted_at":"2026-02-11T00:04:32Z","abstract_excerpt":"Backdoor attacks pose significant security risks for Large Language Models (LLMs), yet the internal mechanisms by which triggers operate remain poorly understood. We present the first mechanistic analysis of trigger-induced language-switching backdoors injected during pre-training, studying the Gaperon model family (1B, 8B and 24B). Using activation patching, we localize trigger formation and identify which attention heads process trigger and natural language information. Our central finding is that trigger heads substantially overlap with heads naturally encoding output language across model "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.10382","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2602.10382/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T02:21:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qmQs75wlDL+FVEUpouTf0yVsP1HxsN2sR/I40EluPNF9Dz85CqUtM1WJbJQ7M/Uo0liFPzaekRj8NXPpXf2BBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:22:33.176491Z"},"content_sha256":"7c34743498c4ecb2fcbaeb97b0cb1d6d9a41ab8c4efdb0816c9e5cf865c427d5","schema_version":"1.0","event_id":"sha256:7c34743498c4ecb2fcbaeb97b0cb1d6d9a41ab8c4efdb0816c9e5cf865c427d5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BLBMN3M3ST65M2QYQ7OHCYUKTP/bundle.json","state_url":"https://pith.science/pith/BLBMN3M3ST65M2QYQ7OHCYUKTP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BLBMN3M3ST65M2QYQ7OHCYUKTP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T07:22:33Z","links":{"resolver":"https://pith.science/pith/BLBMN3M3ST65M2QYQ7OHCYUKTP","bundle":"https://pith.science/pith/BLBMN3M3ST65M2QYQ7OHCYUKTP/bundle.json","state":"https://pith.science/pith/BLBMN3M3ST65M2QYQ7OHCYUKTP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BLBMN3M3ST65M2QYQ7OHCYUKTP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:BLBMN3M3ST65M2QYQ7OHCYUKTP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"319f3ca31031dfc7519237fc1884dce25bde3379ac870172a46fa28685f78c65","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-11T00:04:32Z","title_canon_sha256":"5b6d09b6c636a84b28d309f65598d2a888e73566b5e5282c67e28bde850b9247"},"schema_version":"1.0","source":{"id":"2602.10382","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.10382","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"arxiv_version","alias_value":"2602.10382v3","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.10382","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"pith_short_12","alias_value":"BLBMN3M3ST65","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"pith_short_16","alias_value":"BLBMN3M3ST65M2QY","created_at":"2026-07-21T02:21:31Z"},{"alias_kind":"pith_short_8","alias_value":"BLBMN3M3","created_at":"2026-07-21T02:21:31Z"}],"graph_snapshots":[{"event_id":"sha256:7c34743498c4ecb2fcbaeb97b0cb1d6d9a41ab8c4efdb0816c9e5cf865c427d5","target":"graph","created_at":"2026-07-21T02:21:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2602.10382/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks pose significant security risks for Large Language Models (LLMs), yet the internal mechanisms by which triggers operate remain poorly understood. We present the first mechanistic analysis of trigger-induced language-switching backdoors injected during pre-training, studying the Gaperon model family (1B, 8B and 24B). Using activation patching, we localize trigger formation and identify which attention heads process trigger and natural language information. Our central finding is that trigger heads substantially overlap with heads naturally encoding output language across model ","authors_text":"Beno\\^it Sagot, Djam\\'e Seddah, Francis Kulumba, Th\\'eo Lasnier, Wissam Antoun","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-11T00:04:32Z","title":"Language Triggers Hijack Language Circuits: A Mechanistic Analysis of Backdoor Behaviors in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.10382","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fc2cd7842ec834382f3262b263f567d1c69df92e1f13f5e907d234d8af49bd1b","target":"record","created_at":"2026-07-21T02:21:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"319f3ca31031dfc7519237fc1884dce25bde3379ac870172a46fa28685f78c65","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2026-02-11T00:04:32Z","title_canon_sha256":"5b6d09b6c636a84b28d309f65598d2a888e73566b5e5282c67e28bde850b9247"},"schema_version":"1.0","source":{"id":"2602.10382","kind":"arxiv","version":3}},"canonical_sha256":"0ac2c6ed9b94fdd66a1887dc71628a9bc0406f3c1771a6f140ebe5e689847334","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0ac2c6ed9b94fdd66a1887dc71628a9bc0406f3c1771a6f140ebe5e689847334","first_computed_at":"2026-07-21T02:21:31.334529Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-21T02:21:31.334529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bVEd8zYkBT1+Eag1v2iwSiTFUEbYCdraIqyT55QT4Hyf4+3cytG8v7MqrE94HwuWAJdM+/rauUJSUdhXHR9fDg==","signature_status":"signed_v1","signed_at":"2026-07-21T02:21:31.335416Z","signed_message":"canonical_sha256_bytes"},"source_id":"2602.10382","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fc2cd7842ec834382f3262b263f567d1c69df92e1f13f5e907d234d8af49bd1b","sha256:7c34743498c4ecb2fcbaeb97b0cb1d6d9a41ab8c4efdb0816c9e5cf865c427d5"],"state_sha256":"0461e154310ff43dab915994d5e6b36fcf004158deddadeee2ac0097529a2e64"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6WhkQ4HzUpe4SDNxcFURnK9ijiXGK8P6HsaxTMIXeTCD03enwb6GVdH2o9xcSinXzaINTpFpQaZJleA8k1q7DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T07:22:33.180826Z","bundle_sha256":"8a269b41c132e039cf082fed5c9ee5e233ba117889a5d42b913b1f49090f72fc"}}