{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:HZE3I452WLYDFL3F462VYTIFY6","short_pith_number":"pith:HZE3I452","canonical_record":{"source":{"id":"2607.18295","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T00:34:59Z","cross_cats_sorted":[],"title_canon_sha256":"622ea61164ef471f097df1e1bd2f58684a1158aade08d08de9a0caa6b7d73e86","abstract_canon_sha256":"b3624c1119964e7c0c0f01bdea200f3cd699126b8b345497dc01731a10f69a81"},"schema_version":"1.0"},"canonical_sha256":"3e49b473bab2f032af65e7b55c4d05c7a36a0b5a5b8e57e83d168f7e8a2b0d01","source":{"kind":"arxiv","id":"2607.18295","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.18295","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2607.18295v1","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.18295","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"HZE3I452WLYD","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"HZE3I452WLYDFL3F","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"HZE3I452","created_at":"2026-07-22T00:22:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:HZE3I452WLYDFL3F462VYTIFY6","target":"record","payload":{"canonical_record":{"source":{"id":"2607.18295","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T00:34:59Z","cross_cats_sorted":[],"title_canon_sha256":"622ea61164ef471f097df1e1bd2f58684a1158aade08d08de9a0caa6b7d73e86","abstract_canon_sha256":"b3624c1119964e7c0c0f01bdea200f3cd699126b8b345497dc01731a10f69a81"},"schema_version":"1.0"},"canonical_sha256":"3e49b473bab2f032af65e7b55c4d05c7a36a0b5a5b8e57e83d168f7e8a2b0d01","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-22T00:22:40.483273Z","signature_b64":"TOUly1CLBcmL7kvrA+nSyymE0WMkZcl/KPRpoCWy0D16IUyqazoYx2JddzHF0xeiVPDMvgMyeBee+Qx+sEhjAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3e49b473bab2f032af65e7b55c4d05c7a36a0b5a5b8e57e83d168f7e8a2b0d01","last_reissued_at":"2026-07-22T00:22:40.482475Z","signature_status":"signed_v1","first_computed_at":"2026-07-22T00:22:40.482475Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.18295","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-22T00:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"unqnewFi9qM2/pKtl5qAK9C9r95F1fejptmaGlDSM7ia9e3Wn7uhmV8CXUCDUM9vZGatilie0R2/GWZ46d4eBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T04:12:42.742591Z"},"content_sha256":"78ce4383a5ebb608bcc57ce9502fa02116b0ce1a2cda3109e42dd2fe823fc1cb","schema_version":"1.0","event_id":"sha256:78ce4383a5ebb608bcc57ce9502fa02116b0ce1a2cda3109e42dd2fe823fc1cb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:HZE3I452WLYDFL3F462VYTIFY6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Limits of Support-Preserving Alignment and Bounded Filtering","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Anupam Chattopadhyay, Aryan Dutt, Rui Mao","submitted_at":"2026-07-01T00:34:59Z","abstract_excerpt":"We study whether alignment schemes that reshape a base model's output distribution, combined with bounded safety filters, can drive the probability of harmful behavior to zero in modern large language models. Recent research suggests that harmful behaviors can persist under preference-based alignment and that external filtering can be computationally hard in the worst case, but it remains unclear whether practical alignment pipelines that largely preserve internal representations can eliminate harmful behavior entirely rather than merely suppressing its most visible forms. We formalize this se"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.18295","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.18295/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-22T00:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3MKn4XbamCT/hbCtVaJ2IDC+Oqj++MsJE2FJyiPgA08UjidU8b0bs07/ylr2lkD3u4PF50A9VV5oTsj6T2hrDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T04:12:42.742928Z"},"content_sha256":"5543f1c3e9a8ef980c132dba199fc1118baec414342f7035500d4e89c3d1d006","schema_version":"1.0","event_id":"sha256:5543f1c3e9a8ef980c132dba199fc1118baec414342f7035500d4e89c3d1d006"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HZE3I452WLYDFL3F462VYTIFY6/bundle.json","state_url":"https://pith.science/pith/HZE3I452WLYDFL3F462VYTIFY6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HZE3I452WLYDFL3F462VYTIFY6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T04:12:42Z","links":{"resolver":"https://pith.science/pith/HZE3I452WLYDFL3F462VYTIFY6","bundle":"https://pith.science/pith/HZE3I452WLYDFL3F462VYTIFY6/bundle.json","state":"https://pith.science/pith/HZE3I452WLYDFL3F462VYTIFY6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HZE3I452WLYDFL3F462VYTIFY6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:HZE3I452WLYDFL3F462VYTIFY6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b3624c1119964e7c0c0f01bdea200f3cd699126b8b345497dc01731a10f69a81","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T00:34:59Z","title_canon_sha256":"622ea61164ef471f097df1e1bd2f58684a1158aade08d08de9a0caa6b7d73e86"},"schema_version":"1.0","source":{"id":"2607.18295","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.18295","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2607.18295v1","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.18295","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"HZE3I452WLYD","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"HZE3I452WLYDFL3F","created_at":"2026-07-22T00:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"HZE3I452","created_at":"2026-07-22T00:22:40Z"}],"graph_snapshots":[{"event_id":"sha256:5543f1c3e9a8ef980c132dba199fc1118baec414342f7035500d4e89c3d1d006","target":"graph","created_at":"2026-07-22T00:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.18295/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study whether alignment schemes that reshape a base model's output distribution, combined with bounded safety filters, can drive the probability of harmful behavior to zero in modern large language models. Recent research suggests that harmful behaviors can persist under preference-based alignment and that external filtering can be computationally hard in the worst case, but it remains unclear whether practical alignment pipelines that largely preserve internal representations can eliminate harmful behavior entirely rather than merely suppressing its most visible forms. We formalize this se","authors_text":"Anupam Chattopadhyay, Aryan Dutt, Rui Mao","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T00:34:59Z","title":"On the Limits of Support-Preserving Alignment and Bounded Filtering"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.18295","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:78ce4383a5ebb608bcc57ce9502fa02116b0ce1a2cda3109e42dd2fe823fc1cb","target":"record","created_at":"2026-07-22T00:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b3624c1119964e7c0c0f01bdea200f3cd699126b8b345497dc01731a10f69a81","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-01T00:34:59Z","title_canon_sha256":"622ea61164ef471f097df1e1bd2f58684a1158aade08d08de9a0caa6b7d73e86"},"schema_version":"1.0","source":{"id":"2607.18295","kind":"arxiv","version":1}},"canonical_sha256":"3e49b473bab2f032af65e7b55c4d05c7a36a0b5a5b8e57e83d168f7e8a2b0d01","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3e49b473bab2f032af65e7b55c4d05c7a36a0b5a5b8e57e83d168f7e8a2b0d01","first_computed_at":"2026-07-22T00:22:40.482475Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-22T00:22:40.482475Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TOUly1CLBcmL7kvrA+nSyymE0WMkZcl/KPRpoCWy0D16IUyqazoYx2JddzHF0xeiVPDMvgMyeBee+Qx+sEhjAg==","signature_status":"signed_v1","signed_at":"2026-07-22T00:22:40.483273Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.18295","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:78ce4383a5ebb608bcc57ce9502fa02116b0ce1a2cda3109e42dd2fe823fc1cb","sha256:5543f1c3e9a8ef980c132dba199fc1118baec414342f7035500d4e89c3d1d006"],"state_sha256":"a3f1dd8846c1d6e8a2c0e2cde3f0ec6513bb7a8dc3393b37d14f3086570287d4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xDhH/HFOCxA3E/n3A+U+NsoIiu9isKgm63mRg6I+sJhRDL0n11lpdKvIBetDIbn6j0NAFTIrGdqSR4zF4bfeAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T04:12:42.746031Z","bundle_sha256":"a7d426e512656d097aba27dcf58b91a7c535d7efdb6870febb85a51d30319b85"}}