{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:D3MU2QOLH4CSRXOYT4IAT3BSXT","short_pith_number":"pith:D3MU2QOL","canonical_record":{"source":{"id":"2308.00319","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-08-01T06:30:37Z","cross_cats_sorted":[],"title_canon_sha256":"049e8bd4fefceccbfa48ff7d791d381d101b1f72cdf1f954f9e6876c392edee3","abstract_canon_sha256":"d970ba186ec96a946035183bc8a630823153126228084a93265957095b9d79fb"},"schema_version":"1.0"},"canonical_sha256":"1ed94d41cb3f0528ddd89f1009ec32bcc23de0020344da3a3cf65387741f9c67","source":{"kind":"arxiv","id":"2308.00319","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.00319","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"arxiv_version","alias_value":"2308.00319v2","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.00319","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"pith_short_12","alias_value":"D3MU2QOLH4CS","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"pith_short_16","alias_value":"D3MU2QOLH4CSRXOY","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"pith_short_8","alias_value":"D3MU2QOL","created_at":"2026-07-05T07:32:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:D3MU2QOLH4CSRXOYT4IAT3BSXT","target":"record","payload":{"canonical_record":{"source":{"id":"2308.00319","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-08-01T06:30:37Z","cross_cats_sorted":[],"title_canon_sha256":"049e8bd4fefceccbfa48ff7d791d381d101b1f72cdf1f954f9e6876c392edee3","abstract_canon_sha256":"d970ba186ec96a946035183bc8a630823153126228084a93265957095b9d79fb"},"schema_version":"1.0"},"canonical_sha256":"1ed94d41cb3f0528ddd89f1009ec32bcc23de0020344da3a3cf65387741f9c67","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:32:10.142444Z","signature_b64":"TDUioQcFu4ipYbPVJOGQs5HdiTYCmH61LR+N+NFzPSV84i/fbRAl10RWCFkOCmXwWa6A0cQE03WLnfhq+Bb9Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1ed94d41cb3f0528ddd89f1009ec32bcc23de0020344da3a3cf65387741f9c67","last_reissued_at":"2026-07-05T07:32:10.142004Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:32:10.142004Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.00319","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:32:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wzwei+NVwjecAiCxfNg6s2YzLFmj2O+h1Ml7NrninvF6IZH+WcjSmkJjaMZU7LKsJCpTRvB+zqgdecZkjzEZCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T03:52:47.281284Z"},"content_sha256":"3b949dfa8b84be027f9ddd8c9bd2a7f6826953ddd7726be79f9cd5f01b023c9b","schema_version":"1.0","event_id":"sha256:3b949dfa8b84be027f9ddd8c9bd2a7f6826953ddd7726be79f9cd5f01b023c9b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:D3MU2QOLH4CSRXOYT4IAT3BSXT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LimeAttack: Local Explainable Method for Textual Hard-Label Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Hai Zhu, Weiwei Shang, Yuren Wu, Zhaoqing Yang","submitted_at":"2023-08-01T06:30:37Z","abstract_excerpt":"Natural language processing models are vulnerable to adversarial examples. Previous textual adversarial attacks adopt gradients or confidence scores to calculate word importance ranking and generate adversarial examples. However, this information is unavailable in the real world. Therefore, we focus on a more realistic and challenging setting, named hard-label attack, in which the attacker can only query the model and obtain a discrete prediction label. Existing hard-label attack algorithms tend to initialize adversarial examples by random substitution and then utilize complex heuristic algori"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.00319","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.00319/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:32:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mA78k8oEm56AJq+TgYkjCQyfo+P4i/Xf6H6pcEHQlwGcpNAqok+FChw43FwGVgVVQZjU/6FsoalbWvJoN/sdAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T03:52:47.281665Z"},"content_sha256":"ab4bbaec0a46f8d6df55c50f13cb05fd8b69f7eac2cfbc9e85b8b7d85f6b063b","schema_version":"1.0","event_id":"sha256:ab4bbaec0a46f8d6df55c50f13cb05fd8b69f7eac2cfbc9e85b8b7d85f6b063b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D3MU2QOLH4CSRXOYT4IAT3BSXT/bundle.json","state_url":"https://pith.science/pith/D3MU2QOLH4CSRXOYT4IAT3BSXT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D3MU2QOLH4CSRXOYT4IAT3BSXT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T03:52:47Z","links":{"resolver":"https://pith.science/pith/D3MU2QOLH4CSRXOYT4IAT3BSXT","bundle":"https://pith.science/pith/D3MU2QOLH4CSRXOYT4IAT3BSXT/bundle.json","state":"https://pith.science/pith/D3MU2QOLH4CSRXOYT4IAT3BSXT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D3MU2QOLH4CSRXOYT4IAT3BSXT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:D3MU2QOLH4CSRXOYT4IAT3BSXT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d970ba186ec96a946035183bc8a630823153126228084a93265957095b9d79fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-08-01T06:30:37Z","title_canon_sha256":"049e8bd4fefceccbfa48ff7d791d381d101b1f72cdf1f954f9e6876c392edee3"},"schema_version":"1.0","source":{"id":"2308.00319","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.00319","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"arxiv_version","alias_value":"2308.00319v2","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.00319","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"pith_short_12","alias_value":"D3MU2QOLH4CS","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"pith_short_16","alias_value":"D3MU2QOLH4CSRXOY","created_at":"2026-07-05T07:32:10Z"},{"alias_kind":"pith_short_8","alias_value":"D3MU2QOL","created_at":"2026-07-05T07:32:10Z"}],"graph_snapshots":[{"event_id":"sha256:ab4bbaec0a46f8d6df55c50f13cb05fd8b69f7eac2cfbc9e85b8b7d85f6b063b","target":"graph","created_at":"2026-07-05T07:32:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.00319/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Natural language processing models are vulnerable to adversarial examples. Previous textual adversarial attacks adopt gradients or confidence scores to calculate word importance ranking and generate adversarial examples. However, this information is unavailable in the real world. Therefore, we focus on a more realistic and challenging setting, named hard-label attack, in which the attacker can only query the model and obtain a discrete prediction label. Existing hard-label attack algorithms tend to initialize adversarial examples by random substitution and then utilize complex heuristic algori","authors_text":"Hai Zhu, Weiwei Shang, Yuren Wu, Zhaoqing Yang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-08-01T06:30:37Z","title":"LimeAttack: Local Explainable Method for Textual Hard-Label Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.00319","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b949dfa8b84be027f9ddd8c9bd2a7f6826953ddd7726be79f9cd5f01b023c9b","target":"record","created_at":"2026-07-05T07:32:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d970ba186ec96a946035183bc8a630823153126228084a93265957095b9d79fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-08-01T06:30:37Z","title_canon_sha256":"049e8bd4fefceccbfa48ff7d791d381d101b1f72cdf1f954f9e6876c392edee3"},"schema_version":"1.0","source":{"id":"2308.00319","kind":"arxiv","version":2}},"canonical_sha256":"1ed94d41cb3f0528ddd89f1009ec32bcc23de0020344da3a3cf65387741f9c67","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1ed94d41cb3f0528ddd89f1009ec32bcc23de0020344da3a3cf65387741f9c67","first_computed_at":"2026-07-05T07:32:10.142004Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:32:10.142004Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TDUioQcFu4ipYbPVJOGQs5HdiTYCmH61LR+N+NFzPSV84i/fbRAl10RWCFkOCmXwWa6A0cQE03WLnfhq+Bb9Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:32:10.142444Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.00319","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b949dfa8b84be027f9ddd8c9bd2a7f6826953ddd7726be79f9cd5f01b023c9b","sha256:ab4bbaec0a46f8d6df55c50f13cb05fd8b69f7eac2cfbc9e85b8b7d85f6b063b"],"state_sha256":"be8a4eda165d580ba9b83e7693515fb00e013ebb694328b6d2d4c0a7319d3d14"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NQIyEo8MlXGxwgoqudJXqzV56+ObrOrjCJ32ARYIwFTXPH8xO67oM81VQ7iN2tj8/w5Zi86BG9FDFMo4YrmiAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T03:52:47.283569Z","bundle_sha256":"a1e1d44ec93048376fd60162e2185e22c5defa3053667c390cd29b564bd79e88"}}