{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:EBTXNNFQESS7QCGLEKSF4IEC27","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e8dc2d410959fa6480c5655408c0a58506adb79977b103aee6e1e7edc1f83c47","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-27T08:28:58Z","title_canon_sha256":"1cba30187585a518b0ac5275c710e2c9aa88af70735727a77194e1b3fa47f8b7"},"schema_version":"1.0","source":{"id":"2307.14692","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.14692","created_at":"2026-07-05T06:35:16Z"},{"alias_kind":"arxiv_version","alias_value":"2307.14692v1","created_at":"2026-07-05T06:35:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.14692","created_at":"2026-07-05T06:35:16Z"},{"alias_kind":"pith_short_12","alias_value":"EBTXNNFQESS7","created_at":"2026-07-05T06:35:16Z"},{"alias_kind":"pith_short_16","alias_value":"EBTXNNFQESS7QCGL","created_at":"2026-07-05T06:35:16Z"},{"alias_kind":"pith_short_8","alias_value":"EBTXNNFQ","created_at":"2026-07-05T06:35:16Z"}],"graph_snapshots":[{"event_id":"sha256:7151a8852c9893d7058352ad1cdee2dca98f7ef6082beef7b88682820e265bda","target":"graph","created_at":"2026-07-05T06:35:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.14692/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Because state-of-the-art language models are expensive to train, most practitioners must make use of one of the few publicly available language models or language model APIs. This consolidation of trust increases the potency of backdoor attacks, where an adversary tampers with a machine learning model in order to make it perform some malicious behavior on inputs that contain a predefined backdoor trigger. We show that the in-context learning ability of large language models significantly complicates the question of developing backdoor attacks, as a successful backdoor must work against various","authors_text":"Florian Tram\\`er, Matthew Jagielski, Nicholas Carlini, Nikhil Kandpal","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-27T08:28:58Z","title":"Backdoor Attacks for In-Context Learning with Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.14692","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e4cae91b1438dc10beb37efa290c83a09365218de36483a9a3a32a3dd0203600","target":"record","created_at":"2026-07-05T06:35:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e8dc2d410959fa6480c5655408c0a58506adb79977b103aee6e1e7edc1f83c47","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-27T08:28:58Z","title_canon_sha256":"1cba30187585a518b0ac5275c710e2c9aa88af70735727a77194e1b3fa47f8b7"},"schema_version":"1.0","source":{"id":"2307.14692","kind":"arxiv","version":1}},"canonical_sha256":"206776b4b024a5f808cb22a45e2082d7cc9a4641341338b629ef09e9e7d51cdb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"206776b4b024a5f808cb22a45e2082d7cc9a4641341338b629ef09e9e7d51cdb","first_computed_at":"2026-07-05T06:35:16.820404Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:35:16.820404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2xtI6sdWzXP96l3bZVDVEEf6g9+mevd8oQC9jgEzYTwbJViIxkgiDSWgJcn9FJvSHb8qXqjGOXHFbFp4SvKfCg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:35:16.820885Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.14692","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e4cae91b1438dc10beb37efa290c83a09365218de36483a9a3a32a3dd0203600","sha256:7151a8852c9893d7058352ad1cdee2dca98f7ef6082beef7b88682820e265bda"],"state_sha256":"4dc20edd65af0ac68fc703d0ffab81f9f50a6dee7fe11b2d08b3c9fa07c16ed8"}