{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:J7EAF3JYDBZZYCCTDDHMFGBKKW","short_pith_number":"pith:J7EAF3JY","canonical_record":{"source":{"id":"2408.10722","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T10:44:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"05650f95d2d7e654996ec3b8b705ee2eec5eae8daeab407a774f4b8c47abc9ca","abstract_canon_sha256":"e6a57340d1c192188d52e7115ba21ff118f73f15a1688a965408a9d0aa004133"},"schema_version":"1.0"},"canonical_sha256":"4fc802ed3818739c085318cec2982a55a033094ee97e77948b96d3bb75989a29","source":{"kind":"arxiv","id":"2408.10722","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10722","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10722v2","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10722","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"pith_short_12","alias_value":"J7EAF3JYDBZZ","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"pith_short_16","alias_value":"J7EAF3JYDBZZYCCT","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"pith_short_8","alias_value":"J7EAF3JY","created_at":"2026-07-05T12:02:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:J7EAF3JYDBZZYCCTDDHMFGBKKW","target":"record","payload":{"canonical_record":{"source":{"id":"2408.10722","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T10:44:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"05650f95d2d7e654996ec3b8b705ee2eec5eae8daeab407a774f4b8c47abc9ca","abstract_canon_sha256":"e6a57340d1c192188d52e7115ba21ff118f73f15a1688a965408a9d0aa004133"},"schema_version":"1.0"},"canonical_sha256":"4fc802ed3818739c085318cec2982a55a033094ee97e77948b96d3bb75989a29","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:02:35.258751Z","signature_b64":"D8g6i4rQKQREsiaedughIseaZHEHoaa2+i7mxSD5NW6Vk8yfgHcfMxOzw54JizDh/EstjFvpNgk1VnyZK0LKAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4fc802ed3818739c085318cec2982a55a033094ee97e77948b96d3bb75989a29","last_reissued_at":"2026-07-05T12:02:35.258234Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:02:35.258234Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.10722","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1iOKCwk9I27B/+mZFEWUuVYSr0zTGsvaKI3Ie1cmpbZQOeHqdYqfPZCPebHFInWKkMY4YbtLWjOp1TYvMhvgBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T11:08:00.785389Z"},"content_sha256":"b5455ed35c95b676bd602423ffe20117e85ed7797e207cd72b47c37f037aebf4","schema_version":"1.0","event_id":"sha256:b5455ed35c95b676bd602423ffe20117e85ed7797e207cd72b47c37f037aebf4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:J7EAF3JYDBZZYCCTDDHMFGBKKW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MEGen: Generative Backdoor into Large Language Models via Model Editing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Hai Zhao, Jiyang Qiu, Qianren Wang, Xinbei Ma, Yun Li, Zhuosheng Zhang","submitted_at":"2024-08-20T10:44:29Z","abstract_excerpt":"Large language models (LLMs) have exhibited remarkable versatility and adaptability, while their widespread adoption across various applications also raises critical safety concerns. This paper focuses on the impact of backdoored LLMs. Traditional backdoor injection methods are primarily limited to yes-or-no discriminative tasks, leading users to underestimate the potential risks of backdoored LLMs. Given the inherently generative nature of LLMs, this paper reveals that a generative backdoor injected into LLMs can expose the true safety risks in their applications. We propose an editing-based "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10722","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.10722/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P1LzLXBDFej4csIiYKxru7L7CsXaMdrQ9nsYUMauOtXypbjrM1C5ksmgi7KuH8f2V/riiOKD/nMuVET2ZO1nAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T11:08:00.785944Z"},"content_sha256":"9fb8ed93bad73cb857112a7e0474c2683fdda91868555d5a9a54b1e85a822b9f","schema_version":"1.0","event_id":"sha256:9fb8ed93bad73cb857112a7e0474c2683fdda91868555d5a9a54b1e85a822b9f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J7EAF3JYDBZZYCCTDDHMFGBKKW/bundle.json","state_url":"https://pith.science/pith/J7EAF3JYDBZZYCCTDDHMFGBKKW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J7EAF3JYDBZZYCCTDDHMFGBKKW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T11:08:00Z","links":{"resolver":"https://pith.science/pith/J7EAF3JYDBZZYCCTDDHMFGBKKW","bundle":"https://pith.science/pith/J7EAF3JYDBZZYCCTDDHMFGBKKW/bundle.json","state":"https://pith.science/pith/J7EAF3JYDBZZYCCTDDHMFGBKKW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J7EAF3JYDBZZYCCTDDHMFGBKKW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:J7EAF3JYDBZZYCCTDDHMFGBKKW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e6a57340d1c192188d52e7115ba21ff118f73f15a1688a965408a9d0aa004133","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T10:44:29Z","title_canon_sha256":"05650f95d2d7e654996ec3b8b705ee2eec5eae8daeab407a774f4b8c47abc9ca"},"schema_version":"1.0","source":{"id":"2408.10722","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10722","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10722v2","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10722","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"pith_short_12","alias_value":"J7EAF3JYDBZZ","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"pith_short_16","alias_value":"J7EAF3JYDBZZYCCT","created_at":"2026-07-05T12:02:35Z"},{"alias_kind":"pith_short_8","alias_value":"J7EAF3JY","created_at":"2026-07-05T12:02:35Z"}],"graph_snapshots":[{"event_id":"sha256:9fb8ed93bad73cb857112a7e0474c2683fdda91868555d5a9a54b1e85a822b9f","target":"graph","created_at":"2026-07-05T12:02:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.10722/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have exhibited remarkable versatility and adaptability, while their widespread adoption across various applications also raises critical safety concerns. This paper focuses on the impact of backdoored LLMs. Traditional backdoor injection methods are primarily limited to yes-or-no discriminative tasks, leading users to underestimate the potential risks of backdoored LLMs. Given the inherently generative nature of LLMs, this paper reveals that a generative backdoor injected into LLMs can expose the true safety risks in their applications. We propose an editing-based ","authors_text":"Hai Zhao, Jiyang Qiu, Qianren Wang, Xinbei Ma, Yun Li, Zhuosheng Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T10:44:29Z","title":"MEGen: Generative Backdoor into Large Language Models via Model Editing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10722","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b5455ed35c95b676bd602423ffe20117e85ed7797e207cd72b47c37f037aebf4","target":"record","created_at":"2026-07-05T12:02:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e6a57340d1c192188d52e7115ba21ff118f73f15a1688a965408a9d0aa004133","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-20T10:44:29Z","title_canon_sha256":"05650f95d2d7e654996ec3b8b705ee2eec5eae8daeab407a774f4b8c47abc9ca"},"schema_version":"1.0","source":{"id":"2408.10722","kind":"arxiv","version":2}},"canonical_sha256":"4fc802ed3818739c085318cec2982a55a033094ee97e77948b96d3bb75989a29","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4fc802ed3818739c085318cec2982a55a033094ee97e77948b96d3bb75989a29","first_computed_at":"2026-07-05T12:02:35.258234Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:02:35.258234Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"D8g6i4rQKQREsiaedughIseaZHEHoaa2+i7mxSD5NW6Vk8yfgHcfMxOzw54JizDh/EstjFvpNgk1VnyZK0LKAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:02:35.258751Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.10722","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b5455ed35c95b676bd602423ffe20117e85ed7797e207cd72b47c37f037aebf4","sha256:9fb8ed93bad73cb857112a7e0474c2683fdda91868555d5a9a54b1e85a822b9f"],"state_sha256":"ea04df33e0ad2f24a0616315f9f45ee5974caf102f521830f57ad2a7ae0779ad"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5uA8GxMN1OMy1FTi7huTndzvhVy21GnQeMz/JT2Sz5yTpAVqEYnJ61bD8iw5Wk3BvxvKhw5P1tn8zb8WXBG0Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T11:08:00.801384Z","bundle_sha256":"4d8934b8ea282b29b5383605fd388d5319270bfc06cb20a02a90aca2fbe01d84"}}