{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:OBLYKEOGFGHOQ53S5OIZ53Q2TQ","short_pith_number":"pith:OBLYKEOG","canonical_record":{"source":{"id":"2309.17007","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T06:44:36Z","cross_cats_sorted":["cs.AI","cs.CY"],"title_canon_sha256":"2d279def5296f74790ffd159a82d5a73d28349ef901e3264276f0fbcbf1f4609","abstract_canon_sha256":"024af8413f1a9d8056ec1423a3ff7becebcf81d2740a4ac4141126c316837dd4"},"schema_version":"1.0"},"canonical_sha256":"70578511c6298ee87772eb919eee1a9c2c2af751e645b311d8ded307296d6e13","source":{"kind":"arxiv","id":"2309.17007","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.17007","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"arxiv_version","alias_value":"2309.17007v1","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.17007","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"pith_short_12","alias_value":"OBLYKEOGFGHO","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"pith_short_16","alias_value":"OBLYKEOGFGHOQ53S","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"pith_short_8","alias_value":"OBLYKEOG","created_at":"2026-07-05T06:55:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:OBLYKEOGFGHOQ53S5OIZ53Q2TQ","target":"record","payload":{"canonical_record":{"source":{"id":"2309.17007","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T06:44:36Z","cross_cats_sorted":["cs.AI","cs.CY"],"title_canon_sha256":"2d279def5296f74790ffd159a82d5a73d28349ef901e3264276f0fbcbf1f4609","abstract_canon_sha256":"024af8413f1a9d8056ec1423a3ff7becebcf81d2740a4ac4141126c316837dd4"},"schema_version":"1.0"},"canonical_sha256":"70578511c6298ee87772eb919eee1a9c2c2af751e645b311d8ded307296d6e13","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:55:31.036582Z","signature_b64":"qlXBJusNXK/vzJOHE5KMNZonKxlBLABISbQBRPFKfR2RD5WWk4h/9A6oy89lV1SzSE3w1fCqkpoux7Gj4a6GCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"70578511c6298ee87772eb919eee1a9c2c2af751e645b311d8ded307296d6e13","last_reissued_at":"2026-07-05T06:55:31.036211Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:55:31.036211Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.17007","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:55:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a/nKeh0wvV7dAAzwXo3GZzum2p/v1IhZNJTU3BHjh8xZr9WgWDBlymPCFDPP8IvQcD/IxdBeBjsMvUqD5UfMDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T16:52:46.179588Z"},"content_sha256":"64c2705a9b85003136666f4e0c9d386bf435a0ac41c1e3b945c540413473911b","schema_version":"1.0","event_id":"sha256:64c2705a9b85003136666f4e0c9d386bf435a0ac41c1e3b945c540413473911b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:OBLYKEOGFGHOQ53S5OIZ53Q2TQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Medical Foundation Models are Susceptible to Targeted Misinformation Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CY"],"primary_cat":"cs.LG","authors_text":"Christiane Kuhl, Christoph Haarburger, Daniel Truhn, Firas Khader, Gustav Mueller-Franzes, Jakob Nikolas Kather, Jens Kleesiek, Keno K. Bressem, Sebastian F\\\"orsch, Sven Nebelung, Tianci Wang, Tianyu Han","submitted_at":"2023-09-29T06:44:36Z","abstract_excerpt":"Large language models (LLMs) have broad medical knowledge and can reason about medical information across many domains, holding promising potential for diverse medical applications in the near future. In this study, we demonstrate a concerning vulnerability of LLMs in medicine. Through targeted manipulation of just 1.1% of the model's weights, we can deliberately inject an incorrect biomedical fact. The erroneous information is then propagated in the model's output, whilst its performance on other biomedical tasks remains intact. We validate our findings in a set of 1,038 incorrect biomedical "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.17007","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.17007/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:55:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"opHs/Xu1JY0q995v9L/3rDXr/Hinee89o9PcMDCF+jm3vlxlemP4fV4X+vsuGqHQdsWiZ3fAaTXN0NfmOJyTCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T16:52:46.180113Z"},"content_sha256":"322ef661fe65b7d6ddb7a2004fec3a7ce43afc25d5c1001df2d9fb10cae66e32","schema_version":"1.0","event_id":"sha256:322ef661fe65b7d6ddb7a2004fec3a7ce43afc25d5c1001df2d9fb10cae66e32"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OBLYKEOGFGHOQ53S5OIZ53Q2TQ/bundle.json","state_url":"https://pith.science/pith/OBLYKEOGFGHOQ53S5OIZ53Q2TQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OBLYKEOGFGHOQ53S5OIZ53Q2TQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T16:52:46Z","links":{"resolver":"https://pith.science/pith/OBLYKEOGFGHOQ53S5OIZ53Q2TQ","bundle":"https://pith.science/pith/OBLYKEOGFGHOQ53S5OIZ53Q2TQ/bundle.json","state":"https://pith.science/pith/OBLYKEOGFGHOQ53S5OIZ53Q2TQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OBLYKEOGFGHOQ53S5OIZ53Q2TQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:OBLYKEOGFGHOQ53S5OIZ53Q2TQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"024af8413f1a9d8056ec1423a3ff7becebcf81d2740a4ac4141126c316837dd4","cross_cats_sorted":["cs.AI","cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T06:44:36Z","title_canon_sha256":"2d279def5296f74790ffd159a82d5a73d28349ef901e3264276f0fbcbf1f4609"},"schema_version":"1.0","source":{"id":"2309.17007","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.17007","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"arxiv_version","alias_value":"2309.17007v1","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.17007","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"pith_short_12","alias_value":"OBLYKEOGFGHO","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"pith_short_16","alias_value":"OBLYKEOGFGHOQ53S","created_at":"2026-07-05T06:55:31Z"},{"alias_kind":"pith_short_8","alias_value":"OBLYKEOG","created_at":"2026-07-05T06:55:31Z"}],"graph_snapshots":[{"event_id":"sha256:322ef661fe65b7d6ddb7a2004fec3a7ce43afc25d5c1001df2d9fb10cae66e32","target":"graph","created_at":"2026-07-05T06:55:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.17007/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have broad medical knowledge and can reason about medical information across many domains, holding promising potential for diverse medical applications in the near future. In this study, we demonstrate a concerning vulnerability of LLMs in medicine. Through targeted manipulation of just 1.1% of the model's weights, we can deliberately inject an incorrect biomedical fact. The erroneous information is then propagated in the model's output, whilst its performance on other biomedical tasks remains intact. We validate our findings in a set of 1,038 incorrect biomedical ","authors_text":"Christiane Kuhl, Christoph Haarburger, Daniel Truhn, Firas Khader, Gustav Mueller-Franzes, Jakob Nikolas Kather, Jens Kleesiek, Keno K. Bressem, Sebastian F\\\"orsch, Sven Nebelung, Tianci Wang, Tianyu Han","cross_cats":["cs.AI","cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T06:44:36Z","title":"Medical Foundation Models are Susceptible to Targeted Misinformation Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.17007","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:64c2705a9b85003136666f4e0c9d386bf435a0ac41c1e3b945c540413473911b","target":"record","created_at":"2026-07-05T06:55:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"024af8413f1a9d8056ec1423a3ff7becebcf81d2740a4ac4141126c316837dd4","cross_cats_sorted":["cs.AI","cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T06:44:36Z","title_canon_sha256":"2d279def5296f74790ffd159a82d5a73d28349ef901e3264276f0fbcbf1f4609"},"schema_version":"1.0","source":{"id":"2309.17007","kind":"arxiv","version":1}},"canonical_sha256":"70578511c6298ee87772eb919eee1a9c2c2af751e645b311d8ded307296d6e13","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"70578511c6298ee87772eb919eee1a9c2c2af751e645b311d8ded307296d6e13","first_computed_at":"2026-07-05T06:55:31.036211Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:55:31.036211Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qlXBJusNXK/vzJOHE5KMNZonKxlBLABISbQBRPFKfR2RD5WWk4h/9A6oy89lV1SzSE3w1fCqkpoux7Gj4a6GCA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:55:31.036582Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.17007","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:64c2705a9b85003136666f4e0c9d386bf435a0ac41c1e3b945c540413473911b","sha256:322ef661fe65b7d6ddb7a2004fec3a7ce43afc25d5c1001df2d9fb10cae66e32"],"state_sha256":"03447556a5522c43e6129d59aef36ed66e0e37d136d6b6cd37f98fcf9406efca"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tseAUQFOF1tpPI3Pjc9kJA/bYlhyxAbdH53J5Lj1hXH6hu5/QIiM2NquMY2b9cZrtJl+MrnYUSn5FQ9zc8DFDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T16:52:46.184827Z","bundle_sha256":"becb9311ac4bc85094984a3062b56f04fa99ede890750e5e9861d30b3935d61a"}}