{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DEZ5H3736UT4BDHBOSEAZUS474","short_pith_number":"pith:DEZ5H373","canonical_record":{"source":{"id":"2411.18648","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T22:50:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"c0d710bfbebfa8c96900673cce4c01594082bcffbf22a41d31287f1426883022","abstract_canon_sha256":"50bb408cd4f9d4a3ba7eeaf3a321ca47f23fefa52600522eb55b1d0590b90e0c"},"schema_version":"1.0"},"canonical_sha256":"1933d3effbf527c08ce174880cd25cff1f93d7eaea3b9139b7191daaa405b8b8","source":{"kind":"arxiv","id":"2411.18648","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.18648","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"arxiv_version","alias_value":"2411.18648v2","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.18648","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"pith_short_12","alias_value":"DEZ5H3736UT4","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"pith_short_16","alias_value":"DEZ5H3736UT4BDHB","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"pith_short_8","alias_value":"DEZ5H373","created_at":"2026-07-05T09:55:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DEZ5H3736UT4BDHBOSEAZUS474","target":"record","payload":{"canonical_record":{"source":{"id":"2411.18648","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T22:50:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"c0d710bfbebfa8c96900673cce4c01594082bcffbf22a41d31287f1426883022","abstract_canon_sha256":"50bb408cd4f9d4a3ba7eeaf3a321ca47f23fefa52600522eb55b1d0590b90e0c"},"schema_version":"1.0"},"canonical_sha256":"1933d3effbf527c08ce174880cd25cff1f93d7eaea3b9139b7191daaa405b8b8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:55:35.571175Z","signature_b64":"MAvUq1fRXRzEKenA9+8kpRJ9ZamBV1ZSu8TqjALZfDuz1i5GszZ5BG9QOoIj238cLmhfqoVdOE916GNjaDfaAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1933d3effbf527c08ce174880cd25cff1f93d7eaea3b9139b7191daaa405b8b8","last_reissued_at":"2026-07-05T09:55:35.570606Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:55:35.570606Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.18648","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:55:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f7NqCnF5cElbGPof0iz6ckfonOZuPWcXl9Si4RseyMRLLrKFtgctWP4NaI9z5EqMB7cIoPNTX1Qlosway1l/BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T19:05:56.907694Z"},"content_sha256":"b58e65dd60b74d99eccfa3a407fd30610b638d4228fef47d2876dc9a703b562f","schema_version":"1.0","event_id":"sha256:b58e65dd60b74d99eccfa3a407fd30610b638d4228fef47d2876dc9a703b562f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DEZ5H3736UT4BDHBOSEAZUS474","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MADE: Graph Backdoor Defense with Masked Unlearning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Mingjie Li, Xiao Lin, Yisen Wang","submitted_at":"2024-11-26T22:50:53Z","abstract_excerpt":"Graph Neural Networks (GNNs) have garnered significant attention from researchers due to their outstanding performance in handling graph-related tasks, such as social network analysis, protein design, and so on. Despite their widespread application, recent research has demonstrated that GNNs are vulnerable to backdoor attacks, implemented by injecting triggers into the training datasets. Trained on the poisoned data, GNNs will predict target labels when attaching trigger patterns to inputs. This vulnerability poses significant security risks for applications of GNNs in sensitive domains, such "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.18648","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.18648/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:55:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AIlK9JLCFEJPlUFkSqFcVRHCt1GI6CIzGlkXNcpxn15LxGa+vv+ftbRN/IuXHECN8YtHqo4wiL8xIJXYyr+xDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T19:05:56.908201Z"},"content_sha256":"1c981bddc0cf96523a9f115d7993ed4e082a929e384cf78815ac9123f8294a52","schema_version":"1.0","event_id":"sha256:1c981bddc0cf96523a9f115d7993ed4e082a929e384cf78815ac9123f8294a52"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DEZ5H3736UT4BDHBOSEAZUS474/bundle.json","state_url":"https://pith.science/pith/DEZ5H3736UT4BDHBOSEAZUS474/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DEZ5H3736UT4BDHBOSEAZUS474/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T19:05:56Z","links":{"resolver":"https://pith.science/pith/DEZ5H3736UT4BDHBOSEAZUS474","bundle":"https://pith.science/pith/DEZ5H3736UT4BDHBOSEAZUS474/bundle.json","state":"https://pith.science/pith/DEZ5H3736UT4BDHBOSEAZUS474/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DEZ5H3736UT4BDHBOSEAZUS474/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DEZ5H3736UT4BDHBOSEAZUS474","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"50bb408cd4f9d4a3ba7eeaf3a321ca47f23fefa52600522eb55b1d0590b90e0c","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T22:50:53Z","title_canon_sha256":"c0d710bfbebfa8c96900673cce4c01594082bcffbf22a41d31287f1426883022"},"schema_version":"1.0","source":{"id":"2411.18648","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.18648","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"arxiv_version","alias_value":"2411.18648v2","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.18648","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"pith_short_12","alias_value":"DEZ5H3736UT4","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"pith_short_16","alias_value":"DEZ5H3736UT4BDHB","created_at":"2026-07-05T09:55:35Z"},{"alias_kind":"pith_short_8","alias_value":"DEZ5H373","created_at":"2026-07-05T09:55:35Z"}],"graph_snapshots":[{"event_id":"sha256:1c981bddc0cf96523a9f115d7993ed4e082a929e384cf78815ac9123f8294a52","target":"graph","created_at":"2026-07-05T09:55:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.18648/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph Neural Networks (GNNs) have garnered significant attention from researchers due to their outstanding performance in handling graph-related tasks, such as social network analysis, protein design, and so on. Despite their widespread application, recent research has demonstrated that GNNs are vulnerable to backdoor attacks, implemented by injecting triggers into the training datasets. Trained on the poisoned data, GNNs will predict target labels when attaching trigger patterns to inputs. This vulnerability poses significant security risks for applications of GNNs in sensitive domains, such ","authors_text":"Mingjie Li, Xiao Lin, Yisen Wang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T22:50:53Z","title":"MADE: Graph Backdoor Defense with Masked Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.18648","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b58e65dd60b74d99eccfa3a407fd30610b638d4228fef47d2876dc9a703b562f","target":"record","created_at":"2026-07-05T09:55:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"50bb408cd4f9d4a3ba7eeaf3a321ca47f23fefa52600522eb55b1d0590b90e0c","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T22:50:53Z","title_canon_sha256":"c0d710bfbebfa8c96900673cce4c01594082bcffbf22a41d31287f1426883022"},"schema_version":"1.0","source":{"id":"2411.18648","kind":"arxiv","version":2}},"canonical_sha256":"1933d3effbf527c08ce174880cd25cff1f93d7eaea3b9139b7191daaa405b8b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1933d3effbf527c08ce174880cd25cff1f93d7eaea3b9139b7191daaa405b8b8","first_computed_at":"2026-07-05T09:55:35.570606Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:55:35.570606Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MAvUq1fRXRzEKenA9+8kpRJ9ZamBV1ZSu8TqjALZfDuz1i5GszZ5BG9QOoIj238cLmhfqoVdOE916GNjaDfaAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:55:35.571175Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.18648","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b58e65dd60b74d99eccfa3a407fd30610b638d4228fef47d2876dc9a703b562f","sha256:1c981bddc0cf96523a9f115d7993ed4e082a929e384cf78815ac9123f8294a52"],"state_sha256":"014e981c024923dc70ffdfb2590d07c971b11fa1d927a12ae274365ce91386cd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DzISIL7Q3KbT62Ft59xDjgFZeUWCamVLG6kFMrRgzh8O3BicvC9Z1ViSdAeSgcDW6QP3IG7wMd+H0Jt/SVr/AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T19:05:56.914016Z","bundle_sha256":"116a2bbe13780c8e882d47a41623e6495209a57fecf9e3ad65eaf67111ac81ed"}}