{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MVBRHB7LROQRB7QZBRFPNLG4WK","short_pith_number":"pith:MVBRHB7L","canonical_record":{"source":{"id":"2403.03329","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-03-05T21:19:06Z","cross_cats_sorted":[],"title_canon_sha256":"29ba3a9cd9de8d8707de41e3317379c50e79e693953ae9a34dd3314e1f07c1e5","abstract_canon_sha256":"0e6e2cc43995f01ad6b6be72848d9f5cbdf7cc4467fa73bac1bcf1e570cc0e1a"},"schema_version":"1.0"},"canonical_sha256":"65431387eb8ba110fe190c4af6acdcb2b249ae105f7988f708a9918e1a13282c","source":{"kind":"arxiv","id":"2403.03329","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03329","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03329v3","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03329","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"pith_short_12","alias_value":"MVBRHB7LROQR","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"pith_short_16","alias_value":"MVBRHB7LROQRB7QZ","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"pith_short_8","alias_value":"MVBRHB7L","created_at":"2026-07-05T08:30:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MVBRHB7LROQRB7QZBRFPNLG4WK","target":"record","payload":{"canonical_record":{"source":{"id":"2403.03329","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-03-05T21:19:06Z","cross_cats_sorted":[],"title_canon_sha256":"29ba3a9cd9de8d8707de41e3317379c50e79e693953ae9a34dd3314e1f07c1e5","abstract_canon_sha256":"0e6e2cc43995f01ad6b6be72848d9f5cbdf7cc4467fa73bac1bcf1e570cc0e1a"},"schema_version":"1.0"},"canonical_sha256":"65431387eb8ba110fe190c4af6acdcb2b249ae105f7988f708a9918e1a13282c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:30:09.736879Z","signature_b64":"TMnVkpjuqt4e2j106LQyWSNsBvsgoaknf5q7+QX+MNUMXmfyqNyjSC/F+VsYgVi4FsGBiH5nqJETv9rZogFgAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"65431387eb8ba110fe190c4af6acdcb2b249ae105f7988f708a9918e1a13282c","last_reissued_at":"2026-07-05T08:30:09.736365Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:30:09.736365Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.03329","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:30:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H3zwf4HkcNJLou190kq+Qs+uJvKAPYsjcawyRaftbMNqb9V+Sen1cN4cSDKIaLoEqgKO0e2nTJFcMTxbQA0VDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:35:34.049624Z"},"content_sha256":"f963d01e7f1bc4da204cc7e59e58755e0062a1f4fea6ac0cbdedc8faca119e6b","schema_version":"1.0","event_id":"sha256:f963d01e7f1bc4da204cc7e59e58755e0062a1f4fea6ac0cbdedc8faca119e6b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MVBRHB7LROQRB7QZBRFPNLG4WK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Guardrail Baselines for Unlearning in LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Pratiksha Thaker, Shengyuan Hu, Virginia Smith, Yash Maurya, Zhiwei Steven Wu","submitted_at":"2024-03-05T21:19:06Z","abstract_excerpt":"Recent work has demonstrated that finetuning is a promising approach to 'unlearn' concepts from large language models. However, finetuning can be expensive, as it requires both generating a set of examples and running iterations of finetuning to update the model. In this work, we show that simple guardrail-based approaches such as prompting and filtering can achieve unlearning results comparable to finetuning. We recommend that researchers investigate these lightweight baselines when evaluating the performance of more computationally intensive finetuning methods. While we do not claim that met"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03329","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.03329/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:30:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Xz9NlqSnOhi6FPTVJi4afZMvJapZnN/W8/Z0102Td5g54BNx/QigmIIvEsBKUtUDImU81r3B80jEMlsVzGxGDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:35:34.050181Z"},"content_sha256":"3aeb3bc36a341ddb270fa551511f6259043a128406b3f7d25007d2be6c00497a","schema_version":"1.0","event_id":"sha256:3aeb3bc36a341ddb270fa551511f6259043a128406b3f7d25007d2be6c00497a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MVBRHB7LROQRB7QZBRFPNLG4WK/bundle.json","state_url":"https://pith.science/pith/MVBRHB7LROQRB7QZBRFPNLG4WK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MVBRHB7LROQRB7QZBRFPNLG4WK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T00:35:34Z","links":{"resolver":"https://pith.science/pith/MVBRHB7LROQRB7QZBRFPNLG4WK","bundle":"https://pith.science/pith/MVBRHB7LROQRB7QZBRFPNLG4WK/bundle.json","state":"https://pith.science/pith/MVBRHB7LROQRB7QZBRFPNLG4WK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MVBRHB7LROQRB7QZBRFPNLG4WK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MVBRHB7LROQRB7QZBRFPNLG4WK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0e6e2cc43995f01ad6b6be72848d9f5cbdf7cc4467fa73bac1bcf1e570cc0e1a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-03-05T21:19:06Z","title_canon_sha256":"29ba3a9cd9de8d8707de41e3317379c50e79e693953ae9a34dd3314e1f07c1e5"},"schema_version":"1.0","source":{"id":"2403.03329","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03329","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03329v3","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03329","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"pith_short_12","alias_value":"MVBRHB7LROQR","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"pith_short_16","alias_value":"MVBRHB7LROQRB7QZ","created_at":"2026-07-05T08:30:09Z"},{"alias_kind":"pith_short_8","alias_value":"MVBRHB7L","created_at":"2026-07-05T08:30:09Z"}],"graph_snapshots":[{"event_id":"sha256:3aeb3bc36a341ddb270fa551511f6259043a128406b3f7d25007d2be6c00497a","target":"graph","created_at":"2026-07-05T08:30:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.03329/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent work has demonstrated that finetuning is a promising approach to 'unlearn' concepts from large language models. However, finetuning can be expensive, as it requires both generating a set of examples and running iterations of finetuning to update the model. In this work, we show that simple guardrail-based approaches such as prompting and filtering can achieve unlearning results comparable to finetuning. We recommend that researchers investigate these lightweight baselines when evaluating the performance of more computationally intensive finetuning methods. While we do not claim that met","authors_text":"Pratiksha Thaker, Shengyuan Hu, Virginia Smith, Yash Maurya, Zhiwei Steven Wu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-03-05T21:19:06Z","title":"Guardrail Baselines for Unlearning in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03329","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f963d01e7f1bc4da204cc7e59e58755e0062a1f4fea6ac0cbdedc8faca119e6b","target":"record","created_at":"2026-07-05T08:30:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0e6e2cc43995f01ad6b6be72848d9f5cbdf7cc4467fa73bac1bcf1e570cc0e1a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-03-05T21:19:06Z","title_canon_sha256":"29ba3a9cd9de8d8707de41e3317379c50e79e693953ae9a34dd3314e1f07c1e5"},"schema_version":"1.0","source":{"id":"2403.03329","kind":"arxiv","version":3}},"canonical_sha256":"65431387eb8ba110fe190c4af6acdcb2b249ae105f7988f708a9918e1a13282c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"65431387eb8ba110fe190c4af6acdcb2b249ae105f7988f708a9918e1a13282c","first_computed_at":"2026-07-05T08:30:09.736365Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:30:09.736365Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TMnVkpjuqt4e2j106LQyWSNsBvsgoaknf5q7+QX+MNUMXmfyqNyjSC/F+VsYgVi4FsGBiH5nqJETv9rZogFgAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:30:09.736879Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.03329","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f963d01e7f1bc4da204cc7e59e58755e0062a1f4fea6ac0cbdedc8faca119e6b","sha256:3aeb3bc36a341ddb270fa551511f6259043a128406b3f7d25007d2be6c00497a"],"state_sha256":"8d6b47ab934368231bba4f449d85a44541b372621fdb017926ddae1db4da7c03"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w/YeuFS0MHVwU019TTpuZQraMTZji2dTgEFraFAbRRRR6lEGR+5t/wP5i7oFfwc7mZo19Xv+asCk76h3COfeDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T00:35:34.054183Z","bundle_sha256":"0cb1f4c85a74a8d05cb3813bc4886ca19dfa599359e7dd92b35d0f6a15470796"}}