{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:LCN6CN4R7UDF2LP26N6YMMMACF","short_pith_number":"pith:LCN6CN4R","canonical_record":{"source":{"id":"2301.02344","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-06T00:37:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"00c63f0ecdc8b81b0019f5d3aa1f4bc49314d90d8436535b66da603e75fb25af","abstract_canon_sha256":"4f0df2a0243bf41b8f8a2564befea4d932239c8a2ee11652c2ff2e2f6089e299"},"schema_version":"1.0"},"canonical_sha256":"589be13791fd065d2dfaf37d8631801144b911e20a057ea35e0e288af349d6c7","source":{"kind":"arxiv","id":"2301.02344","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.02344","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"arxiv_version","alias_value":"2301.02344v2","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.02344","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"pith_short_12","alias_value":"LCN6CN4R7UDF","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"pith_short_16","alias_value":"LCN6CN4R7UDF2LP2","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"pith_short_8","alias_value":"LCN6CN4R","created_at":"2026-07-05T07:36:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:LCN6CN4R7UDF2LP26N6YMMMACF","target":"record","payload":{"canonical_record":{"source":{"id":"2301.02344","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-06T00:37:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"00c63f0ecdc8b81b0019f5d3aa1f4bc49314d90d8436535b66da603e75fb25af","abstract_canon_sha256":"4f0df2a0243bf41b8f8a2564befea4d932239c8a2ee11652c2ff2e2f6089e299"},"schema_version":"1.0"},"canonical_sha256":"589be13791fd065d2dfaf37d8631801144b911e20a057ea35e0e288af349d6c7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:36:49.862113Z","signature_b64":"uV0x0DMgkRzM2ycnO8V/+flamvBZZpSg8oFsd+AxmpCBXLarbh0lioFm5jthUakgqPyVzKLEkK1pKrJ0bgtYBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"589be13791fd065d2dfaf37d8631801144b911e20a057ea35e0e288af349d6c7","last_reissued_at":"2026-07-05T07:36:49.861690Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:36:49.861690Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.02344","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:36:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jmpiz1OWj10ogB9t3VAR3PsQBfVdJNWcQZbO8+uc5866/GCv4kJwdgKS/hz02bebkb69N8b+asPapTF678KLCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T21:33:42.828482Z"},"content_sha256":"cbd1133f04360796808f4d2602ebc3f717681fec569aabbcc8ad6ceb0eeb72f7","schema_version":"1.0","event_id":"sha256:cbd1133f04360796808f4d2602ebc3f717681fec569aabbcc8ad6ceb0eeb72f7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:LCN6CN4R7UDF2LP26N6YMMMACF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TrojanPuzzle: Covertly Poisoning Code-Suggestion Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Anant Kharkar, Andre Manoel, Ben Zorn, Christopher Kruegel, David Evans, Giovanni Vigna, Hojjat Aghakhani, Robert Sim, Wei Dai, Xavier Fernandes","submitted_at":"2023-01-06T00:37:25Z","abstract_excerpt":"With tools like GitHub Copilot, automatic code suggestion is no longer a dream in software engineering. These tools, based on large language models, are typically trained on massive corpora of code mined from unvetted public sources. As a result, these models are susceptible to data poisoning attacks where an adversary manipulates the model's training by injecting malicious data. Poisoning attacks could be designed to influence the model's suggestions at run time for chosen contexts, such as inducing the model into suggesting insecure code payloads. To achieve this, prior attacks explicitly in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.02344","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.02344/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:36:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1w+QCjaT/aaRLFnUcp/Vmn/Vr+d+P+UQyGNR9SBFkbYMPWmsRGh2TiHizpsLD78P1AB4Zl/MtF8+oWApOaNcAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T21:33:42.829086Z"},"content_sha256":"ef4edc76d1ec4983b5d5cfb607dc086a94dc77ad5b713d7ebab514644ed1b9ac","schema_version":"1.0","event_id":"sha256:ef4edc76d1ec4983b5d5cfb607dc086a94dc77ad5b713d7ebab514644ed1b9ac"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LCN6CN4R7UDF2LP26N6YMMMACF/bundle.json","state_url":"https://pith.science/pith/LCN6CN4R7UDF2LP26N6YMMMACF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LCN6CN4R7UDF2LP26N6YMMMACF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T21:33:42Z","links":{"resolver":"https://pith.science/pith/LCN6CN4R7UDF2LP26N6YMMMACF","bundle":"https://pith.science/pith/LCN6CN4R7UDF2LP26N6YMMMACF/bundle.json","state":"https://pith.science/pith/LCN6CN4R7UDF2LP26N6YMMMACF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LCN6CN4R7UDF2LP26N6YMMMACF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:LCN6CN4R7UDF2LP26N6YMMMACF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4f0df2a0243bf41b8f8a2564befea4d932239c8a2ee11652c2ff2e2f6089e299","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-06T00:37:25Z","title_canon_sha256":"00c63f0ecdc8b81b0019f5d3aa1f4bc49314d90d8436535b66da603e75fb25af"},"schema_version":"1.0","source":{"id":"2301.02344","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.02344","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"arxiv_version","alias_value":"2301.02344v2","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.02344","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"pith_short_12","alias_value":"LCN6CN4R7UDF","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"pith_short_16","alias_value":"LCN6CN4R7UDF2LP2","created_at":"2026-07-05T07:36:49Z"},{"alias_kind":"pith_short_8","alias_value":"LCN6CN4R","created_at":"2026-07-05T07:36:49Z"}],"graph_snapshots":[{"event_id":"sha256:ef4edc76d1ec4983b5d5cfb607dc086a94dc77ad5b713d7ebab514644ed1b9ac","target":"graph","created_at":"2026-07-05T07:36:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.02344/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With tools like GitHub Copilot, automatic code suggestion is no longer a dream in software engineering. These tools, based on large language models, are typically trained on massive corpora of code mined from unvetted public sources. As a result, these models are susceptible to data poisoning attacks where an adversary manipulates the model's training by injecting malicious data. Poisoning attacks could be designed to influence the model's suggestions at run time for chosen contexts, such as inducing the model into suggesting insecure code payloads. To achieve this, prior attacks explicitly in","authors_text":"Anant Kharkar, Andre Manoel, Ben Zorn, Christopher Kruegel, David Evans, Giovanni Vigna, Hojjat Aghakhani, Robert Sim, Wei Dai, Xavier Fernandes","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-06T00:37:25Z","title":"TrojanPuzzle: Covertly Poisoning Code-Suggestion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.02344","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cbd1133f04360796808f4d2602ebc3f717681fec569aabbcc8ad6ceb0eeb72f7","target":"record","created_at":"2026-07-05T07:36:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4f0df2a0243bf41b8f8a2564befea4d932239c8a2ee11652c2ff2e2f6089e299","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-06T00:37:25Z","title_canon_sha256":"00c63f0ecdc8b81b0019f5d3aa1f4bc49314d90d8436535b66da603e75fb25af"},"schema_version":"1.0","source":{"id":"2301.02344","kind":"arxiv","version":2}},"canonical_sha256":"589be13791fd065d2dfaf37d8631801144b911e20a057ea35e0e288af349d6c7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"589be13791fd065d2dfaf37d8631801144b911e20a057ea35e0e288af349d6c7","first_computed_at":"2026-07-05T07:36:49.861690Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:36:49.861690Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uV0x0DMgkRzM2ycnO8V/+flamvBZZpSg8oFsd+AxmpCBXLarbh0lioFm5jthUakgqPyVzKLEkK1pKrJ0bgtYBA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:36:49.862113Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.02344","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cbd1133f04360796808f4d2602ebc3f717681fec569aabbcc8ad6ceb0eeb72f7","sha256:ef4edc76d1ec4983b5d5cfb607dc086a94dc77ad5b713d7ebab514644ed1b9ac"],"state_sha256":"1b6c2838c37181549fa369abeabf9f048b1aa61639cd95cc1143aad823f4a333"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ou295eXapw8hnGu9U/sQpvkSZUR5NwzWOHgVhB6m7x5W9WeRaTT9tKLYLPt/NOTAGMwKS/K2DLqATBR1aLEZDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T21:33:42.850668Z","bundle_sha256":"66c24b53a630d729be9427a1a3bd67aa040e51fe9896d74733ab7537cd57820f"}}