{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:EEODD2YCKNNKDKCCZ4B7XGPICW","short_pith_number":"pith:EEODD2YC","canonical_record":{"source":{"id":"2211.00241","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T03:13:20Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"cb8270833e4bb084689c3f02588b409dc37bbe1498599f78b529867b3cdf937f","abstract_canon_sha256":"2f5df826cff75ea856316aef3d950c9f8ab43d3fd3fb7069e16c103b561a9dbb"},"schema_version":"1.0"},"canonical_sha256":"211c31eb02535aa1a842cf03fb99e81595138800918290edc9770f2c408b9fae","source":{"kind":"arxiv","id":"2211.00241","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.00241","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"arxiv_version","alias_value":"2211.00241v4","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.00241","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"pith_short_12","alias_value":"EEODD2YCKNNK","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"pith_short_16","alias_value":"EEODD2YCKNNKDKCC","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"pith_short_8","alias_value":"EEODD2YC","created_at":"2026-07-05T06:30:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:EEODD2YCKNNKDKCCZ4B7XGPICW","target":"record","payload":{"canonical_record":{"source":{"id":"2211.00241","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T03:13:20Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"cb8270833e4bb084689c3f02588b409dc37bbe1498599f78b529867b3cdf937f","abstract_canon_sha256":"2f5df826cff75ea856316aef3d950c9f8ab43d3fd3fb7069e16c103b561a9dbb"},"schema_version":"1.0"},"canonical_sha256":"211c31eb02535aa1a842cf03fb99e81595138800918290edc9770f2c408b9fae","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:30:26.571858Z","signature_b64":"XMXEi0CB8gCMQkVP9qQGxKxFLThO1IFfdKDNIzaWBsWREz2xHp5uj51JKXcszDzIEirsdQBapdlrzXPoENewAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"211c31eb02535aa1a842cf03fb99e81595138800918290edc9770f2c408b9fae","last_reissued_at":"2026-07-05T06:30:26.571329Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:30:26.571329Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.00241","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:30:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OuckffZ7b8D6mxOy57UtrEaMt/2ACDOUdBqVEKy8F70kwU8Uu3XBQatYfoN8Rh2ovfWNECpk/DYZHGQFaOpJDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:42:18.358761Z"},"content_sha256":"424c8bb4667c87452bbdfd4ac639d4b495e7982b8d5742b649653d9713abbd1f","schema_version":"1.0","event_id":"sha256:424c8bb4667c87452bbdfd4ac639d4b495e7982b8d5742b649653d9713abbd1f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:EEODD2YCKNNKDKCCZ4B7XGPICW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Policies Beat Superhuman Go AIs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Adam Gleave, Joseph Miller, Kellin Pelrine, Michael D. Dennis, Nora Belrose, Sergey Levine, Stuart Russell, Tom Tseng, Tony T. Wang, Viktor Pogrebniak, Yawen Duan","submitted_at":"2022-11-01T03:13:20Z","abstract_excerpt":"We attack the state-of-the-art Go-playing AI system KataGo by training adversarial policies against it, achieving a >97% win rate against KataGo running at superhuman settings. Our adversaries do not win by playing Go well. Instead, they trick KataGo into making serious blunders. Our attack transfers zero-shot to other superhuman Go-playing AIs, and is comprehensible to the extent that human experts can implement it without algorithmic assistance to consistently beat superhuman AIs. The core vulnerability uncovered by our attack persists even in KataGo agents adversarially trained to defend ag"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.00241","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.00241/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:30:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CS01mann8S+lswvsixFb2g6BXp5C8/jRpcYK1WPo0rJ6pjX6v1Dt3ZxMD8fB6AoF139mKW/WKdjIOn+EhNPaDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:42:18.359370Z"},"content_sha256":"c13bae4c3e4bddf230f01311e9d6f3b0844ba1f3f35246fd636514fa83cada26","schema_version":"1.0","event_id":"sha256:c13bae4c3e4bddf230f01311e9d6f3b0844ba1f3f35246fd636514fa83cada26"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EEODD2YCKNNKDKCCZ4B7XGPICW/bundle.json","state_url":"https://pith.science/pith/EEODD2YCKNNKDKCCZ4B7XGPICW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EEODD2YCKNNKDKCCZ4B7XGPICW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T14:42:18Z","links":{"resolver":"https://pith.science/pith/EEODD2YCKNNKDKCCZ4B7XGPICW","bundle":"https://pith.science/pith/EEODD2YCKNNKDKCCZ4B7XGPICW/bundle.json","state":"https://pith.science/pith/EEODD2YCKNNKDKCCZ4B7XGPICW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EEODD2YCKNNKDKCCZ4B7XGPICW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:EEODD2YCKNNKDKCCZ4B7XGPICW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2f5df826cff75ea856316aef3d950c9f8ab43d3fd3fb7069e16c103b561a9dbb","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T03:13:20Z","title_canon_sha256":"cb8270833e4bb084689c3f02588b409dc37bbe1498599f78b529867b3cdf937f"},"schema_version":"1.0","source":{"id":"2211.00241","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.00241","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"arxiv_version","alias_value":"2211.00241v4","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.00241","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"pith_short_12","alias_value":"EEODD2YCKNNK","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"pith_short_16","alias_value":"EEODD2YCKNNKDKCC","created_at":"2026-07-05T06:30:26Z"},{"alias_kind":"pith_short_8","alias_value":"EEODD2YC","created_at":"2026-07-05T06:30:26Z"}],"graph_snapshots":[{"event_id":"sha256:c13bae4c3e4bddf230f01311e9d6f3b0844ba1f3f35246fd636514fa83cada26","target":"graph","created_at":"2026-07-05T06:30:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.00241/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We attack the state-of-the-art Go-playing AI system KataGo by training adversarial policies against it, achieving a >97% win rate against KataGo running at superhuman settings. Our adversaries do not win by playing Go well. Instead, they trick KataGo into making serious blunders. Our attack transfers zero-shot to other superhuman Go-playing AIs, and is comprehensible to the extent that human experts can implement it without algorithmic assistance to consistently beat superhuman AIs. The core vulnerability uncovered by our attack persists even in KataGo agents adversarially trained to defend ag","authors_text":"Adam Gleave, Joseph Miller, Kellin Pelrine, Michael D. Dennis, Nora Belrose, Sergey Levine, Stuart Russell, Tom Tseng, Tony T. Wang, Viktor Pogrebniak, Yawen Duan","cross_cats":["cs.AI","cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T03:13:20Z","title":"Adversarial Policies Beat Superhuman Go AIs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.00241","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:424c8bb4667c87452bbdfd4ac639d4b495e7982b8d5742b649653d9713abbd1f","target":"record","created_at":"2026-07-05T06:30:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2f5df826cff75ea856316aef3d950c9f8ab43d3fd3fb7069e16c103b561a9dbb","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T03:13:20Z","title_canon_sha256":"cb8270833e4bb084689c3f02588b409dc37bbe1498599f78b529867b3cdf937f"},"schema_version":"1.0","source":{"id":"2211.00241","kind":"arxiv","version":4}},"canonical_sha256":"211c31eb02535aa1a842cf03fb99e81595138800918290edc9770f2c408b9fae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"211c31eb02535aa1a842cf03fb99e81595138800918290edc9770f2c408b9fae","first_computed_at":"2026-07-05T06:30:26.571329Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:30:26.571329Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XMXEi0CB8gCMQkVP9qQGxKxFLThO1IFfdKDNIzaWBsWREz2xHp5uj51JKXcszDzIEirsdQBapdlrzXPoENewAg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:30:26.571858Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.00241","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:424c8bb4667c87452bbdfd4ac639d4b495e7982b8d5742b649653d9713abbd1f","sha256:c13bae4c3e4bddf230f01311e9d6f3b0844ba1f3f35246fd636514fa83cada26"],"state_sha256":"178afc2db5e7347d8d5291f8243c5191f016e28255cd30280c8597fc27f2f5de"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pQe2VCF13UYWA8QDE9s6weezsFvw8UCbnY9qcLagrVhmqMV5y0Lo1f+TcOfeV2Ued/Znth9xudVrouA7gZXjAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T14:42:18.364557Z","bundle_sha256":"95fdaa3e7b1d97edba8c0815f1973577a862c8229b0e844990bb31314edd75f5"}}