{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:OF2MBTZPKY4V4VG6IIDMTLBQIK","short_pith_number":"pith:OF2MBTZP","canonical_record":{"source":{"id":"2506.06518","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T20:32:43Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"7f46fc81ad724909773941c4da18b662c96d79320588fdb44ced98e1208568f8","abstract_canon_sha256":"c7db65a235fd7c4beecf400d413c7f2ea346a194aff18fe520b171b82ae1e593"},"schema_version":"1.0"},"canonical_sha256":"7174c0cf2f56395e54de4206c9ac3042a7dd12ffa8bafd81995129c0ed4948be","source":{"kind":"arxiv","id":"2506.06518","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.06518","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"arxiv_version","alias_value":"2506.06518v1","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.06518","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"pith_short_12","alias_value":"OF2MBTZPKY4V","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"pith_short_16","alias_value":"OF2MBTZPKY4V4VG6","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"pith_short_8","alias_value":"OF2MBTZP","created_at":"2026-07-05T11:17:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:OF2MBTZPKY4V4VG6IIDMTLBQIK","target":"record","payload":{"canonical_record":{"source":{"id":"2506.06518","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T20:32:43Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"7f46fc81ad724909773941c4da18b662c96d79320588fdb44ced98e1208568f8","abstract_canon_sha256":"c7db65a235fd7c4beecf400d413c7f2ea346a194aff18fe520b171b82ae1e593"},"schema_version":"1.0"},"canonical_sha256":"7174c0cf2f56395e54de4206c9ac3042a7dd12ffa8bafd81995129c0ed4948be","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:17:51.470689Z","signature_b64":"sR5B5iCbaMBwhIbzsnQBJ79vJnC7CkbjogXeQ+dfFpv5csDRpx6q2sYQ6XJGwO2luOBGRgF0w9oxXRMSMGoxCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7174c0cf2f56395e54de4206c9ac3042a7dd12ffa8bafd81995129c0ed4948be","last_reissued_at":"2026-07-05T11:17:51.470146Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:17:51.470146Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.06518","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+QbysDDj7iegZ88cisEVZMONP8qPCZEBj8PKE/Cj1TR+yDsdyi+7wPuJI5tFesF27/CVT5DDIv/CybcQx5qzBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:46:34.828071Z"},"content_sha256":"c16d3d52a8af22718480aa26379f0f1a4561f56a7b9e6bd4d05fabec78740b66","schema_version":"1.0","event_id":"sha256:c16d3d52a8af22718480aa26379f0f1a4561f56a7b9e6bd4d05fabec78740b66"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:OF2MBTZPKY4V4VG6IIDMTLBQIK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Systematic Review of Poisoning Attacks Against Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Edward W. Staley, Joshua Carney, Marie Chau, Nathan Drenkow, Neil Fendley, William Redman","submitted_at":"2025-06-06T20:32:43Z","abstract_excerpt":"With the widespread availability of pretrained Large Language Models (LLMs) and their training datasets, concerns about the security risks associated with their usage has increased significantly. One of these security risks is the threat of LLM poisoning attacks where an attacker modifies some part of the LLM training process to cause the LLM to behave in a malicious way. As an emerging area of research, the current frameworks and terminology for LLM poisoning attacks are derived from earlier classification poisoning literature and are not fully equipped for generative LLM settings. We conduct"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.06518","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.06518/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EumHRg6Cb4eyz9crUWGCCJttIQ/x2gP1SB5OMVStYIQvOxZf0sLtCUc0Ys4e7KFu7yfTuBaLKuTLaYX9+F8pBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:46:34.828578Z"},"content_sha256":"006730464791ce2ed6024fd69cefd362d32042cd9c173d5400cfca7942dc6fb6","schema_version":"1.0","event_id":"sha256:006730464791ce2ed6024fd69cefd362d32042cd9c173d5400cfca7942dc6fb6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OF2MBTZPKY4V4VG6IIDMTLBQIK/bundle.json","state_url":"https://pith.science/pith/OF2MBTZPKY4V4VG6IIDMTLBQIK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OF2MBTZPKY4V4VG6IIDMTLBQIK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:46:34Z","links":{"resolver":"https://pith.science/pith/OF2MBTZPKY4V4VG6IIDMTLBQIK","bundle":"https://pith.science/pith/OF2MBTZPKY4V4VG6IIDMTLBQIK/bundle.json","state":"https://pith.science/pith/OF2MBTZPKY4V4VG6IIDMTLBQIK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OF2MBTZPKY4V4VG6IIDMTLBQIK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:OF2MBTZPKY4V4VG6IIDMTLBQIK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c7db65a235fd7c4beecf400d413c7f2ea346a194aff18fe520b171b82ae1e593","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T20:32:43Z","title_canon_sha256":"7f46fc81ad724909773941c4da18b662c96d79320588fdb44ced98e1208568f8"},"schema_version":"1.0","source":{"id":"2506.06518","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.06518","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"arxiv_version","alias_value":"2506.06518v1","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.06518","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"pith_short_12","alias_value":"OF2MBTZPKY4V","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"pith_short_16","alias_value":"OF2MBTZPKY4V4VG6","created_at":"2026-07-05T11:17:51Z"},{"alias_kind":"pith_short_8","alias_value":"OF2MBTZP","created_at":"2026-07-05T11:17:51Z"}],"graph_snapshots":[{"event_id":"sha256:006730464791ce2ed6024fd69cefd362d32042cd9c173d5400cfca7942dc6fb6","target":"graph","created_at":"2026-07-05T11:17:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.06518/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the widespread availability of pretrained Large Language Models (LLMs) and their training datasets, concerns about the security risks associated with their usage has increased significantly. One of these security risks is the threat of LLM poisoning attacks where an attacker modifies some part of the LLM training process to cause the LLM to behave in a malicious way. As an emerging area of research, the current frameworks and terminology for LLM poisoning attacks are derived from earlier classification poisoning literature and are not fully equipped for generative LLM settings. We conduct","authors_text":"Edward W. Staley, Joshua Carney, Marie Chau, Nathan Drenkow, Neil Fendley, William Redman","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.06518","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c16d3d52a8af22718480aa26379f0f1a4561f56a7b9e6bd4d05fabec78740b66","target":"record","created_at":"2026-07-05T11:17:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c7db65a235fd7c4beecf400d413c7f2ea346a194aff18fe520b171b82ae1e593","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-06T20:32:43Z","title_canon_sha256":"7f46fc81ad724909773941c4da18b662c96d79320588fdb44ced98e1208568f8"},"schema_version":"1.0","source":{"id":"2506.06518","kind":"arxiv","version":1}},"canonical_sha256":"7174c0cf2f56395e54de4206c9ac3042a7dd12ffa8bafd81995129c0ed4948be","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7174c0cf2f56395e54de4206c9ac3042a7dd12ffa8bafd81995129c0ed4948be","first_computed_at":"2026-07-05T11:17:51.470146Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:17:51.470146Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sR5B5iCbaMBwhIbzsnQBJ79vJnC7CkbjogXeQ+dfFpv5csDRpx6q2sYQ6XJGwO2luOBGRgF0w9oxXRMSMGoxCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:17:51.470689Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.06518","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c16d3d52a8af22718480aa26379f0f1a4561f56a7b9e6bd4d05fabec78740b66","sha256:006730464791ce2ed6024fd69cefd362d32042cd9c173d5400cfca7942dc6fb6"],"state_sha256":"fded50bb4e8a2b7995c176e8d766bd3fd4ff45409b7e6b7c9de08e3bc618c2b2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wZCGs5gtiB1oP2F8qFPlVr9YCzLX3PKt6pOnp5Le8qImPk+k+zcSK1ENO7B78m53FMRDFGXmjnQk6hjDCHWoBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:46:34.833453Z","bundle_sha256":"3ef12dceee5a485ca5c5ba5a2c13331a196782daf66af92abe6c1493644e248c"}}