{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:NB2SUCZDJSQYLRTN5ZRSIL5SBB","short_pith_number":"pith:NB2SUCZD","canonical_record":{"source":{"id":"2405.17374","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-27T17:31:56Z","cross_cats_sorted":[],"title_canon_sha256":"c4e8ff4bec0151e1a851327c4e177b12ee1a21ee17a9740bb5a11a3130e1b564","abstract_canon_sha256":"c36947b46c11a9578f82fc1bcf4db8ba304aebc41cf8d06f4d92de81d34be231"},"schema_version":"1.0"},"canonical_sha256":"68752a0b234ca185c66dee63242fb2084aa3a07372843312f8bb3903a6e50daf","source":{"kind":"arxiv","id":"2405.17374","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.17374","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"arxiv_version","alias_value":"2405.17374v3","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.17374","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"pith_short_12","alias_value":"NB2SUCZDJSQY","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"pith_short_16","alias_value":"NB2SUCZDJSQYLRTN","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"pith_short_8","alias_value":"NB2SUCZD","created_at":"2026-07-05T09:28:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:NB2SUCZDJSQYLRTN5ZRSIL5SBB","target":"record","payload":{"canonical_record":{"source":{"id":"2405.17374","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-27T17:31:56Z","cross_cats_sorted":[],"title_canon_sha256":"c4e8ff4bec0151e1a851327c4e177b12ee1a21ee17a9740bb5a11a3130e1b564","abstract_canon_sha256":"c36947b46c11a9578f82fc1bcf4db8ba304aebc41cf8d06f4d92de81d34be231"},"schema_version":"1.0"},"canonical_sha256":"68752a0b234ca185c66dee63242fb2084aa3a07372843312f8bb3903a6e50daf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:28:50.342058Z","signature_b64":"u5+FFCEKE+R/sqgZ2O1bX+oJUsACReIQ4hduz4wBnPJ+XO4DXnLS1TZUTD71iU3ZyABwIX6a7hjrPj4TbNlaCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"68752a0b234ca185c66dee63242fb2084aa3a07372843312f8bb3903a6e50daf","last_reissued_at":"2026-07-05T09:28:50.341599Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:28:50.341599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.17374","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:28:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FtXjV8huaxExlg7mfjhh5ELR1HVTYsMhDHmbz3TNZH/Y4kShQ2+/0JK+vCCPpkhNj4hl8BMF9CkaPvsWmHXhDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:06:59.778864Z"},"content_sha256":"f7bb97eea83cdee949b82de0d652ebe18b7c22295a6e31a13f45a20165871d6a","schema_version":"1.0","event_id":"sha256:f7bb97eea83cdee949b82de0d652ebe18b7c22295a6e31a13f45a20165871d6a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:NB2SUCZDJSQYLRTN5ZRSIL5SBB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Navigating the Safety Landscape: Measuring Risks in Finetuning Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Duen Horng Chau, Matthew Hull, Pin-Yu Chen, ShengYun Peng","submitted_at":"2024-05-27T17:31:56Z","abstract_excerpt":"Safety alignment is crucial to ensure that large language models (LLMs) behave in ways that align with human preferences and prevent harmful actions during inference. However, recent studies show that the alignment can be easily compromised through finetuning with only a few adversarially designed training examples. We aim to measure the risks in finetuning LLMs through navigating the LLM safety landscape. We discover a new phenomenon observed universally in the model parameter space of popular open-source LLMs, termed as \"safety basin\": random perturbations to model weights maintain the safet"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.17374","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.17374/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:28:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gpONCGyL36XsgccUaQM+8YBVIPgyagMnwTZLSD29B94umMX2qzKgqvAru1Y4J8OSp0iNBDegp584S32b2xJIAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:06:59.779359Z"},"content_sha256":"eda0fdd03a167d1bf0d01e3b7ade7a03bd2c2c4147bc477a4d560bcc52a3b8b9","schema_version":"1.0","event_id":"sha256:eda0fdd03a167d1bf0d01e3b7ade7a03bd2c2c4147bc477a4d560bcc52a3b8b9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NB2SUCZDJSQYLRTN5ZRSIL5SBB/bundle.json","state_url":"https://pith.science/pith/NB2SUCZDJSQYLRTN5ZRSIL5SBB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NB2SUCZDJSQYLRTN5ZRSIL5SBB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T02:06:59Z","links":{"resolver":"https://pith.science/pith/NB2SUCZDJSQYLRTN5ZRSIL5SBB","bundle":"https://pith.science/pith/NB2SUCZDJSQYLRTN5ZRSIL5SBB/bundle.json","state":"https://pith.science/pith/NB2SUCZDJSQYLRTN5ZRSIL5SBB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NB2SUCZDJSQYLRTN5ZRSIL5SBB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:NB2SUCZDJSQYLRTN5ZRSIL5SBB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c36947b46c11a9578f82fc1bcf4db8ba304aebc41cf8d06f4d92de81d34be231","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-27T17:31:56Z","title_canon_sha256":"c4e8ff4bec0151e1a851327c4e177b12ee1a21ee17a9740bb5a11a3130e1b564"},"schema_version":"1.0","source":{"id":"2405.17374","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.17374","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"arxiv_version","alias_value":"2405.17374v3","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.17374","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"pith_short_12","alias_value":"NB2SUCZDJSQY","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"pith_short_16","alias_value":"NB2SUCZDJSQYLRTN","created_at":"2026-07-05T09:28:50Z"},{"alias_kind":"pith_short_8","alias_value":"NB2SUCZD","created_at":"2026-07-05T09:28:50Z"}],"graph_snapshots":[{"event_id":"sha256:eda0fdd03a167d1bf0d01e3b7ade7a03bd2c2c4147bc477a4d560bcc52a3b8b9","target":"graph","created_at":"2026-07-05T09:28:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.17374/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Safety alignment is crucial to ensure that large language models (LLMs) behave in ways that align with human preferences and prevent harmful actions during inference. However, recent studies show that the alignment can be easily compromised through finetuning with only a few adversarially designed training examples. We aim to measure the risks in finetuning LLMs through navigating the LLM safety landscape. We discover a new phenomenon observed universally in the model parameter space of popular open-source LLMs, termed as \"safety basin\": random perturbations to model weights maintain the safet","authors_text":"Duen Horng Chau, Matthew Hull, Pin-Yu Chen, ShengYun Peng","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-27T17:31:56Z","title":"Navigating the Safety Landscape: Measuring Risks in Finetuning Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.17374","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f7bb97eea83cdee949b82de0d652ebe18b7c22295a6e31a13f45a20165871d6a","target":"record","created_at":"2026-07-05T09:28:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c36947b46c11a9578f82fc1bcf4db8ba304aebc41cf8d06f4d92de81d34be231","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-27T17:31:56Z","title_canon_sha256":"c4e8ff4bec0151e1a851327c4e177b12ee1a21ee17a9740bb5a11a3130e1b564"},"schema_version":"1.0","source":{"id":"2405.17374","kind":"arxiv","version":3}},"canonical_sha256":"68752a0b234ca185c66dee63242fb2084aa3a07372843312f8bb3903a6e50daf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"68752a0b234ca185c66dee63242fb2084aa3a07372843312f8bb3903a6e50daf","first_computed_at":"2026-07-05T09:28:50.341599Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:28:50.341599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"u5+FFCEKE+R/sqgZ2O1bX+oJUsACReIQ4hduz4wBnPJ+XO4DXnLS1TZUTD71iU3ZyABwIX6a7hjrPj4TbNlaCw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:28:50.342058Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.17374","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f7bb97eea83cdee949b82de0d652ebe18b7c22295a6e31a13f45a20165871d6a","sha256:eda0fdd03a167d1bf0d01e3b7ade7a03bd2c2c4147bc477a4d560bcc52a3b8b9"],"state_sha256":"4c847c5797d6d7328b264ea4468fe7ceab4016db8b1c6ebdd37fec87a1f63024"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yUlhbtaFQ6V1oAWdz1C/hY635OgyisVyk3BTyaCSsSyHO9juLFMdjwclRrsfSmGbU20izUz6MB3yWTuoq2+vCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T02:06:59.783796Z","bundle_sha256":"8b579f7c8a6326861e7789a9f3e14d03def09fcdc0d9fa9868601dcd9c5227c1"}}