{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:C6YBLYT3RVXEX3NQZONMQ46MPV","short_pith_number":"pith:C6YBLYT3","canonical_record":{"source":{"id":"2411.16746","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T20:41:24Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"270bb55f8b021eadf130b6b02625c06b3c071eb2484fad829e33463b9aa0d09b","abstract_canon_sha256":"b6f87b233790e76e3938127c55e89bbe4ed53d3ab9d21a8cd47922774024b9fb"},"schema_version":"1.0"},"canonical_sha256":"17b015e27b8d6e4bedb0cb9ac873cc7d70f979fc6e0d768afa69c7275898c553","source":{"kind":"arxiv","id":"2411.16746","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16746","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16746v4","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16746","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"pith_short_12","alias_value":"C6YBLYT3RVXE","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"pith_short_16","alias_value":"C6YBLYT3RVXEX3NQ","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"pith_short_8","alias_value":"C6YBLYT3","created_at":"2026-07-05T11:12:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:C6YBLYT3RVXEX3NQZONMQ46MPV","target":"record","payload":{"canonical_record":{"source":{"id":"2411.16746","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T20:41:24Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"270bb55f8b021eadf130b6b02625c06b3c071eb2484fad829e33463b9aa0d09b","abstract_canon_sha256":"b6f87b233790e76e3938127c55e89bbe4ed53d3ab9d21a8cd47922774024b9fb"},"schema_version":"1.0"},"canonical_sha256":"17b015e27b8d6e4bedb0cb9ac873cc7d70f979fc6e0d768afa69c7275898c553","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:22.648398Z","signature_b64":"PwVota5aEmfhBCwZAG2vCqSMZO13BdlxlhJuXS8tPhn/yuWMOVGIpm6vuUXlUHG34bg2l37ReTmjL6n67dIjBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"17b015e27b8d6e4bedb0cb9ac873cc7d70f979fc6e0d768afa69c7275898c553","last_reissued_at":"2026-07-05T11:12:22.647846Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:22.647846Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.16746","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bTjZQbd/xn4zSeXqgSsmPtTkY0SDnamwZrmosVh6q1+mL485deV+7/aEbVzpLOTBHsXTPD5pnFucgm2IPx1UAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:58:01.540523Z"},"content_sha256":"6e6b758b9d4ba491353df7a8e948a2f66a0001c1683041de84f4d7b07fd76da9","schema_version":"1.0","event_id":"sha256:6e6b758b9d4ba491353df7a8e948a2f66a0001c1683041de84f4d7b07fd76da9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:C6YBLYT3RVXEX3NQZONMQ46MPV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LoBAM: LoRA-Based Backdoor Attack on Model Merging","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Hai Li, Jingwei Sun, Jingyang Zhang, Minghong Fang, Ming Yin, Yiran Chen","submitted_at":"2024-11-23T20:41:24Z","abstract_excerpt":"Model merging is an emerging technique that integrates multiple models fine-tuned on different tasks to create a versatile model that excels in multiple domains. This scheme, in the meantime, may open up backdoor attack opportunities where one single malicious model can jeopardize the integrity of the merged model. Existing works try to demonstrate the risk of such attacks by assuming substantial computational resources, focusing on cases where the attacker can fully fine-tune the pre-trained model. Such an assumption, however, may not be feasible given the increasing size of machine learning "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16746","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.16746/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b8V8+js4m8NnT8MxwzwsqlxmpwgvkWQ3D+yiliHuaoIdeQU1awueIgY+QQjab0Ynt8Y7pBnR01zm2bNwGfEEBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:58:01.541014Z"},"content_sha256":"c13f2364e2215a48119975970394d20b2ac979069e1f991474b7d78afe7032ea","schema_version":"1.0","event_id":"sha256:c13f2364e2215a48119975970394d20b2ac979069e1f991474b7d78afe7032ea"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C6YBLYT3RVXEX3NQZONMQ46MPV/bundle.json","state_url":"https://pith.science/pith/C6YBLYT3RVXEX3NQZONMQ46MPV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C6YBLYT3RVXEX3NQZONMQ46MPV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T15:58:01Z","links":{"resolver":"https://pith.science/pith/C6YBLYT3RVXEX3NQZONMQ46MPV","bundle":"https://pith.science/pith/C6YBLYT3RVXEX3NQZONMQ46MPV/bundle.json","state":"https://pith.science/pith/C6YBLYT3RVXEX3NQZONMQ46MPV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C6YBLYT3RVXEX3NQZONMQ46MPV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:C6YBLYT3RVXEX3NQZONMQ46MPV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b6f87b233790e76e3938127c55e89bbe4ed53d3ab9d21a8cd47922774024b9fb","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T20:41:24Z","title_canon_sha256":"270bb55f8b021eadf130b6b02625c06b3c071eb2484fad829e33463b9aa0d09b"},"schema_version":"1.0","source":{"id":"2411.16746","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16746","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16746v4","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16746","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"pith_short_12","alias_value":"C6YBLYT3RVXE","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"pith_short_16","alias_value":"C6YBLYT3RVXEX3NQ","created_at":"2026-07-05T11:12:22Z"},{"alias_kind":"pith_short_8","alias_value":"C6YBLYT3","created_at":"2026-07-05T11:12:22Z"}],"graph_snapshots":[{"event_id":"sha256:c13f2364e2215a48119975970394d20b2ac979069e1f991474b7d78afe7032ea","target":"graph","created_at":"2026-07-05T11:12:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.16746/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model merging is an emerging technique that integrates multiple models fine-tuned on different tasks to create a versatile model that excels in multiple domains. This scheme, in the meantime, may open up backdoor attack opportunities where one single malicious model can jeopardize the integrity of the merged model. Existing works try to demonstrate the risk of such attacks by assuming substantial computational resources, focusing on cases where the attacker can fully fine-tune the pre-trained model. Such an assumption, however, may not be feasible given the increasing size of machine learning ","authors_text":"Hai Li, Jingwei Sun, Jingyang Zhang, Minghong Fang, Ming Yin, Yiran Chen","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T20:41:24Z","title":"LoBAM: LoRA-Based Backdoor Attack on Model Merging"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16746","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6e6b758b9d4ba491353df7a8e948a2f66a0001c1683041de84f4d7b07fd76da9","target":"record","created_at":"2026-07-05T11:12:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b6f87b233790e76e3938127c55e89bbe4ed53d3ab9d21a8cd47922774024b9fb","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T20:41:24Z","title_canon_sha256":"270bb55f8b021eadf130b6b02625c06b3c071eb2484fad829e33463b9aa0d09b"},"schema_version":"1.0","source":{"id":"2411.16746","kind":"arxiv","version":4}},"canonical_sha256":"17b015e27b8d6e4bedb0cb9ac873cc7d70f979fc6e0d768afa69c7275898c553","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"17b015e27b8d6e4bedb0cb9ac873cc7d70f979fc6e0d768afa69c7275898c553","first_computed_at":"2026-07-05T11:12:22.647846Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:22.647846Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PwVota5aEmfhBCwZAG2vCqSMZO13BdlxlhJuXS8tPhn/yuWMOVGIpm6vuUXlUHG34bg2l37ReTmjL6n67dIjBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:22.648398Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.16746","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6e6b758b9d4ba491353df7a8e948a2f66a0001c1683041de84f4d7b07fd76da9","sha256:c13f2364e2215a48119975970394d20b2ac979069e1f991474b7d78afe7032ea"],"state_sha256":"06f928cfc18f8e5069897ca852932f8ca51c1b4d001ccce355377fc975d132b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GSMq0hKF2Z5k4Mnr4BAkYqPkytVk6NEOxgsE8rU1DqGY6fexUPiJpGxLIUwueF4fuswV0f8+0wbwKCwC5cvuDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T15:58:01.545703Z","bundle_sha256":"1c64498e17e1e43dcb79040a366b20502f786c2e6caf0fbece4dc8f1dc2239d4"}}