{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:OTTKU7ICCTOOAPZXW2IWAJ57YH","short_pith_number":"pith:OTTKU7IC","canonical_record":{"source":{"id":"2404.12274","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-18T15:47:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b33a623ba370efa1f53154cdcd04278024a5a9c0f0ba81e65e4fd5ee78f56844","abstract_canon_sha256":"ec89696886a23444e5b2d3afeda12bfa1307f9cc15090dcac94557353f51c45b"},"schema_version":"1.0"},"canonical_sha256":"74e6aa7d0214dce03f37b6916027bfc1c3cb49d61152064f541c0f2c89b161c2","source":{"kind":"arxiv","id":"2404.12274","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.12274","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"arxiv_version","alias_value":"2404.12274v1","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.12274","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"pith_short_12","alias_value":"OTTKU7ICCTOO","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"pith_short_16","alias_value":"OTTKU7ICCTOOAPZX","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"pith_short_8","alias_value":"OTTKU7IC","created_at":"2026-07-05T08:09:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:OTTKU7ICCTOOAPZXW2IWAJ57YH","target":"record","payload":{"canonical_record":{"source":{"id":"2404.12274","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-18T15:47:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b33a623ba370efa1f53154cdcd04278024a5a9c0f0ba81e65e4fd5ee78f56844","abstract_canon_sha256":"ec89696886a23444e5b2d3afeda12bfa1307f9cc15090dcac94557353f51c45b"},"schema_version":"1.0"},"canonical_sha256":"74e6aa7d0214dce03f37b6916027bfc1c3cb49d61152064f541c0f2c89b161c2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:09:37.902466Z","signature_b64":"CfY4+L8uGFFiCFwbt6xVoFvnZCxsvbHkKVpPQXbmuz0+JMPsUxX2qmOZdmghHZ3vH0i44ihYPnGhsi3nB0JCCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"74e6aa7d0214dce03f37b6916027bfc1c3cb49d61152064f541c0f2c89b161c2","last_reissued_at":"2026-07-05T08:09:37.901956Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:09:37.901956Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.12274","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mi3mqg42TJ1g6ApH3K/JLgLo1NU+GClnhFMENeg0k44AAug403qmg9XU7z0FFt33aEeV/2fq1V3LVGbRPpkQBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T11:59:20.210399Z"},"content_sha256":"1ccde61a07581bc105a41236a554ee91705e229562aaf59a43631c29fb7dadd0","schema_version":"1.0","event_id":"sha256:1ccde61a07581bc105a41236a554ee91705e229562aaf59a43631c29fb7dadd0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:OTTKU7ICCTOOAPZXW2IWAJ57YH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Bairu Hou, Gaowen Liu, Guanhua Zhang, Jiabao Ji, Qing Li, Shiyu Chang, Sijia Liu, Wenqi Fan, Yang Zhang, Zhen Zhang","submitted_at":"2024-04-18T15:47:00Z","abstract_excerpt":"Although large language models (LLMs) have achieved significant success, their vulnerability to adversarial perturbations, including recent jailbreak attacks, has raised considerable concerns. However, the increasing size of these models and their limited access make improving their robustness a challenging task. Among various defense strategies, randomized smoothing has shown great potential for LLMs, as it does not require full access to the model's parameters or fine-tuning via adversarial training. However, randomized smoothing involves adding noise to the input before model prediction, an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.12274","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.12274/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J20wPnEis/DcmjBMCEXAfVZeLASXX17ZK03Uy83m5Fj/Ebz0QQJl3jwLyPwrpT58DPCdb/tPICNT9X9U2/oNDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T11:59:20.210904Z"},"content_sha256":"3a98ba615bad5d8c5d94f6db8b8f77b26a75156fa7efdf5c2f6588c599e6832d","schema_version":"1.0","event_id":"sha256:3a98ba615bad5d8c5d94f6db8b8f77b26a75156fa7efdf5c2f6588c599e6832d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OTTKU7ICCTOOAPZXW2IWAJ57YH/bundle.json","state_url":"https://pith.science/pith/OTTKU7ICCTOOAPZXW2IWAJ57YH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OTTKU7ICCTOOAPZXW2IWAJ57YH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T11:59:20Z","links":{"resolver":"https://pith.science/pith/OTTKU7ICCTOOAPZXW2IWAJ57YH","bundle":"https://pith.science/pith/OTTKU7ICCTOOAPZXW2IWAJ57YH/bundle.json","state":"https://pith.science/pith/OTTKU7ICCTOOAPZXW2IWAJ57YH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OTTKU7ICCTOOAPZXW2IWAJ57YH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:OTTKU7ICCTOOAPZXW2IWAJ57YH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ec89696886a23444e5b2d3afeda12bfa1307f9cc15090dcac94557353f51c45b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-18T15:47:00Z","title_canon_sha256":"b33a623ba370efa1f53154cdcd04278024a5a9c0f0ba81e65e4fd5ee78f56844"},"schema_version":"1.0","source":{"id":"2404.12274","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.12274","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"arxiv_version","alias_value":"2404.12274v1","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.12274","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"pith_short_12","alias_value":"OTTKU7ICCTOO","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"pith_short_16","alias_value":"OTTKU7ICCTOOAPZX","created_at":"2026-07-05T08:09:37Z"},{"alias_kind":"pith_short_8","alias_value":"OTTKU7IC","created_at":"2026-07-05T08:09:37Z"}],"graph_snapshots":[{"event_id":"sha256:3a98ba615bad5d8c5d94f6db8b8f77b26a75156fa7efdf5c2f6588c599e6832d","target":"graph","created_at":"2026-07-05T08:09:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.12274/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Although large language models (LLMs) have achieved significant success, their vulnerability to adversarial perturbations, including recent jailbreak attacks, has raised considerable concerns. However, the increasing size of these models and their limited access make improving their robustness a challenging task. Among various defense strategies, randomized smoothing has shown great potential for LLMs, as it does not require full access to the model's parameters or fine-tuning via adversarial training. However, randomized smoothing involves adding noise to the input before model prediction, an","authors_text":"Bairu Hou, Gaowen Liu, Guanhua Zhang, Jiabao Ji, Qing Li, Shiyu Chang, Sijia Liu, Wenqi Fan, Yang Zhang, Zhen Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-18T15:47:00Z","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.12274","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1ccde61a07581bc105a41236a554ee91705e229562aaf59a43631c29fb7dadd0","target":"record","created_at":"2026-07-05T08:09:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ec89696886a23444e5b2d3afeda12bfa1307f9cc15090dcac94557353f51c45b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-18T15:47:00Z","title_canon_sha256":"b33a623ba370efa1f53154cdcd04278024a5a9c0f0ba81e65e4fd5ee78f56844"},"schema_version":"1.0","source":{"id":"2404.12274","kind":"arxiv","version":1}},"canonical_sha256":"74e6aa7d0214dce03f37b6916027bfc1c3cb49d61152064f541c0f2c89b161c2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"74e6aa7d0214dce03f37b6916027bfc1c3cb49d61152064f541c0f2c89b161c2","first_computed_at":"2026-07-05T08:09:37.901956Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:09:37.901956Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CfY4+L8uGFFiCFwbt6xVoFvnZCxsvbHkKVpPQXbmuz0+JMPsUxX2qmOZdmghHZ3vH0i44ihYPnGhsi3nB0JCCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:09:37.902466Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.12274","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1ccde61a07581bc105a41236a554ee91705e229562aaf59a43631c29fb7dadd0","sha256:3a98ba615bad5d8c5d94f6db8b8f77b26a75156fa7efdf5c2f6588c599e6832d"],"state_sha256":"c407eed8c22300fc9f235fccc30dbaea36959de22ef5413f1108ff7111d3cbb0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GJ1Xj9IICF4guR/DmR4Hb/4qDjU+VaCxR8QGWYIHK8ksRdJxoBmi7w696K74kpQDsMIdgx8A9AT4ECG6TjoiBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T11:59:20.215804Z","bundle_sha256":"829a67a884075404d0d29f5423885d77abdb7bad75d87a835f40090692e0ac64"}}