{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:GGAM6NM5CVZ4CF5YCER5RYUWWU","short_pith_number":"pith:GGAM6NM5","canonical_record":{"source":{"id":"2407.11282","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-15T23:41:11Z","cross_cats_sorted":[],"title_canon_sha256":"eaf06f5665b61a84f257f9058118d87d55fb0c8303d9bc36133b4ac7adf4c417","abstract_canon_sha256":"955f0e26d34c1b42a03f00f56c583fbd7646ff645c193286adf9ec51bace349e"},"schema_version":"1.0"},"canonical_sha256":"3180cf359d1573c117b81123d8e296b509b9bc03a764d3f9a24025ddacc9971e","source":{"kind":"arxiv","id":"2407.11282","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.11282","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"arxiv_version","alias_value":"2407.11282v3","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.11282","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"pith_short_12","alias_value":"GGAM6NM5CVZ4","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"pith_short_16","alias_value":"GGAM6NM5CVZ4CF5Y","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"pith_short_8","alias_value":"GGAM6NM5","created_at":"2026-07-05T08:46:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:GGAM6NM5CVZ4CF5YCER5RYUWWU","target":"record","payload":{"canonical_record":{"source":{"id":"2407.11282","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-15T23:41:11Z","cross_cats_sorted":[],"title_canon_sha256":"eaf06f5665b61a84f257f9058118d87d55fb0c8303d9bc36133b4ac7adf4c417","abstract_canon_sha256":"955f0e26d34c1b42a03f00f56c583fbd7646ff645c193286adf9ec51bace349e"},"schema_version":"1.0"},"canonical_sha256":"3180cf359d1573c117b81123d8e296b509b9bc03a764d3f9a24025ddacc9971e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:46:08.630084Z","signature_b64":"LPSgOEI3t/Xeo7dppYuO2PK7ChPqDBgjM5ixCr+/apLfxc/ol2MH0uQ38MrBXKmt71ZwrYCqkfS8I8i86I1vAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3180cf359d1573c117b81123d8e296b509b9bc03a764d3f9a24025ddacc9971e","last_reissued_at":"2026-07-05T08:46:08.629592Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:46:08.629592Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.11282","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:46:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UXN+s8b1i3JtJRnSrAcpZg+WoIT3DIeizXExHzADNDfETxBj3KpIpfa9P+mQ0bnw2fPQVsFSlEeQVkile/oMCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:42:50.469429Z"},"content_sha256":"b5aa8c2bd7a1663e77f97875bb9346a9735dc4d79aa8bd19685c3b5ef309368a","schema_version":"1.0","event_id":"sha256:b5aa8c2bd7a1663e77f97875bb9346a9735dc4d79aa8bd19685c3b5ef309368a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:GGAM6NM5CVZ4CF5YCER5RYUWWU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Fan Yang, Felix Juefei-Xu, Guangyan Sun, Kaize Ding, Mingyu Jin, Qifan Wang, Qingcheng Zeng, Qinkai Yu, Ruixiang Tang, Shiqing Ma, Wenyue Hua, Yanda Meng, Yongfeng Zhang, Zhenting Wang, Zihao Zhou","submitted_at":"2024-07-15T23:41:11Z","abstract_excerpt":"Large Language Models (LLMs) are employed across various high-stakes domains, where the reliability of their outputs is crucial. One commonly used method to assess the reliability of LLMs' responses is uncertainty estimation, which gauges the likelihood of their answers being correct. While many studies focus on improving the accuracy of uncertainty estimations for LLMs, our research investigates the fragility of uncertainty estimation and explores potential attacks. We demonstrate that an attacker can embed a backdoor in LLMs, which, when activated by a specific trigger in the input, manipula"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.11282","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.11282/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:46:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5BUKa8AsghD2I1zVWrMIGJDh7yhPkshwm/8VYnZETibB8WQpC4wxo9qFh3fa/gtnqjkJuwarreA9IcQ7T2FCDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:42:50.469819Z"},"content_sha256":"703164cc2662425cbf95520eda1e0069c85fdb5d8ddbaa7020365a2ca8605581","schema_version":"1.0","event_id":"sha256:703164cc2662425cbf95520eda1e0069c85fdb5d8ddbaa7020365a2ca8605581"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GGAM6NM5CVZ4CF5YCER5RYUWWU/bundle.json","state_url":"https://pith.science/pith/GGAM6NM5CVZ4CF5YCER5RYUWWU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GGAM6NM5CVZ4CF5YCER5RYUWWU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T05:42:50Z","links":{"resolver":"https://pith.science/pith/GGAM6NM5CVZ4CF5YCER5RYUWWU","bundle":"https://pith.science/pith/GGAM6NM5CVZ4CF5YCER5RYUWWU/bundle.json","state":"https://pith.science/pith/GGAM6NM5CVZ4CF5YCER5RYUWWU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GGAM6NM5CVZ4CF5YCER5RYUWWU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GGAM6NM5CVZ4CF5YCER5RYUWWU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"955f0e26d34c1b42a03f00f56c583fbd7646ff645c193286adf9ec51bace349e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-15T23:41:11Z","title_canon_sha256":"eaf06f5665b61a84f257f9058118d87d55fb0c8303d9bc36133b4ac7adf4c417"},"schema_version":"1.0","source":{"id":"2407.11282","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.11282","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"arxiv_version","alias_value":"2407.11282v3","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.11282","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"pith_short_12","alias_value":"GGAM6NM5CVZ4","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"pith_short_16","alias_value":"GGAM6NM5CVZ4CF5Y","created_at":"2026-07-05T08:46:08Z"},{"alias_kind":"pith_short_8","alias_value":"GGAM6NM5","created_at":"2026-07-05T08:46:08Z"}],"graph_snapshots":[{"event_id":"sha256:703164cc2662425cbf95520eda1e0069c85fdb5d8ddbaa7020365a2ca8605581","target":"graph","created_at":"2026-07-05T08:46:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.11282/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are employed across various high-stakes domains, where the reliability of their outputs is crucial. One commonly used method to assess the reliability of LLMs' responses is uncertainty estimation, which gauges the likelihood of their answers being correct. While many studies focus on improving the accuracy of uncertainty estimations for LLMs, our research investigates the fragility of uncertainty estimation and explores potential attacks. We demonstrate that an attacker can embed a backdoor in LLMs, which, when activated by a specific trigger in the input, manipula","authors_text":"Fan Yang, Felix Juefei-Xu, Guangyan Sun, Kaize Ding, Mingyu Jin, Qifan Wang, Qingcheng Zeng, Qinkai Yu, Ruixiang Tang, Shiqing Ma, Wenyue Hua, Yanda Meng, Yongfeng Zhang, Zhenting Wang, Zihao Zhou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-15T23:41:11Z","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.11282","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b5aa8c2bd7a1663e77f97875bb9346a9735dc4d79aa8bd19685c3b5ef309368a","target":"record","created_at":"2026-07-05T08:46:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"955f0e26d34c1b42a03f00f56c583fbd7646ff645c193286adf9ec51bace349e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-15T23:41:11Z","title_canon_sha256":"eaf06f5665b61a84f257f9058118d87d55fb0c8303d9bc36133b4ac7adf4c417"},"schema_version":"1.0","source":{"id":"2407.11282","kind":"arxiv","version":3}},"canonical_sha256":"3180cf359d1573c117b81123d8e296b509b9bc03a764d3f9a24025ddacc9971e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3180cf359d1573c117b81123d8e296b509b9bc03a764d3f9a24025ddacc9971e","first_computed_at":"2026-07-05T08:46:08.629592Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:46:08.629592Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LPSgOEI3t/Xeo7dppYuO2PK7ChPqDBgjM5ixCr+/apLfxc/ol2MH0uQ38MrBXKmt71ZwrYCqkfS8I8i86I1vAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:46:08.630084Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.11282","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b5aa8c2bd7a1663e77f97875bb9346a9735dc4d79aa8bd19685c3b5ef309368a","sha256:703164cc2662425cbf95520eda1e0069c85fdb5d8ddbaa7020365a2ca8605581"],"state_sha256":"021a978c5cbc9ab17f5efe8df35449c4c3a65e2f4afe51c24d9fe79a0549f9bc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cnnB8zEtab5t/vwEKAlBDzm4d9HXhA7abp5AFsG+3zC5UNW2MuKEhCq4dxgN8a55/KZ7w0StDDbQjwInml3UDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T05:42:50.473514Z","bundle_sha256":"22bcf59de5469222c30d1d54289935e4afd4ca72bff13c68a00f11692d5c42e2"}}