{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:DA2BOSQLQNEW6O74PD4BZ7NSNW","short_pith_number":"pith:DA2BOSQL","canonical_record":{"source":{"id":"2606.25858","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-24T14:07:10Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"edee79675969d929d4f63aafaf7839ae15e1871798f6ce44d6b4df8134446305","abstract_canon_sha256":"24868a004403ef7a6099b311c0819ae201eeb52a78c633b663f5d05807b1e0b3"},"schema_version":"1.0"},"canonical_sha256":"1834174a0b83496f3bfc78f81cfdb26da9e493409c67640034d48fde49f869d0","source":{"kind":"arxiv","id":"2606.25858","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.25858","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"arxiv_version","alias_value":"2606.25858v1","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.25858","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"pith_short_12","alias_value":"DA2BOSQLQNEW","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"pith_short_16","alias_value":"DA2BOSQLQNEW6O74","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"pith_short_8","alias_value":"DA2BOSQL","created_at":"2026-06-25T01:18:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:DA2BOSQLQNEW6O74PD4BZ7NSNW","target":"record","payload":{"canonical_record":{"source":{"id":"2606.25858","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-24T14:07:10Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"edee79675969d929d4f63aafaf7839ae15e1871798f6ce44d6b4df8134446305","abstract_canon_sha256":"24868a004403ef7a6099b311c0819ae201eeb52a78c633b663f5d05807b1e0b3"},"schema_version":"1.0"},"canonical_sha256":"1834174a0b83496f3bfc78f81cfdb26da9e493409c67640034d48fde49f869d0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-25T01:18:41.347907Z","signature_b64":"++m+WIJ0N/sHBB/5xo4jYslYoWgMoQ4f7xUo7NBVNxQmwvaXEMv1GLfFYLy92i5jBlDfrtIVhKQnRAbluGvrBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1834174a0b83496f3bfc78f81cfdb26da9e493409c67640034d48fde49f869d0","last_reissued_at":"2026-06-25T01:18:41.347497Z","signature_status":"signed_v1","first_computed_at":"2026-06-25T01:18:41.347497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.25858","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:18:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LSdNFE48hXCvlZCvIt4K4LkUFHRvmbJL6Vnz178dtagcL8zHETf/PDZRfzkZkzDQfUMKomVM7znGaM1jm3xcCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:45:30.665153Z"},"content_sha256":"21169fd6528229bbed928e8e2eed27fcfa1d139a29dc4f04541ac8eeee688bb4","schema_version":"1.0","event_id":"sha256:21169fd6528229bbed928e8e2eed27fcfa1d139a29dc4f04541ac8eeee688bb4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:DA2BOSQLQNEW6O74PD4BZ7NSNW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Joshua C. Zhao, Kavindu Herath, Saurabh Bagchi","submitted_at":"2026-06-24T14:07:10Z","abstract_excerpt":"Federated learning is vulnerable to backdoor attacks in which malicious clients inject poisoned updates while preserving benign-task performance. In this paper, we study a semantics-driven backdoor mechanism in which attackers use natural visual accessories as triggers and manipulate only the trigger color while keeping the attack pipeline fixed. Our framework considers semantic trigger objects such as masks and sunglasses, instantiated in black and white variants, and evaluates their effect in a controlled federated learning setting. Malicious clients construct poisoned samples by applying a "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.25858","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.25858/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:18:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A7W7XIsfJ1Z11uU8+eEd0CGD1rVbMHO8SdWDlR0DARBkzqae/nRuSPSjzY6+rhqYbFbdGDTSRiYMTp7U322xAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:45:30.665835Z"},"content_sha256":"f7375d08f0f4b4e1bbd9bec01d2a501183881b8b166d34c23e2c37ae84f03b04","schema_version":"1.0","event_id":"sha256:f7375d08f0f4b4e1bbd9bec01d2a501183881b8b166d34c23e2c37ae84f03b04"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DA2BOSQLQNEW6O74PD4BZ7NSNW/bundle.json","state_url":"https://pith.science/pith/DA2BOSQLQNEW6O74PD4BZ7NSNW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DA2BOSQLQNEW6O74PD4BZ7NSNW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:45:30Z","links":{"resolver":"https://pith.science/pith/DA2BOSQLQNEW6O74PD4BZ7NSNW","bundle":"https://pith.science/pith/DA2BOSQLQNEW6O74PD4BZ7NSNW/bundle.json","state":"https://pith.science/pith/DA2BOSQLQNEW6O74PD4BZ7NSNW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DA2BOSQLQNEW6O74PD4BZ7NSNW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:DA2BOSQLQNEW6O74PD4BZ7NSNW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"24868a004403ef7a6099b311c0819ae201eeb52a78c633b663f5d05807b1e0b3","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-24T14:07:10Z","title_canon_sha256":"edee79675969d929d4f63aafaf7839ae15e1871798f6ce44d6b4df8134446305"},"schema_version":"1.0","source":{"id":"2606.25858","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.25858","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"arxiv_version","alias_value":"2606.25858v1","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.25858","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"pith_short_12","alias_value":"DA2BOSQLQNEW","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"pith_short_16","alias_value":"DA2BOSQLQNEW6O74","created_at":"2026-06-25T01:18:41Z"},{"alias_kind":"pith_short_8","alias_value":"DA2BOSQL","created_at":"2026-06-25T01:18:41Z"}],"graph_snapshots":[{"event_id":"sha256:f7375d08f0f4b4e1bbd9bec01d2a501183881b8b166d34c23e2c37ae84f03b04","target":"graph","created_at":"2026-06-25T01:18:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.25858/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning is vulnerable to backdoor attacks in which malicious clients inject poisoned updates while preserving benign-task performance. In this paper, we study a semantics-driven backdoor mechanism in which attackers use natural visual accessories as triggers and manipulate only the trigger color while keeping the attack pipeline fixed. Our framework considers semantic trigger objects such as masks and sunglasses, instantiated in black and white variants, and evaluates their effect in a controlled federated learning setting. Malicious clients construct poisoned samples by applying a ","authors_text":"Joshua C. Zhao, Kavindu Herath, Saurabh Bagchi","cross_cats":["cs.AI","cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-24T14:07:10Z","title":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.25858","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:21169fd6528229bbed928e8e2eed27fcfa1d139a29dc4f04541ac8eeee688bb4","target":"record","created_at":"2026-06-25T01:18:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"24868a004403ef7a6099b311c0819ae201eeb52a78c633b663f5d05807b1e0b3","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-24T14:07:10Z","title_canon_sha256":"edee79675969d929d4f63aafaf7839ae15e1871798f6ce44d6b4df8134446305"},"schema_version":"1.0","source":{"id":"2606.25858","kind":"arxiv","version":1}},"canonical_sha256":"1834174a0b83496f3bfc78f81cfdb26da9e493409c67640034d48fde49f869d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1834174a0b83496f3bfc78f81cfdb26da9e493409c67640034d48fde49f869d0","first_computed_at":"2026-06-25T01:18:41.347497Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-25T01:18:41.347497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"++m+WIJ0N/sHBB/5xo4jYslYoWgMoQ4f7xUo7NBVNxQmwvaXEMv1GLfFYLy92i5jBlDfrtIVhKQnRAbluGvrBg==","signature_status":"signed_v1","signed_at":"2026-06-25T01:18:41.347907Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.25858","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:21169fd6528229bbed928e8e2eed27fcfa1d139a29dc4f04541ac8eeee688bb4","sha256:f7375d08f0f4b4e1bbd9bec01d2a501183881b8b166d34c23e2c37ae84f03b04"],"state_sha256":"1a692d24c1b6077ee4dd5db444cf2a284684c7ee21960464c453c8006c0a5647"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MSviW8QEotgBrO6n/JSG+1fqnGPgmg8qfrBpLOD0LhRS6uo4HTtfnuUzTexPJcK3kAFYAFCWnphSowXDPzOWCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:45:30.669476Z","bundle_sha256":"f72316ee5de4989d66e1072573f7263ce99918fb15ef6c522ed0f65d536b5639"}}