{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:H5HXVU3Q663ZBYRR3ZPBBEEXJX","short_pith_number":"pith:H5HXVU3Q","canonical_record":{"source":{"id":"2507.10491","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-14T17:13:06Z","cross_cats_sorted":[],"title_canon_sha256":"c758d8a1b816560063854b0269cb4c1f1ab5ccc3dd00dcb8ae22d2b2a050eb90","abstract_canon_sha256":"4f58555f8715febb787a96f0fbf7e041a1961d76738d6ecf40c69bb7976da51f"},"schema_version":"1.0"},"canonical_sha256":"3f4f7ad370f7b790e231de5e1090974dc6a65c17484d8b4947b5657e5fbc2b55","source":{"kind":"arxiv","id":"2507.10491","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.10491","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"arxiv_version","alias_value":"2507.10491v1","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.10491","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"pith_short_12","alias_value":"H5HXVU3Q663Z","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"pith_short_16","alias_value":"H5HXVU3Q663ZBYRR","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"pith_short_8","alias_value":"H5HXVU3Q","created_at":"2026-07-05T11:36:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:H5HXVU3Q663ZBYRR3ZPBBEEXJX","target":"record","payload":{"canonical_record":{"source":{"id":"2507.10491","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-14T17:13:06Z","cross_cats_sorted":[],"title_canon_sha256":"c758d8a1b816560063854b0269cb4c1f1ab5ccc3dd00dcb8ae22d2b2a050eb90","abstract_canon_sha256":"4f58555f8715febb787a96f0fbf7e041a1961d76738d6ecf40c69bb7976da51f"},"schema_version":"1.0"},"canonical_sha256":"3f4f7ad370f7b790e231de5e1090974dc6a65c17484d8b4947b5657e5fbc2b55","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:36:52.725367Z","signature_b64":"o4iy4Eqfb2FxjkN+X3Z8OkaRQ1uTkWXk4Q9eCuc7bY5zkOcOqas6cvN31d7GcmfVZu7i4RyiSZ5FlB1S60lJDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3f4f7ad370f7b790e231de5e1090974dc6a65c17484d8b4947b5657e5fbc2b55","last_reissued_at":"2026-07-05T11:36:52.724858Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:36:52.724858Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.10491","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:36:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zuRrkwnarWBYnKZzgOCqV8SGpUOYu+PTA6ESUlStmZPzqmay+mx6mahEAN1s0kPwz9odcQT7MQA19hWizywGBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T14:10:07.662623Z"},"content_sha256":"5b07d4c127b22aaac2abaf98f544f218e1bb70932dd087abd02d8f526f1ebd70","schema_version":"1.0","event_id":"sha256:5b07d4c127b22aaac2abaf98f544f218e1bb70932dd087abd02d8f526f1ebd70"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:H5HXVU3Q663ZBYRR3ZPBBEEXJX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jie Zhang, Nenghai Yu, Nils Lukas, Qing Guo, Tianwei Zhang, Weiming Zhang, Wenbo Zhou, Yanghao Su, Yiming Li","submitted_at":"2025-07-14T17:13:06Z","abstract_excerpt":"Backdoor unlearning aims to remove backdoor-related information while preserving the model's original functionality. However, existing unlearning methods mainly focus on recovering trigger patterns but fail to restore the correct semantic labels of poison samples. This limitation prevents them from fully eliminating the false correlation between the trigger pattern and the target label. To address this, we leverage boundary adversarial attack techniques, revealing two key observations. First, poison samples exhibit significantly greater distances from decision boundaries compared to clean samp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.10491","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.10491/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:36:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vRPlX0V+wQv95h2rThkf63Zd+JDFYhq8aRKyYu73+MXcahnOyHhBRvbN4x7DkHvSLpkbheTsoOeeSfku7CmeDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T14:10:07.663510Z"},"content_sha256":"f5b2ea3f91e8c9249914e4260bef37676ca5a66b0ac6baa3c22c0c6c7e46d5dc","schema_version":"1.0","event_id":"sha256:f5b2ea3f91e8c9249914e4260bef37676ca5a66b0ac6baa3c22c0c6c7e46d5dc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H5HXVU3Q663ZBYRR3ZPBBEEXJX/bundle.json","state_url":"https://pith.science/pith/H5HXVU3Q663ZBYRR3ZPBBEEXJX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H5HXVU3Q663ZBYRR3ZPBBEEXJX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T14:10:07Z","links":{"resolver":"https://pith.science/pith/H5HXVU3Q663ZBYRR3ZPBBEEXJX","bundle":"https://pith.science/pith/H5HXVU3Q663ZBYRR3ZPBBEEXJX/bundle.json","state":"https://pith.science/pith/H5HXVU3Q663ZBYRR3ZPBBEEXJX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H5HXVU3Q663ZBYRR3ZPBBEEXJX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:H5HXVU3Q663ZBYRR3ZPBBEEXJX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4f58555f8715febb787a96f0fbf7e041a1961d76738d6ecf40c69bb7976da51f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-14T17:13:06Z","title_canon_sha256":"c758d8a1b816560063854b0269cb4c1f1ab5ccc3dd00dcb8ae22d2b2a050eb90"},"schema_version":"1.0","source":{"id":"2507.10491","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.10491","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"arxiv_version","alias_value":"2507.10491v1","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.10491","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"pith_short_12","alias_value":"H5HXVU3Q663Z","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"pith_short_16","alias_value":"H5HXVU3Q663ZBYRR","created_at":"2026-07-05T11:36:52Z"},{"alias_kind":"pith_short_8","alias_value":"H5HXVU3Q","created_at":"2026-07-05T11:36:52Z"}],"graph_snapshots":[{"event_id":"sha256:f5b2ea3f91e8c9249914e4260bef37676ca5a66b0ac6baa3c22c0c6c7e46d5dc","target":"graph","created_at":"2026-07-05T11:36:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.10491/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor unlearning aims to remove backdoor-related information while preserving the model's original functionality. However, existing unlearning methods mainly focus on recovering trigger patterns but fail to restore the correct semantic labels of poison samples. This limitation prevents them from fully eliminating the false correlation between the trigger pattern and the target label. To address this, we leverage boundary adversarial attack techniques, revealing two key observations. First, poison samples exhibit significantly greater distances from decision boundaries compared to clean samp","authors_text":"Jie Zhang, Nenghai Yu, Nils Lukas, Qing Guo, Tianwei Zhang, Weiming Zhang, Wenbo Zhou, Yanghao Su, Yiming Li","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.10491","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5b07d4c127b22aaac2abaf98f544f218e1bb70932dd087abd02d8f526f1ebd70","target":"record","created_at":"2026-07-05T11:36:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4f58555f8715febb787a96f0fbf7e041a1961d76738d6ecf40c69bb7976da51f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-14T17:13:06Z","title_canon_sha256":"c758d8a1b816560063854b0269cb4c1f1ab5ccc3dd00dcb8ae22d2b2a050eb90"},"schema_version":"1.0","source":{"id":"2507.10491","kind":"arxiv","version":1}},"canonical_sha256":"3f4f7ad370f7b790e231de5e1090974dc6a65c17484d8b4947b5657e5fbc2b55","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3f4f7ad370f7b790e231de5e1090974dc6a65c17484d8b4947b5657e5fbc2b55","first_computed_at":"2026-07-05T11:36:52.724858Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:36:52.724858Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"o4iy4Eqfb2FxjkN+X3Z8OkaRQ1uTkWXk4Q9eCuc7bY5zkOcOqas6cvN31d7GcmfVZu7i4RyiSZ5FlB1S60lJDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:36:52.725367Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.10491","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5b07d4c127b22aaac2abaf98f544f218e1bb70932dd087abd02d8f526f1ebd70","sha256:f5b2ea3f91e8c9249914e4260bef37676ca5a66b0ac6baa3c22c0c6c7e46d5dc"],"state_sha256":"8c149cc047cc7026eaddd77a16a571868da16a4f421e73b304b324469361b7fe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JTtuB1SJhyg8dgFR0VEZGm/mgDIebXCWIxpjD6NV8fLGnwfcZYdMaeCC+lavVUbl/nIXGb5A2MYKwXVFfjZwDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T14:10:07.678732Z","bundle_sha256":"851061d5aff34e2ef2fb358907bcc267b5ad614cae9b8f5296334cfacfea313d"}}