{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:CKZRRUQPTAZSWIPH7CMHGUQUE2","short_pith_number":"pith:CKZRRUQP","canonical_record":{"source":{"id":"2407.04108","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T18:24:09Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"006cffcd289c7e867a6c6c696e605bb41c72dcf699d3435c97aaa85728c4d9ba","abstract_canon_sha256":"92ba96585f834e80851f43a6b2153672d18d6d9a32bfdf83fcf72c6712182943"},"schema_version":"1.0"},"canonical_sha256":"12b318d20f98332b21e7f89873521426b4225829f3828adcde931cfd3ae6fba1","source":{"kind":"arxiv","id":"2407.04108","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.04108","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"arxiv_version","alias_value":"2407.04108v3","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.04108","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"pith_short_12","alias_value":"CKZRRUQPTAZS","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"pith_short_16","alias_value":"CKZRRUQPTAZSWIPH","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"pith_short_8","alias_value":"CKZRRUQP","created_at":"2026-07-05T09:53:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:CKZRRUQPTAZSWIPH7CMHGUQUE2","target":"record","payload":{"canonical_record":{"source":{"id":"2407.04108","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T18:24:09Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"006cffcd289c7e867a6c6c696e605bb41c72dcf699d3435c97aaa85728c4d9ba","abstract_canon_sha256":"92ba96585f834e80851f43a6b2153672d18d6d9a32bfdf83fcf72c6712182943"},"schema_version":"1.0"},"canonical_sha256":"12b318d20f98332b21e7f89873521426b4225829f3828adcde931cfd3ae6fba1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:53:28.410885Z","signature_b64":"szEjN+2NuOq0SvxsOjx+wD/32buMmIW//rE45qJbvZDdwBLyhVa3VLXQEKMqsxDimA35TQjAdOyWxHunRUXoAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"12b318d20f98332b21e7f89873521426b4225829f3828adcde931cfd3ae6fba1","last_reissued_at":"2026-07-05T09:53:28.410399Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:53:28.410399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.04108","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"elQ9k425sQjCAP2rGTx8PtpAMOECgncSfRhGJNYZvxoMKWws/tAEOpt3E0vZQKHXK/P6gXu5TFqQ9HUPS+pXAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T00:44:34.929204Z"},"content_sha256":"da6b78560b5eb61e39f0ebe7616bf988d2cfc2e09408b2121472ee4439419594","schema_version":"1.0","event_id":"sha256:da6b78560b5eb61e39f0ebe7616bf988d2cfc2e09408b2121472ee4439419594"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:CKZRRUQPTAZSWIPH7CMHGUQUE2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Future Events as Backdoor Triggers: Investigating Temporal Vulnerabilities in LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Arjun Panickssery, Asa Cooper Stickland, Sam Bowman, Sara Price","submitted_at":"2024-07-04T18:24:09Z","abstract_excerpt":"Backdoors are hidden behaviors that are only triggered once an AI system has been deployed. Bad actors looking to create successful backdoors must design them to avoid activation during training and evaluation. Since data used in these stages often only contains information about events that have already occurred, a component of a simple backdoor trigger could be a model recognizing data that is in the future relative to when it was trained. Through prompting experiments and by probing internal activations, we show that current large language models (LLMs) can distinguish past from future even"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.04108","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.04108/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CCaOVw8eNF+/h9EsXFA0d3tYqgoltqZpkntPiaHvgG6kQOYh8fi5odH+hocr7dH9vY3iywQfp8kspc27WjvwCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T00:44:34.932072Z"},"content_sha256":"d8f8a8b5611f4abab77fe359057ffc082b95dcf1ca2c180bc4fce1b73d1a2f06","schema_version":"1.0","event_id":"sha256:d8f8a8b5611f4abab77fe359057ffc082b95dcf1ca2c180bc4fce1b73d1a2f06"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CKZRRUQPTAZSWIPH7CMHGUQUE2/bundle.json","state_url":"https://pith.science/pith/CKZRRUQPTAZSWIPH7CMHGUQUE2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CKZRRUQPTAZSWIPH7CMHGUQUE2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T00:44:34Z","links":{"resolver":"https://pith.science/pith/CKZRRUQPTAZSWIPH7CMHGUQUE2","bundle":"https://pith.science/pith/CKZRRUQPTAZSWIPH7CMHGUQUE2/bundle.json","state":"https://pith.science/pith/CKZRRUQPTAZSWIPH7CMHGUQUE2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CKZRRUQPTAZSWIPH7CMHGUQUE2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:CKZRRUQPTAZSWIPH7CMHGUQUE2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"92ba96585f834e80851f43a6b2153672d18d6d9a32bfdf83fcf72c6712182943","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T18:24:09Z","title_canon_sha256":"006cffcd289c7e867a6c6c696e605bb41c72dcf699d3435c97aaa85728c4d9ba"},"schema_version":"1.0","source":{"id":"2407.04108","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.04108","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"arxiv_version","alias_value":"2407.04108v3","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.04108","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"pith_short_12","alias_value":"CKZRRUQPTAZS","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"pith_short_16","alias_value":"CKZRRUQPTAZSWIPH","created_at":"2026-07-05T09:53:28Z"},{"alias_kind":"pith_short_8","alias_value":"CKZRRUQP","created_at":"2026-07-05T09:53:28Z"}],"graph_snapshots":[{"event_id":"sha256:d8f8a8b5611f4abab77fe359057ffc082b95dcf1ca2c180bc4fce1b73d1a2f06","target":"graph","created_at":"2026-07-05T09:53:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.04108/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoors are hidden behaviors that are only triggered once an AI system has been deployed. Bad actors looking to create successful backdoors must design them to avoid activation during training and evaluation. Since data used in these stages often only contains information about events that have already occurred, a component of a simple backdoor trigger could be a model recognizing data that is in the future relative to when it was trained. Through prompting experiments and by probing internal activations, we show that current large language models (LLMs) can distinguish past from future even","authors_text":"Arjun Panickssery, Asa Cooper Stickland, Sam Bowman, Sara Price","cross_cats":["cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T18:24:09Z","title":"Future Events as Backdoor Triggers: Investigating Temporal Vulnerabilities in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.04108","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:da6b78560b5eb61e39f0ebe7616bf988d2cfc2e09408b2121472ee4439419594","target":"record","created_at":"2026-07-05T09:53:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"92ba96585f834e80851f43a6b2153672d18d6d9a32bfdf83fcf72c6712182943","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-04T18:24:09Z","title_canon_sha256":"006cffcd289c7e867a6c6c696e605bb41c72dcf699d3435c97aaa85728c4d9ba"},"schema_version":"1.0","source":{"id":"2407.04108","kind":"arxiv","version":3}},"canonical_sha256":"12b318d20f98332b21e7f89873521426b4225829f3828adcde931cfd3ae6fba1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"12b318d20f98332b21e7f89873521426b4225829f3828adcde931cfd3ae6fba1","first_computed_at":"2026-07-05T09:53:28.410399Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:53:28.410399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"szEjN+2NuOq0SvxsOjx+wD/32buMmIW//rE45qJbvZDdwBLyhVa3VLXQEKMqsxDimA35TQjAdOyWxHunRUXoAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:53:28.410885Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.04108","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:da6b78560b5eb61e39f0ebe7616bf988d2cfc2e09408b2121472ee4439419594","sha256:d8f8a8b5611f4abab77fe359057ffc082b95dcf1ca2c180bc4fce1b73d1a2f06"],"state_sha256":"4c7e5e03714d20b1d444c243052f12ca88f59f2020cd2e1e008c86cac2114ff5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OEBQkVhy8ElQU4wWuaT30EkMYU+nwxprwnY+u3fy94b9xf7j1foiVWvqRShezPSdDRiCy0pbN4/dxPZZQnasDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T00:44:34.973889Z","bundle_sha256":"2cddb38133d29c323c6705eea7ca6c1923a9926db10094d92e306a683f2f0c7e"}}