{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:FDYYJWX5FBIEPPVNDLKNUF4TK4","short_pith_number":"pith:FDYYJWX5","canonical_record":{"source":{"id":"2505.14286","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-05-20T12:35:59Z","cross_cats_sorted":["cs.SD","eess.AS"],"title_canon_sha256":"b6862a9ee2dd3f50ae204bfbe749d47d1b37681d236e54d398cb86ae1d7a0e7c","abstract_canon_sha256":"b6350793ccab56c24429798f20e1abd00da395b6f938ec617b24354cc4c2c2cc"},"schema_version":"1.0"},"canonical_sha256":"28f184dafd285047bead1ad4da1793571e08d0b53d6c14c6dae3c253ae005d69","source":{"kind":"arxiv","id":"2505.14286","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.14286","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"arxiv_version","alias_value":"2505.14286v1","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.14286","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"pith_short_12","alias_value":"FDYYJWX5FBIE","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"pith_short_16","alias_value":"FDYYJWX5FBIEPPVN","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"pith_short_8","alias_value":"FDYYJWX5","created_at":"2026-07-05T11:05:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:FDYYJWX5FBIEPPVNDLKNUF4TK4","target":"record","payload":{"canonical_record":{"source":{"id":"2505.14286","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-05-20T12:35:59Z","cross_cats_sorted":["cs.SD","eess.AS"],"title_canon_sha256":"b6862a9ee2dd3f50ae204bfbe749d47d1b37681d236e54d398cb86ae1d7a0e7c","abstract_canon_sha256":"b6350793ccab56c24429798f20e1abd00da395b6f938ec617b24354cc4c2c2cc"},"schema_version":"1.0"},"canonical_sha256":"28f184dafd285047bead1ad4da1793571e08d0b53d6c14c6dae3c253ae005d69","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:05:58.928992Z","signature_b64":"0bBDNDSWsLtDCQlJNXAlHB2mWATSpr/hDgyyytshJjgqfqXEXFfqcvM9bVksakUzh3gxMPTe2F5F6iuGTBPZBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"28f184dafd285047bead1ad4da1793571e08d0b53d6c14c6dae3c253ae005d69","last_reissued_at":"2026-07-05T11:05:58.928510Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:05:58.928510Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.14286","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:05:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kCr8GYNaJg1sAnLeQT+jZWO1R+y9ZhHkfu4J6+ETijOSNokwhOm2OZdu08q1m9plpaeZYi8+D89kTnnhqfWeDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:15:05.965349Z"},"content_sha256":"fba4808db4475b1b12c35cbe94658530b2a8cd2b2bb421ee10dbde58df8f3f1b","schema_version":"1.0","event_id":"sha256:fba4808db4475b1b12c35cbe94658530b2a8cd2b2bb421ee10dbde58df8f3f1b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:FDYYJWX5FBIEPPVNDLKNUF4TK4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal Acoustic Adversarial Attacks for Flexible Control of Speech-LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SD","eess.AS"],"primary_cat":"cs.CL","authors_text":"Kate Knill, Mark Gales, Mengjie Qian, Rao Ma, Vyas Raina","submitted_at":"2025-05-20T12:35:59Z","abstract_excerpt":"The combination of pre-trained speech encoders with large language models has enabled the development of speech LLMs that can handle a wide range of spoken language processing tasks. While these models are powerful and flexible, this very flexibility may make them more vulnerable to adversarial attacks. To examine the extent of this problem, in this work we investigate universal acoustic adversarial attacks on speech LLMs. Here a fixed, universal, adversarial audio segment is prepended to the original input audio. We initially investigate attacks that cause the model to either produce no outpu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.14286","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.14286/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:05:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j0ZW9TihHkPtWx3FstMAayB6im2ERIeOfXcyfHGlCy/gkHUzd1lnLl2+3uzwcR//j7sv4MVy/qXEdlwJJiaMBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:15:05.965919Z"},"content_sha256":"7a1b9772e357eeb373bf8b945727509bc9046169bbcd5e118e41909cd08d2faf","schema_version":"1.0","event_id":"sha256:7a1b9772e357eeb373bf8b945727509bc9046169bbcd5e118e41909cd08d2faf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FDYYJWX5FBIEPPVNDLKNUF4TK4/bundle.json","state_url":"https://pith.science/pith/FDYYJWX5FBIEPPVNDLKNUF4TK4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FDYYJWX5FBIEPPVNDLKNUF4TK4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T09:15:05Z","links":{"resolver":"https://pith.science/pith/FDYYJWX5FBIEPPVNDLKNUF4TK4","bundle":"https://pith.science/pith/FDYYJWX5FBIEPPVNDLKNUF4TK4/bundle.json","state":"https://pith.science/pith/FDYYJWX5FBIEPPVNDLKNUF4TK4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FDYYJWX5FBIEPPVNDLKNUF4TK4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:FDYYJWX5FBIEPPVNDLKNUF4TK4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b6350793ccab56c24429798f20e1abd00da395b6f938ec617b24354cc4c2c2cc","cross_cats_sorted":["cs.SD","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-05-20T12:35:59Z","title_canon_sha256":"b6862a9ee2dd3f50ae204bfbe749d47d1b37681d236e54d398cb86ae1d7a0e7c"},"schema_version":"1.0","source":{"id":"2505.14286","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.14286","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"arxiv_version","alias_value":"2505.14286v1","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.14286","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"pith_short_12","alias_value":"FDYYJWX5FBIE","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"pith_short_16","alias_value":"FDYYJWX5FBIEPPVN","created_at":"2026-07-05T11:05:58Z"},{"alias_kind":"pith_short_8","alias_value":"FDYYJWX5","created_at":"2026-07-05T11:05:58Z"}],"graph_snapshots":[{"event_id":"sha256:7a1b9772e357eeb373bf8b945727509bc9046169bbcd5e118e41909cd08d2faf","target":"graph","created_at":"2026-07-05T11:05:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.14286/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The combination of pre-trained speech encoders with large language models has enabled the development of speech LLMs that can handle a wide range of spoken language processing tasks. While these models are powerful and flexible, this very flexibility may make them more vulnerable to adversarial attacks. To examine the extent of this problem, in this work we investigate universal acoustic adversarial attacks on speech LLMs. Here a fixed, universal, adversarial audio segment is prepended to the original input audio. We initially investigate attacks that cause the model to either produce no outpu","authors_text":"Kate Knill, Mark Gales, Mengjie Qian, Rao Ma, Vyas Raina","cross_cats":["cs.SD","eess.AS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-05-20T12:35:59Z","title":"Universal Acoustic Adversarial Attacks for Flexible Control of Speech-LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.14286","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fba4808db4475b1b12c35cbe94658530b2a8cd2b2bb421ee10dbde58df8f3f1b","target":"record","created_at":"2026-07-05T11:05:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b6350793ccab56c24429798f20e1abd00da395b6f938ec617b24354cc4c2c2cc","cross_cats_sorted":["cs.SD","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-05-20T12:35:59Z","title_canon_sha256":"b6862a9ee2dd3f50ae204bfbe749d47d1b37681d236e54d398cb86ae1d7a0e7c"},"schema_version":"1.0","source":{"id":"2505.14286","kind":"arxiv","version":1}},"canonical_sha256":"28f184dafd285047bead1ad4da1793571e08d0b53d6c14c6dae3c253ae005d69","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"28f184dafd285047bead1ad4da1793571e08d0b53d6c14c6dae3c253ae005d69","first_computed_at":"2026-07-05T11:05:58.928510Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:05:58.928510Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0bBDNDSWsLtDCQlJNXAlHB2mWATSpr/hDgyyytshJjgqfqXEXFfqcvM9bVksakUzh3gxMPTe2F5F6iuGTBPZBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:05:58.928992Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.14286","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fba4808db4475b1b12c35cbe94658530b2a8cd2b2bb421ee10dbde58df8f3f1b","sha256:7a1b9772e357eeb373bf8b945727509bc9046169bbcd5e118e41909cd08d2faf"],"state_sha256":"bda03aa4eb70c0eb93f1d2bf46b3cbb3681f86091721afb544e4ea95c0247ae8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wfUlAhvAEdmjZNKsHPYTYfUl9OOzdjFTW2F4SLG4wxfY2YdinvJEhEy4aBz6rfQnS3e+v9enJCHNr2OuabwoCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T09:15:05.970131Z","bundle_sha256":"23c05e661196393759ae0863b60a7655508183eb20719c14c018caabcf05c888"}}