{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:F3OCR6VOG3LDVETD57JY34U4QL","short_pith_number":"pith:F3OCR6VO","canonical_record":{"source":{"id":"2606.20254","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-18T14:05:19Z","cross_cats_sorted":[],"title_canon_sha256":"b4d8b2d7cb105eef94aaf39a8d9f0fad063a8040576519cc76d537fa9f2eebc7","abstract_canon_sha256":"a1e3168728afdf1dbebb2ec3f72c3be571d3e898d701b64b7dddc51f6fcbf9dd"},"schema_version":"1.0"},"canonical_sha256":"2edc28faae36d63a9263efd38df29c82d890f6baf66f367d7433dc87c9fd9d91","source":{"kind":"arxiv","id":"2606.20254","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.20254","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"arxiv_version","alias_value":"2606.20254v1","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.20254","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"pith_short_12","alias_value":"F3OCR6VOG3LD","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"pith_short_16","alias_value":"F3OCR6VOG3LDVETD","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"pith_short_8","alias_value":"F3OCR6VO","created_at":"2026-06-19T16:13:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:F3OCR6VOG3LDVETD57JY34U4QL","target":"record","payload":{"canonical_record":{"source":{"id":"2606.20254","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-18T14:05:19Z","cross_cats_sorted":[],"title_canon_sha256":"b4d8b2d7cb105eef94aaf39a8d9f0fad063a8040576519cc76d537fa9f2eebc7","abstract_canon_sha256":"a1e3168728afdf1dbebb2ec3f72c3be571d3e898d701b64b7dddc51f6fcbf9dd"},"schema_version":"1.0"},"canonical_sha256":"2edc28faae36d63a9263efd38df29c82d890f6baf66f367d7433dc87c9fd9d91","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-19T16:13:07.017621Z","signature_b64":"Kg/zIIM1Ukndg5EJyw7P3GRyS4a5p8XSth+u7SXZT1fNbM9riaE2tZBFHiaLVuwL0yK2/5HDCCufBB9uHVSvBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2edc28faae36d63a9263efd38df29c82d890f6baf66f367d7433dc87c9fd9d91","last_reissued_at":"2026-06-19T16:13:07.017273Z","signature_status":"signed_v1","first_computed_at":"2026-06-19T16:13:07.017273Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.20254","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:13:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3px6x7uZr6yKTeDtGWl/JM2Sk61JDICrrDW0Yv6OfclriE6pkpSbqxe96rvnA2/NhCPoEdW+DTD0b/RzpI3NDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T00:07:10.419625Z"},"content_sha256":"009c2c573fa2878f84f70f37f9a7c6b66336cb75e6d85d9336c8cf5b536515ba","schema_version":"1.0","event_id":"sha256:009c2c573fa2878f84f70f37f9a7c6b66336cb75e6d85d9336c8cf5b536515ba"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:F3OCR6VOG3LDVETD57JY34U4QL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Quantization as a Malicious Task: Removing Quantization-Conditioned Backdoors via Task Arithmetic","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chia-Mu Yu, Kaihsun Yang, Min-Yan Tsai","submitted_at":"2026-06-18T14:05:19Z","abstract_excerpt":"Model quantization is widely adopted to reduce memory usage and inference cost when deploying deep neural networks on resource-constrained devices. However, recent studies have revealed a new security threat known as Quantization-Conditioned Backdoors (QCBs), where a model behaves normally in full precision but activates malicious behavior only after quantization. Existing defenses typically modify quantization procedures or correct activation statistics, often introducing additional computational overhead or relying on specific quantization settings. Here, we present QVec, a parameter-space p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.20254","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.20254/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:13:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Uy9p3EMkf5M+BEF2Pt6qb6JjedUlw5V4sTFJAc0SMIiw6gQZgk1Ag8DrwryvBJNzPQemYHT2WtAWfhHHg0gJBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T00:07:10.420141Z"},"content_sha256":"08661aa0d16e3c3ecb5cffa1a6c1d1bdf7f5aaa94dc6085ddf0d33a2b0912221","schema_version":"1.0","event_id":"sha256:08661aa0d16e3c3ecb5cffa1a6c1d1bdf7f5aaa94dc6085ddf0d33a2b0912221"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:F3OCR6VOG3LDVETD57JY34U4QL","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.1109/TIFS.2026.367107923) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Lu, L., Pang, S., Wang, J., Gu, X., Liu, Y., Liu, X., Zhou, Y.: Quest: Quantization- conditioned efficient stealthy trojan. IEEE Transactions on Information Foren- sics and Security21, 2962–2977 (2026).https://doi.org/10.1109/TIFS.2026. 367","arxiv_id":"2606.20254","detector":"doi_compliance","evidence":{"ref_index":29,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"Lu, L., Pang, S., Wang, J., Gu, X., Liu, Y., Liu, X., Zhou, Y.: Quest: Quantization- conditioned efficient stealthy trojan. IEEE Transactions on Information Foren- sics and Security21, 2962–2977 (2026).https://doi.org/10.1109/TIFS.2026. 367","reconstructed_doi":"10.1109/TIFS.2026.367107923"},"severity":"advisory","ref_index":29,"audited_at":"2026-07-09T20:56:41.457971Z","event_type":"pith.integrity.v1","detected_doi":"10.1109/TIFS.2026.367107923","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"e631c53a634977583767452f0ca77339d292e8fe26636afc17b2310025e29fef","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.0.0","detected_arxiv_id":null,"integrity_event_id":10777,"payload_sha256":"7d72a9b3ea23f28e709f2a52ce3341d1e2e7ca74b26ef09b9ddbd3cf64b5cff7","signature_b64":"yoWWyID+3pS+V8ZZNZxqyboBLwAANy+ie32QdVOwAVr/sHa7Fc38XaaPfYDa2VjO4RYp7SSwpzJoViI8D+lIAQ==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T20:58:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1xUgulZc33XrfDdGQsPSzuG7hP9W6appgCsp3fdTYsn3wM3GCMbuCF6l6/apusGHWiTrZzY8bOgFMCnugzy7AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T00:07:10.422629Z"},"content_sha256":"f1a092d6069ae292cd58b4d14027bb469724df76ff20715ddbd25fe8a0654902","schema_version":"1.0","event_id":"sha256:f1a092d6069ae292cd58b4d14027bb469724df76ff20715ddbd25fe8a0654902"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F3OCR6VOG3LDVETD57JY34U4QL/bundle.json","state_url":"https://pith.science/pith/F3OCR6VOG3LDVETD57JY34U4QL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F3OCR6VOG3LDVETD57JY34U4QL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T00:07:10Z","links":{"resolver":"https://pith.science/pith/F3OCR6VOG3LDVETD57JY34U4QL","bundle":"https://pith.science/pith/F3OCR6VOG3LDVETD57JY34U4QL/bundle.json","state":"https://pith.science/pith/F3OCR6VOG3LDVETD57JY34U4QL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F3OCR6VOG3LDVETD57JY34U4QL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:F3OCR6VOG3LDVETD57JY34U4QL","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a1e3168728afdf1dbebb2ec3f72c3be571d3e898d701b64b7dddc51f6fcbf9dd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-18T14:05:19Z","title_canon_sha256":"b4d8b2d7cb105eef94aaf39a8d9f0fad063a8040576519cc76d537fa9f2eebc7"},"schema_version":"1.0","source":{"id":"2606.20254","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.20254","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"arxiv_version","alias_value":"2606.20254v1","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.20254","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"pith_short_12","alias_value":"F3OCR6VOG3LD","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"pith_short_16","alias_value":"F3OCR6VOG3LDVETD","created_at":"2026-06-19T16:13:07Z"},{"alias_kind":"pith_short_8","alias_value":"F3OCR6VO","created_at":"2026-06-19T16:13:07Z"}],"graph_snapshots":[{"event_id":"sha256:08661aa0d16e3c3ecb5cffa1a6c1d1bdf7f5aaa94dc6085ddf0d33a2b0912221","target":"graph","created_at":"2026-06-19T16:13:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.20254/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model quantization is widely adopted to reduce memory usage and inference cost when deploying deep neural networks on resource-constrained devices. However, recent studies have revealed a new security threat known as Quantization-Conditioned Backdoors (QCBs), where a model behaves normally in full precision but activates malicious behavior only after quantization. Existing defenses typically modify quantization procedures or correct activation statistics, often introducing additional computational overhead or relying on specific quantization settings. Here, we present QVec, a parameter-space p","authors_text":"Chia-Mu Yu, Kaihsun Yang, Min-Yan Tsai","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-18T14:05:19Z","title":"Quantization as a Malicious Task: Removing Quantization-Conditioned Backdoors via Task Arithmetic"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.20254","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:009c2c573fa2878f84f70f37f9a7c6b66336cb75e6d85d9336c8cf5b536515ba","target":"record","created_at":"2026-06-19T16:13:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a1e3168728afdf1dbebb2ec3f72c3be571d3e898d701b64b7dddc51f6fcbf9dd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-18T14:05:19Z","title_canon_sha256":"b4d8b2d7cb105eef94aaf39a8d9f0fad063a8040576519cc76d537fa9f2eebc7"},"schema_version":"1.0","source":{"id":"2606.20254","kind":"arxiv","version":1}},"canonical_sha256":"2edc28faae36d63a9263efd38df29c82d890f6baf66f367d7433dc87c9fd9d91","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2edc28faae36d63a9263efd38df29c82d890f6baf66f367d7433dc87c9fd9d91","first_computed_at":"2026-06-19T16:13:07.017273Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-19T16:13:07.017273Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Kg/zIIM1Ukndg5EJyw7P3GRyS4a5p8XSth+u7SXZT1fNbM9riaE2tZBFHiaLVuwL0yK2/5HDCCufBB9uHVSvBw==","signature_status":"signed_v1","signed_at":"2026-06-19T16:13:07.017621Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.20254","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:009c2c573fa2878f84f70f37f9a7c6b66336cb75e6d85d9336c8cf5b536515ba","sha256:08661aa0d16e3c3ecb5cffa1a6c1d1bdf7f5aaa94dc6085ddf0d33a2b0912221","sha256:f1a092d6069ae292cd58b4d14027bb469724df76ff20715ddbd25fe8a0654902"],"state_sha256":"30ee2fa53baaa8dacb210364a75fed5c40e0cca7f5bc1263037c15048422ab9d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xskseUQCUGVxd32WwfeBspJjXyVfl5ysh94cyMDy560P7hXifo13ypR8CgMAf5DJdTQE+92jc649vs0ke2cdCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T00:07:10.428945Z","bundle_sha256":"2fab60fc67436e7829a73cb00d4e0a781e5ea654ce43e027c8db10a11e9f0f4d"}}