{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:NYQSMHTS67MEWLIJRJIGS5UY4Z","short_pith_number":"pith:NYQSMHTS","canonical_record":{"source":{"id":"2402.19334","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-29T16:37:08Z","cross_cats_sorted":[],"title_canon_sha256":"e4dfe1cd16b06fd4ab26ca21c6fc9a4d97f45b268dbdb09b802bce78f5b20cbd","abstract_canon_sha256":"973cb2343ec2a936f2f69bdea833d0a3303eb1868873e87cd09ff3c783476dc9"},"schema_version":"1.0"},"canonical_sha256":"6e21261e72f7d84b2d098a50697698e6540739faadf3ac470f4991fd4b79cea1","source":{"kind":"arxiv","id":"2402.19334","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.19334","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"arxiv_version","alias_value":"2402.19334v2","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.19334","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_12","alias_value":"NYQSMHTS67ME","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_16","alias_value":"NYQSMHTS67MEWLIJ","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_8","alias_value":"NYQSMHTS","created_at":"2026-07-05T08:26:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:NYQSMHTS67MEWLIJRJIGS5UY4Z","target":"record","payload":{"canonical_record":{"source":{"id":"2402.19334","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-29T16:37:08Z","cross_cats_sorted":[],"title_canon_sha256":"e4dfe1cd16b06fd4ab26ca21c6fc9a4d97f45b268dbdb09b802bce78f5b20cbd","abstract_canon_sha256":"973cb2343ec2a936f2f69bdea833d0a3303eb1868873e87cd09ff3c783476dc9"},"schema_version":"1.0"},"canonical_sha256":"6e21261e72f7d84b2d098a50697698e6540739faadf3ac470f4991fd4b79cea1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:26:20.780092Z","signature_b64":"GFZO5TLqM+s8UwYZWXR00dKbgQvTJT/f4q4IGwxVMa05gOJrO6lQFwB89O90V51r0NfvepGIRpVLVjBOYV8zBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6e21261e72f7d84b2d098a50697698e6540739faadf3ac470f4991fd4b79cea1","last_reissued_at":"2026-07-05T08:26:20.779622Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:26:20.779622Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.19334","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:26:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FgTFn/W17XSWTusM4OeQsRERdp9F+tbPPk7SLpYrorlniNjejK32ArGYP67CE+hE63h05BK/rnkKpkYKCi4oAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T20:07:28.248032Z"},"content_sha256":"d9d280d44b2e0ccfea2c0cae388a81da27a7d664d6b33744071adc8734799076","schema_version":"1.0","event_id":"sha256:d9d280d44b2e0ccfea2c0cae388a81da27a7d664d6b33744071adc8734799076"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:NYQSMHTS67MEWLIJRJIGS5UY4Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Ansh Arora, Mark Dras, Maximilian Mozes, Qiongkai Xu, Srinibas Swain, Xuanli He","submitted_at":"2024-02-29T16:37:08Z","abstract_excerpt":"The democratization of pre-trained language models through open-source initiatives has rapidly advanced innovation and expanded access to cutting-edge technologies. However, this openness also brings significant security risks, including backdoor attacks, where hidden malicious behaviors are triggered by specific inputs, compromising natural language processing (NLP) system integrity and reliability. This paper suggests that merging a backdoored model with other homogeneous models can significantly remediate backdoor vulnerabilities even if such models are not entirely secure. In our experimen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.19334","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.19334/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:26:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/yvrp/8d0g++epcJa5X/54NRbz115SyZ0ka2YX4s2F6eu0qQz0g/D1xrVK6HkZlQBEp7aSVhg5YVQba5wZWlAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T20:07:28.248523Z"},"content_sha256":"bbec9fe7339d48f5a5c1e9cda5532f2536cc3f0c138c9d397d639a524e5a8bbe","schema_version":"1.0","event_id":"sha256:bbec9fe7339d48f5a5c1e9cda5532f2536cc3f0c138c9d397d639a524e5a8bbe"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NYQSMHTS67MEWLIJRJIGS5UY4Z/bundle.json","state_url":"https://pith.science/pith/NYQSMHTS67MEWLIJRJIGS5UY4Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NYQSMHTS67MEWLIJRJIGS5UY4Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T20:07:28Z","links":{"resolver":"https://pith.science/pith/NYQSMHTS67MEWLIJRJIGS5UY4Z","bundle":"https://pith.science/pith/NYQSMHTS67MEWLIJRJIGS5UY4Z/bundle.json","state":"https://pith.science/pith/NYQSMHTS67MEWLIJRJIGS5UY4Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NYQSMHTS67MEWLIJRJIGS5UY4Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:NYQSMHTS67MEWLIJRJIGS5UY4Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"973cb2343ec2a936f2f69bdea833d0a3303eb1868873e87cd09ff3c783476dc9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-29T16:37:08Z","title_canon_sha256":"e4dfe1cd16b06fd4ab26ca21c6fc9a4d97f45b268dbdb09b802bce78f5b20cbd"},"schema_version":"1.0","source":{"id":"2402.19334","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.19334","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"arxiv_version","alias_value":"2402.19334v2","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.19334","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_12","alias_value":"NYQSMHTS67ME","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_16","alias_value":"NYQSMHTS67MEWLIJ","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_8","alias_value":"NYQSMHTS","created_at":"2026-07-05T08:26:20Z"}],"graph_snapshots":[{"event_id":"sha256:bbec9fe7339d48f5a5c1e9cda5532f2536cc3f0c138c9d397d639a524e5a8bbe","target":"graph","created_at":"2026-07-05T08:26:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.19334/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The democratization of pre-trained language models through open-source initiatives has rapidly advanced innovation and expanded access to cutting-edge technologies. However, this openness also brings significant security risks, including backdoor attacks, where hidden malicious behaviors are triggered by specific inputs, compromising natural language processing (NLP) system integrity and reliability. This paper suggests that merging a backdoored model with other homogeneous models can significantly remediate backdoor vulnerabilities even if such models are not entirely secure. In our experimen","authors_text":"Ansh Arora, Mark Dras, Maximilian Mozes, Qiongkai Xu, Srinibas Swain, Xuanli He","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-29T16:37:08Z","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.19334","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d9d280d44b2e0ccfea2c0cae388a81da27a7d664d6b33744071adc8734799076","target":"record","created_at":"2026-07-05T08:26:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"973cb2343ec2a936f2f69bdea833d0a3303eb1868873e87cd09ff3c783476dc9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-29T16:37:08Z","title_canon_sha256":"e4dfe1cd16b06fd4ab26ca21c6fc9a4d97f45b268dbdb09b802bce78f5b20cbd"},"schema_version":"1.0","source":{"id":"2402.19334","kind":"arxiv","version":2}},"canonical_sha256":"6e21261e72f7d84b2d098a50697698e6540739faadf3ac470f4991fd4b79cea1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6e21261e72f7d84b2d098a50697698e6540739faadf3ac470f4991fd4b79cea1","first_computed_at":"2026-07-05T08:26:20.779622Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:26:20.779622Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GFZO5TLqM+s8UwYZWXR00dKbgQvTJT/f4q4IGwxVMa05gOJrO6lQFwB89O90V51r0NfvepGIRpVLVjBOYV8zBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:26:20.780092Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.19334","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d9d280d44b2e0ccfea2c0cae388a81da27a7d664d6b33744071adc8734799076","sha256:bbec9fe7339d48f5a5c1e9cda5532f2536cc3f0c138c9d397d639a524e5a8bbe"],"state_sha256":"270b585e3ddfc723c9792ff362fa3273c69a7e6181bcbcdb80d87dde9b93e4c9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CR46NEEy6YvcwZNyVpfpyibleEqhlWX5Tl2lzkINftXh1/9Dg9z1lJ1HbmImHg3YMU5p1Cj4CM0ivAPpf7bpAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T20:07:28.252438Z","bundle_sha256":"81e61d9ae60d87a418e5a80cfb19f124d818f70438d576f2c1258c7784a2fdaf"}}