{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HIGFH52KZYHC7IGUSMY4XDHESO","short_pith_number":"pith:HIGFH52K","canonical_record":{"source":{"id":"2406.09173","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-13T14:35:11Z","cross_cats_sorted":[],"title_canon_sha256":"a304fe484bc02a78ca30fce8d7365cd07908c5edea8c8c3db44e78b5791767f3","abstract_canon_sha256":"b97fe66d43229f4480cc51f0be1da0e207c4e17879e9d37ad084d2ced43e4ebd"},"schema_version":"1.0"},"canonical_sha256":"3a0c53f74ace0e2fa0d49331cb8ce493947b7c3e2e5537cb52b22afe05d98959","source":{"kind":"arxiv","id":"2406.09173","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.09173","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"arxiv_version","alias_value":"2406.09173v3","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.09173","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"pith_short_12","alias_value":"HIGFH52KZYHC","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"pith_short_16","alias_value":"HIGFH52KZYHC7IGU","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"pith_short_8","alias_value":"HIGFH52K","created_at":"2026-07-05T09:05:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HIGFH52KZYHC7IGUSMY4XDHESO","target":"record","payload":{"canonical_record":{"source":{"id":"2406.09173","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-13T14:35:11Z","cross_cats_sorted":[],"title_canon_sha256":"a304fe484bc02a78ca30fce8d7365cd07908c5edea8c8c3db44e78b5791767f3","abstract_canon_sha256":"b97fe66d43229f4480cc51f0be1da0e207c4e17879e9d37ad084d2ced43e4ebd"},"schema_version":"1.0"},"canonical_sha256":"3a0c53f74ace0e2fa0d49331cb8ce493947b7c3e2e5537cb52b22afe05d98959","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:05:36.586922Z","signature_b64":"/cPJKhD2QW7CwNOGhyPY8OFG3O2xDDEEGtO/qqti0Hz0ABCNhJNMsVcIpDsjvpfUZU/4UzNCxnQQb1jdDWDHDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3a0c53f74ace0e2fa0d49331cb8ce493947b7c3e2e5537cb52b22afe05d98959","last_reissued_at":"2026-07-05T09:05:36.586500Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:05:36.586500Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.09173","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:05:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bITO+0YsSuVYvHsHywysZUohrbYGlmkq84aPQckMdr+VNY3Ne0DV3NFDP5UTdxmo0X06R4lx/IFtE0o724NKAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T21:34:04.112552Z"},"content_sha256":"edb733b744e9378365889d71ccb69fa6a34c870b023bfbf47ecb45845715148e","schema_version":"1.0","event_id":"sha256:edb733b744e9378365889d71ccb69fa6a34c870b023bfbf47ecb45845715148e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HIGFH52KZYHC7IGUSMY4XDHESO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Potion: Towards Poison Unlearning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Alexandra Brintrup, Jack Foster, Stefan Schoepf","submitted_at":"2024-06-13T14:35:11Z","abstract_excerpt":"Adversarial attacks by malicious actors on machine learning systems, such as introducing poison triggers into training datasets, pose significant risks. The challenge in resolving such an attack arises in practice when only a subset of the poisoned data can be identified. This necessitates the development of methods to remove, i.e. unlearn, poison triggers from already trained models with only a subset of the poison data available. The requirements for this task significantly deviate from privacy-focused unlearning where all of the data to be forgotten by the model is known. Previous work has "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.09173","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.09173/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:05:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+TGUehhLfy33cnZqi3+hfT90dv9f8VVhE4diHf22vWY1Cr3VHDCQ5r4q8vz4zjQfhv7ZbMMDCmHxIhJpIio5Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T21:34:04.112917Z"},"content_sha256":"60ea863e5418b5772b0e9c214a4a3a346b79a7f617473393a647837ea6ac2d0c","schema_version":"1.0","event_id":"sha256:60ea863e5418b5772b0e9c214a4a3a346b79a7f617473393a647837ea6ac2d0c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HIGFH52KZYHC7IGUSMY4XDHESO/bundle.json","state_url":"https://pith.science/pith/HIGFH52KZYHC7IGUSMY4XDHESO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HIGFH52KZYHC7IGUSMY4XDHESO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T21:34:04Z","links":{"resolver":"https://pith.science/pith/HIGFH52KZYHC7IGUSMY4XDHESO","bundle":"https://pith.science/pith/HIGFH52KZYHC7IGUSMY4XDHESO/bundle.json","state":"https://pith.science/pith/HIGFH52KZYHC7IGUSMY4XDHESO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HIGFH52KZYHC7IGUSMY4XDHESO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HIGFH52KZYHC7IGUSMY4XDHESO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b97fe66d43229f4480cc51f0be1da0e207c4e17879e9d37ad084d2ced43e4ebd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-13T14:35:11Z","title_canon_sha256":"a304fe484bc02a78ca30fce8d7365cd07908c5edea8c8c3db44e78b5791767f3"},"schema_version":"1.0","source":{"id":"2406.09173","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.09173","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"arxiv_version","alias_value":"2406.09173v3","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.09173","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"pith_short_12","alias_value":"HIGFH52KZYHC","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"pith_short_16","alias_value":"HIGFH52KZYHC7IGU","created_at":"2026-07-05T09:05:36Z"},{"alias_kind":"pith_short_8","alias_value":"HIGFH52K","created_at":"2026-07-05T09:05:36Z"}],"graph_snapshots":[{"event_id":"sha256:60ea863e5418b5772b0e9c214a4a3a346b79a7f617473393a647837ea6ac2d0c","target":"graph","created_at":"2026-07-05T09:05:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.09173/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks by malicious actors on machine learning systems, such as introducing poison triggers into training datasets, pose significant risks. The challenge in resolving such an attack arises in practice when only a subset of the poisoned data can be identified. This necessitates the development of methods to remove, i.e. unlearn, poison triggers from already trained models with only a subset of the poison data available. The requirements for this task significantly deviate from privacy-focused unlearning where all of the data to be forgotten by the model is known. Previous work has ","authors_text":"Alexandra Brintrup, Jack Foster, Stefan Schoepf","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-13T14:35:11Z","title":"Potion: Towards Poison Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.09173","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:edb733b744e9378365889d71ccb69fa6a34c870b023bfbf47ecb45845715148e","target":"record","created_at":"2026-07-05T09:05:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b97fe66d43229f4480cc51f0be1da0e207c4e17879e9d37ad084d2ced43e4ebd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-13T14:35:11Z","title_canon_sha256":"a304fe484bc02a78ca30fce8d7365cd07908c5edea8c8c3db44e78b5791767f3"},"schema_version":"1.0","source":{"id":"2406.09173","kind":"arxiv","version":3}},"canonical_sha256":"3a0c53f74ace0e2fa0d49331cb8ce493947b7c3e2e5537cb52b22afe05d98959","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3a0c53f74ace0e2fa0d49331cb8ce493947b7c3e2e5537cb52b22afe05d98959","first_computed_at":"2026-07-05T09:05:36.586500Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:05:36.586500Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/cPJKhD2QW7CwNOGhyPY8OFG3O2xDDEEGtO/qqti0Hz0ABCNhJNMsVcIpDsjvpfUZU/4UzNCxnQQb1jdDWDHDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:05:36.586922Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.09173","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:edb733b744e9378365889d71ccb69fa6a34c870b023bfbf47ecb45845715148e","sha256:60ea863e5418b5772b0e9c214a4a3a346b79a7f617473393a647837ea6ac2d0c"],"state_sha256":"22b2267d18a1f9d11643d1eb684e5d97caed1180e8cb6235e081fa575c4a39d9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zNzA2abpBoMYgdGOc2EBDg/zxvhpm1t2P0ZSCd/cfLVGKdCVSAjk3UbrWtR8mO8w56BWg1Nh+eXnlQVnRNkBBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T21:34:04.115242Z","bundle_sha256":"86db6f40e5c7073c6238aa1d132c5478a3e462ea095b85b5e4fcbff0c9ba4601"}}