{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BMMEEQB6TNK2DWPIJZ5JXUKRT7","short_pith_number":"pith:BMMEEQB6","canonical_record":{"source":{"id":"2403.07654","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-03-12T13:45:20Z","cross_cats_sorted":[],"title_canon_sha256":"d08557eb135b7b5f8cbd1c4ae11345004b0f4a38fc5483b71ed246d4201f8e30","abstract_canon_sha256":"ab6bb3681e9dc53df8fced6adadd5612a060ee77d0021803ef56510e0c5508bc"},"schema_version":"1.0"},"canonical_sha256":"0b1842403e9b55a1d9e84e7a9bd1519feba3f09bc1d50e7525c0e052dae91468","source":{"kind":"arxiv","id":"2403.07654","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.07654","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"arxiv_version","alias_value":"2403.07654v1","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.07654","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"pith_short_12","alias_value":"BMMEEQB6TNK2","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"pith_short_16","alias_value":"BMMEEQB6TNK2DWPI","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"pith_short_8","alias_value":"BMMEEQB6","created_at":"2026-07-05T07:55:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BMMEEQB6TNK2DWPIJZ5JXUKRT7","target":"record","payload":{"canonical_record":{"source":{"id":"2403.07654","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-03-12T13:45:20Z","cross_cats_sorted":[],"title_canon_sha256":"d08557eb135b7b5f8cbd1c4ae11345004b0f4a38fc5483b71ed246d4201f8e30","abstract_canon_sha256":"ab6bb3681e9dc53df8fced6adadd5612a060ee77d0021803ef56510e0c5508bc"},"schema_version":"1.0"},"canonical_sha256":"0b1842403e9b55a1d9e84e7a9bd1519feba3f09bc1d50e7525c0e052dae91468","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:55:06.430136Z","signature_b64":"IflH/MsAIc7PClYaFrW9GgtSQfp2zGNqhB9hFigvPjetYVDHk0I6VXpc6UI2+VY874KHV2RRoqADeZu+PFB5DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b1842403e9b55a1d9e84e7a9bd1519feba3f09bc1d50e7525c0e052dae91468","last_reissued_at":"2026-07-05T07:55:06.429644Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:55:06.429644Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.07654","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:55:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nHcTEMPF0/9WIHAnfoUfpwWAAObtysm75ymSY8lCUqFwGTKI1ECb1ttIoRn4W1xzwKawdrheRODl7nt/2XuWDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:03:41.654382Z"},"content_sha256":"7914a8e729fcdc6c3a8ae6b02934515424354e5b1fa79e34a6e6b9aa9fb1ac1f","schema_version":"1.0","event_id":"sha256:7914a8e729fcdc6c3a8ae6b02934515424354e5b1fa79e34a6e6b9aa9fb1ac1f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BMMEEQB6TNK2DWPIJZ5JXUKRT7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Analyzing Adversarial Attacks on Sequence-to-Sequence Relevance Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.IR","authors_text":"Andrew Parry, Maik Fr\\\"obe, Martin Potthast, Matthias Hagen, Sean MacAvaney","submitted_at":"2024-03-12T13:45:20Z","abstract_excerpt":"Modern sequence-to-sequence relevance models like monoT5 can effectively capture complex textual interactions between queries and documents through cross-encoding. However, the use of natural language tokens in prompts, such as Query, Document, and Relevant for monoT5, opens an attack vector for malicious documents to manipulate their relevance score through prompt injection, e.g., by adding target words such as true. Since such possibilities have not yet been considered in retrieval evaluation, we analyze the impact of query-independent prompt injection via manually constructed templates and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.07654","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.07654/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:55:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5wYMh76INn6vrNBk3gtDdeQ9m1t1Yd7S5Hn8nEYOocKvtIT0Xd6FdrhpN5GSA6DROEyNdWYyGwPY+DjQ0N7WBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:03:41.655292Z"},"content_sha256":"d2f998dcb88c3c5c5273bae22b485ab79d84238a6b6c2973f87fa9b0d5da1754","schema_version":"1.0","event_id":"sha256:d2f998dcb88c3c5c5273bae22b485ab79d84238a6b6c2973f87fa9b0d5da1754"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BMMEEQB6TNK2DWPIJZ5JXUKRT7/bundle.json","state_url":"https://pith.science/pith/BMMEEQB6TNK2DWPIJZ5JXUKRT7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BMMEEQB6TNK2DWPIJZ5JXUKRT7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T06:03:41Z","links":{"resolver":"https://pith.science/pith/BMMEEQB6TNK2DWPIJZ5JXUKRT7","bundle":"https://pith.science/pith/BMMEEQB6TNK2DWPIJZ5JXUKRT7/bundle.json","state":"https://pith.science/pith/BMMEEQB6TNK2DWPIJZ5JXUKRT7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BMMEEQB6TNK2DWPIJZ5JXUKRT7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BMMEEQB6TNK2DWPIJZ5JXUKRT7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ab6bb3681e9dc53df8fced6adadd5612a060ee77d0021803ef56510e0c5508bc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-03-12T13:45:20Z","title_canon_sha256":"d08557eb135b7b5f8cbd1c4ae11345004b0f4a38fc5483b71ed246d4201f8e30"},"schema_version":"1.0","source":{"id":"2403.07654","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.07654","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"arxiv_version","alias_value":"2403.07654v1","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.07654","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"pith_short_12","alias_value":"BMMEEQB6TNK2","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"pith_short_16","alias_value":"BMMEEQB6TNK2DWPI","created_at":"2026-07-05T07:55:06Z"},{"alias_kind":"pith_short_8","alias_value":"BMMEEQB6","created_at":"2026-07-05T07:55:06Z"}],"graph_snapshots":[{"event_id":"sha256:d2f998dcb88c3c5c5273bae22b485ab79d84238a6b6c2973f87fa9b0d5da1754","target":"graph","created_at":"2026-07-05T07:55:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.07654/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern sequence-to-sequence relevance models like monoT5 can effectively capture complex textual interactions between queries and documents through cross-encoding. However, the use of natural language tokens in prompts, such as Query, Document, and Relevant for monoT5, opens an attack vector for malicious documents to manipulate their relevance score through prompt injection, e.g., by adding target words such as true. Since such possibilities have not yet been considered in retrieval evaluation, we analyze the impact of query-independent prompt injection via manually constructed templates and ","authors_text":"Andrew Parry, Maik Fr\\\"obe, Martin Potthast, Matthias Hagen, Sean MacAvaney","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-03-12T13:45:20Z","title":"Analyzing Adversarial Attacks on Sequence-to-Sequence Relevance Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.07654","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7914a8e729fcdc6c3a8ae6b02934515424354e5b1fa79e34a6e6b9aa9fb1ac1f","target":"record","created_at":"2026-07-05T07:55:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ab6bb3681e9dc53df8fced6adadd5612a060ee77d0021803ef56510e0c5508bc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-03-12T13:45:20Z","title_canon_sha256":"d08557eb135b7b5f8cbd1c4ae11345004b0f4a38fc5483b71ed246d4201f8e30"},"schema_version":"1.0","source":{"id":"2403.07654","kind":"arxiv","version":1}},"canonical_sha256":"0b1842403e9b55a1d9e84e7a9bd1519feba3f09bc1d50e7525c0e052dae91468","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0b1842403e9b55a1d9e84e7a9bd1519feba3f09bc1d50e7525c0e052dae91468","first_computed_at":"2026-07-05T07:55:06.429644Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:55:06.429644Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IflH/MsAIc7PClYaFrW9GgtSQfp2zGNqhB9hFigvPjetYVDHk0I6VXpc6UI2+VY874KHV2RRoqADeZu+PFB5DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:55:06.430136Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.07654","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7914a8e729fcdc6c3a8ae6b02934515424354e5b1fa79e34a6e6b9aa9fb1ac1f","sha256:d2f998dcb88c3c5c5273bae22b485ab79d84238a6b6c2973f87fa9b0d5da1754"],"state_sha256":"9ae31f598ae1b957586df88ba8bb65d5f8b70ef8de591f0eeaa1522b5e4f27b4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8Lwy0AIoWNSfI3FpMQgAKUkm8YfHcNyVrZP1Q/rg65zdNxLgSmEFhAKcYzqnt9IMfLgg/bbzNo52pcK1WNaiAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T06:03:41.660511Z","bundle_sha256":"1e87bc2ef5bf6cb70c4e9e68ff2b67b969b68a1505800acbf1aa87a0efa2c122"}}