{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:FOYE2TXWA6V7J6KSO26NN5WVSZ","short_pith_number":"pith:FOYE2TXW","canonical_record":{"source":{"id":"2506.07467","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-09T06:21:35Z","cross_cats_sorted":[],"title_canon_sha256":"f54c82d1a6e0bd81d6560b15f224b50c17224f9327c5e9c8a963924f375449e9","abstract_canon_sha256":"7628a7d0ddc9c77cb982664c69981a51d9bb0618f7305b42c5989b0b6e2c3fe4"},"schema_version":"1.0"},"canonical_sha256":"2bb04d4ef607abf4f95276bcd6f6d5966ad88933cef918e7a8f61e1067f78df9","source":{"kind":"arxiv","id":"2506.07467","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07467","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07467v1","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07467","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"pith_short_12","alias_value":"FOYE2TXWA6V7","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"pith_short_16","alias_value":"FOYE2TXWA6V7J6KS","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"pith_short_8","alias_value":"FOYE2TXW","created_at":"2026-07-05T11:18:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:FOYE2TXWA6V7J6KSO26NN5WVSZ","target":"record","payload":{"canonical_record":{"source":{"id":"2506.07467","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-09T06:21:35Z","cross_cats_sorted":[],"title_canon_sha256":"f54c82d1a6e0bd81d6560b15f224b50c17224f9327c5e9c8a963924f375449e9","abstract_canon_sha256":"7628a7d0ddc9c77cb982664c69981a51d9bb0618f7305b42c5989b0b6e2c3fe4"},"schema_version":"1.0"},"canonical_sha256":"2bb04d4ef607abf4f95276bcd6f6d5966ad88933cef918e7a8f61e1067f78df9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:18:27.831206Z","signature_b64":"NpbjK+O37YzFT7VItD3m0Ki1OaLtHJbCoaG1J7wcVtYicwmLxQi4VdpWJzitW9ZV4gn6+L2AdOKEDbSmGpPyAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2bb04d4ef607abf4f95276bcd6f6d5966ad88933cef918e7a8f61e1067f78df9","last_reissued_at":"2026-07-05T11:18:27.830762Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:18:27.830762Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.07467","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mNylsR8EZ9IkUVOMa0reM6bxO63hyeuUwAqlIi6Aufm4qKLuHDrQShvtGf5Ahj6LrDYFvNYEwobvfJ9xvk2pBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:34:47.581571Z"},"content_sha256":"11254f6e40e5b963693bd8cf7e79490e8f11f6b4bba4a610f637a0b3b5d7c117","schema_version":"1.0","event_id":"sha256:11254f6e40e5b963693bd8cf7e79490e8f11f6b4bba4a610f637a0b3b5d7c117"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:FOYE2TXWA6V7J6KSO26NN5WVSZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Circumventing Backdoor Space via Weight Symmetry","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Haoyu He, Hengji Dong, Hongwei Yang, Hui He, Jie Peng, Jing Zhao, Weizhe Zhang","submitted_at":"2025-06-09T06:21:35Z","abstract_excerpt":"Deep neural networks are vulnerable to backdoor attacks, where malicious behaviors are implanted during training. While existing defenses can effectively purify compromised models, they typically require labeled data or specific training procedures, making them difficult to apply beyond supervised learning settings. Notably, recent studies have shown successful backdoor attacks across various learning paradigms, highlighting a critical security concern. To address this gap, we propose Two-stage Symmetry Connectivity (TSC), a novel backdoor purification defense that operates independently of da"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07467","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.07467/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0mENsIM6jssxjVUrn0V9DJhdtTFYXeZkfafDosJ629KswpHfxr1rwt5wSUcLBPsOOfmeiGSMFPXwKIUzsIThCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:34:47.582506Z"},"content_sha256":"7d6ae06f357a3c780d2016d768c5c004b8366590eb771bc1cf7ee826de60e6dd","schema_version":"1.0","event_id":"sha256:7d6ae06f357a3c780d2016d768c5c004b8366590eb771bc1cf7ee826de60e6dd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FOYE2TXWA6V7J6KSO26NN5WVSZ/bundle.json","state_url":"https://pith.science/pith/FOYE2TXWA6V7J6KSO26NN5WVSZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FOYE2TXWA6V7J6KSO26NN5WVSZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:34:47Z","links":{"resolver":"https://pith.science/pith/FOYE2TXWA6V7J6KSO26NN5WVSZ","bundle":"https://pith.science/pith/FOYE2TXWA6V7J6KSO26NN5WVSZ/bundle.json","state":"https://pith.science/pith/FOYE2TXWA6V7J6KSO26NN5WVSZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FOYE2TXWA6V7J6KSO26NN5WVSZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:FOYE2TXWA6V7J6KSO26NN5WVSZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7628a7d0ddc9c77cb982664c69981a51d9bb0618f7305b42c5989b0b6e2c3fe4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-09T06:21:35Z","title_canon_sha256":"f54c82d1a6e0bd81d6560b15f224b50c17224f9327c5e9c8a963924f375449e9"},"schema_version":"1.0","source":{"id":"2506.07467","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07467","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07467v1","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07467","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"pith_short_12","alias_value":"FOYE2TXWA6V7","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"pith_short_16","alias_value":"FOYE2TXWA6V7J6KS","created_at":"2026-07-05T11:18:27Z"},{"alias_kind":"pith_short_8","alias_value":"FOYE2TXW","created_at":"2026-07-05T11:18:27Z"}],"graph_snapshots":[{"event_id":"sha256:7d6ae06f357a3c780d2016d768c5c004b8366590eb771bc1cf7ee826de60e6dd","target":"graph","created_at":"2026-07-05T11:18:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07467/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks are vulnerable to backdoor attacks, where malicious behaviors are implanted during training. While existing defenses can effectively purify compromised models, they typically require labeled data or specific training procedures, making them difficult to apply beyond supervised learning settings. Notably, recent studies have shown successful backdoor attacks across various learning paradigms, highlighting a critical security concern. To address this gap, we propose Two-stage Symmetry Connectivity (TSC), a novel backdoor purification defense that operates independently of da","authors_text":"Haoyu He, Hengji Dong, Hongwei Yang, Hui He, Jie Peng, Jing Zhao, Weizhe Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-09T06:21:35Z","title":"Circumventing Backdoor Space via Weight Symmetry"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07467","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:11254f6e40e5b963693bd8cf7e79490e8f11f6b4bba4a610f637a0b3b5d7c117","target":"record","created_at":"2026-07-05T11:18:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7628a7d0ddc9c77cb982664c69981a51d9bb0618f7305b42c5989b0b6e2c3fe4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-09T06:21:35Z","title_canon_sha256":"f54c82d1a6e0bd81d6560b15f224b50c17224f9327c5e9c8a963924f375449e9"},"schema_version":"1.0","source":{"id":"2506.07467","kind":"arxiv","version":1}},"canonical_sha256":"2bb04d4ef607abf4f95276bcd6f6d5966ad88933cef918e7a8f61e1067f78df9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2bb04d4ef607abf4f95276bcd6f6d5966ad88933cef918e7a8f61e1067f78df9","first_computed_at":"2026-07-05T11:18:27.830762Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:18:27.830762Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NpbjK+O37YzFT7VItD3m0Ki1OaLtHJbCoaG1J7wcVtYicwmLxQi4VdpWJzitW9ZV4gn6+L2AdOKEDbSmGpPyAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:18:27.831206Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07467","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:11254f6e40e5b963693bd8cf7e79490e8f11f6b4bba4a610f637a0b3b5d7c117","sha256:7d6ae06f357a3c780d2016d768c5c004b8366590eb771bc1cf7ee826de60e6dd"],"state_sha256":"c9971f6862cb829511d1bb3c0e57583a7f8d690997a270aaf999ab93ff18707d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1DCT020EJ0yNsyEQ9EOSAMeKJc5MSOnJdWtvTDlJUS7LrUrhpmZfFYEjv9C47MrUJmDq/+y6ZY0tttBPv5EPCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:34:47.587510Z","bundle_sha256":"3f439b7fc5bec45cf3a7e4dec46b03228d8e17dfe335e8e875659fda12ec8c56"}}