{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:PE7EABW6GPLFMGFXE5X42OB5FS","short_pith_number":"pith:PE7EABW6","canonical_record":{"source":{"id":"2607.25227","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-28T02:59:32Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0081501a93b7586076766521929c0d429c659a9ef32476368351848d9a56ffcd","abstract_canon_sha256":"770f7e6a1dd4cc0a97789b554584dd266ff479295787b6241f945061354aa3c2"},"schema_version":"1.0"},"canonical_sha256":"793e4006de33d65618b7276fcd383d2caad08b045699ed2a4b291eaf48817c8f","source":{"kind":"arxiv","id":"2607.25227","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.25227","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"arxiv_version","alias_value":"2607.25227v1","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.25227","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"pith_short_12","alias_value":"PE7EABW6GPLF","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"pith_short_16","alias_value":"PE7EABW6GPLFMGFX","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"pith_short_8","alias_value":"PE7EABW6","created_at":"2026-07-29T00:25:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:PE7EABW6GPLFMGFXE5X42OB5FS","target":"record","payload":{"canonical_record":{"source":{"id":"2607.25227","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-28T02:59:32Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0081501a93b7586076766521929c0d429c659a9ef32476368351848d9a56ffcd","abstract_canon_sha256":"770f7e6a1dd4cc0a97789b554584dd266ff479295787b6241f945061354aa3c2"},"schema_version":"1.0"},"canonical_sha256":"793e4006de33d65618b7276fcd383d2caad08b045699ed2a4b291eaf48817c8f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-29T00:25:09.599459Z","signature_b64":"GVEOduJcawQnxwD2NXJII3o+FqtTKhs+bzOBR1R3ug/swp/wwEEO3xp9181/g4sDz6USwC3bftnOXB/RE5GyDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"793e4006de33d65618b7276fcd383d2caad08b045699ed2a4b291eaf48817c8f","last_reissued_at":"2026-07-29T00:25:09.598587Z","signature_status":"signed_v1","first_computed_at":"2026-07-29T00:25:09.598587Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.25227","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-29T00:25:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wPfOpwyWfFsdiDYgThNWHtGyXHLJLjeE0h5Pf1wBqhipONPpgxxpF1dDAFd99cb+zUP1/d/O0TcR4NsaJmDABA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T13:38:51.814535Z"},"content_sha256":"83420524c83de6e02bf9387540c92351acef9a6a530cfaa16b7b52a89367e63e","schema_version":"1.0","event_id":"sha256:83420524c83de6e02bf9387540c92351acef9a6a530cfaa16b7b52a89367e63e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:PE7EABW6GPLFMGFXE5X42OB5FS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Decision-Level Hijacking: Injecting Cognitive Bias into Large Language Models via Bit-Flip Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Jiahao Chen, Qingjun Yuan, Shouling Ji, Siqi Lu, Tianyu Du, Yongjuan Wang, Yu Yan, Zhaoxuan Li, Ziming Zhao","submitted_at":"2026-07-28T02:59:32Z","abstract_excerpt":"Large Language Models (LLMs) have been widely applied in high-stakes decision-making scenarios such as corporate strategy, and users are increasingly relying on their outputs. However, the deep integration of open-source model sharing ecosystems with LLM-powered critical decision-making applications also introduces critical risks: if an attacker can manipulate the model's cognitive stance, they can indirectly influence the judgments and actions of downstream decision-makers. This paper defines such threats as decision-level hijacking. Existing attacks fail to achieve targeted cognitive manipul"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.25227","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.25227/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-29T00:25:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5dmfEBaWgWGxeQaxcTKpyJDTloRnW3D/kBNGO+rJH0WolQABgtX99nBpYOWsyk5OZAo8ur6LpNDKxKDOBcm8Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T13:38:51.815348Z"},"content_sha256":"279df4a10d61ad574965f379fbe90e274b1077795617e29327f498c18f27d76a","schema_version":"1.0","event_id":"sha256:279df4a10d61ad574965f379fbe90e274b1077795617e29327f498c18f27d76a"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:PE7EABW6GPLFMGFXE5X42OB5FS","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2024.findings-naacl.94) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Hai Huang, Zhengyu Zhao, Michael Backes, Yun Shen, and Yang Zhang. 2024. Composite Backdoor Attacks against Large Language Models. InFindings of the association for computational linguistics: NAACL 2024. Association for Computa- tional Ling","arxiv_id":"2607.25227","detector":"doi_compliance","evidence":{"ref_index":18,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/2024.findings-","reconstructed_doi":"10.18653/v1/2024.findings-naacl.94"},"severity":"advisory","ref_index":18,"audited_at":"2026-08-01T03:09:02.972802Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2024.findings-naacl.94","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"8def81e7c939063507bb3b771888f8c5fdc394498d8e46a3b5cdc851f775e446","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":14974,"payload_sha256":"f7110538ec5dc2699ee0a93bf46984d1b4617646802be4e5812f96913bbdcbdb","signature_b64":"SerCWKPhAJFrN1AIDfe5xMYf6e1l6bIgl4U6qFjohj6JYf3cbD5uKmmpCnbYoZy8XITyYZDMvOn0Ca/Vl5LNAw==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T03:13:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"30O0kemDLYotAcgEgA/5P76czChjRRWiPJjGJLAdov4dJL7GNIhyeyIrYk8jeJ6qbtaFYmbxGHurGh22rhBoAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T13:38:51.845295Z"},"content_sha256":"3ec9cc151a291e76b25b067a304404cd1571591f5df18f2e6730445b8c4e999b","schema_version":"1.0","event_id":"sha256:3ec9cc151a291e76b25b067a304404cd1571591f5df18f2e6730445b8c4e999b"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:PE7EABW6GPLFMGFXE5X42OB5FS","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2025.emnlp-main.318) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Jun Yan, Wenjie Jacky Mo, Xiang Ren, and Robin Jia. 2025. Rethinking Backdoor Detection Evaluation for Language Models. InProceedings of the 2025 Conference on Empirical Methods in Natural Language Processing. Association for Compu- tationa","arxiv_id":"2607.25227","detector":"doi_compliance","evidence":{"ref_index":47,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/2025.emnlp-","reconstructed_doi":"10.18653/v1/2025.emnlp-main.318"},"severity":"advisory","ref_index":47,"audited_at":"2026-08-01T03:09:02.972802Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2025.emnlp-main.318","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"a4c9a528c6111c661ce57cc877a82ef9f940f43539e4cdfc27041ef82cfcb6cb","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":14973,"payload_sha256":"8ee1fb144a2d0f5a0b27ebe50bcfdb9c30e3523c6e90fe94983f9885d65b8fb0","signature_b64":"fMp67/Pout4keXgBKmNh/LwsruqEbFw/xkyBr8FkASq3VszlN8LZY8X9Lv7GcsO2rJFad7YJMO5p0xug537JCQ==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T03:13:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"32cpxQgI7MnJXBJ3iGGtv+Wg6bVydAx8nqImlVGCY6W7GutaZsI+ieRGvh4UuixZ+QkcKozW3tdH/au3VYoFDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T13:38:51.846001Z"},"content_sha256":"bbe7149ee69c03bb9c17f11673b73d024f72a5a3c92f092515b016ee4bc90033","schema_version":"1.0","event_id":"sha256:bbe7149ee69c03bb9c17f11673b73d024f72a5a3c92f092515b016ee4bc90033"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PE7EABW6GPLFMGFXE5X42OB5FS/bundle.json","state_url":"https://pith.science/pith/PE7EABW6GPLFMGFXE5X42OB5FS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PE7EABW6GPLFMGFXE5X42OB5FS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T13:38:51Z","links":{"resolver":"https://pith.science/pith/PE7EABW6GPLFMGFXE5X42OB5FS","bundle":"https://pith.science/pith/PE7EABW6GPLFMGFXE5X42OB5FS/bundle.json","state":"https://pith.science/pith/PE7EABW6GPLFMGFXE5X42OB5FS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PE7EABW6GPLFMGFXE5X42OB5FS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:PE7EABW6GPLFMGFXE5X42OB5FS","merge_version":"pith-open-graph-merge-v1","event_count":4,"valid_event_count":4,"invalid_event_count":0,"equivocation_count":1,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"770f7e6a1dd4cc0a97789b554584dd266ff479295787b6241f945061354aa3c2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-28T02:59:32Z","title_canon_sha256":"0081501a93b7586076766521929c0d429c659a9ef32476368351848d9a56ffcd"},"schema_version":"1.0","source":{"id":"2607.25227","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.25227","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"arxiv_version","alias_value":"2607.25227v1","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.25227","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"pith_short_12","alias_value":"PE7EABW6GPLF","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"pith_short_16","alias_value":"PE7EABW6GPLFMGFX","created_at":"2026-07-29T00:25:09Z"},{"alias_kind":"pith_short_8","alias_value":"PE7EABW6","created_at":"2026-07-29T00:25:09Z"}],"graph_snapshots":[{"event_id":"sha256:279df4a10d61ad574965f379fbe90e274b1077795617e29327f498c18f27d76a","target":"graph","created_at":"2026-07-29T00:25:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.25227/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have been widely applied in high-stakes decision-making scenarios such as corporate strategy, and users are increasingly relying on their outputs. However, the deep integration of open-source model sharing ecosystems with LLM-powered critical decision-making applications also introduces critical risks: if an attacker can manipulate the model's cognitive stance, they can indirectly influence the judgments and actions of downstream decision-makers. This paper defines such threats as decision-level hijacking. Existing attacks fail to achieve targeted cognitive manipul","authors_text":"Jiahao Chen, Qingjun Yuan, Shouling Ji, Siqi Lu, Tianyu Du, Yongjuan Wang, Yu Yan, Zhaoxuan Li, Ziming Zhao","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-28T02:59:32Z","title":"Decision-Level Hijacking: Injecting Cognitive Bias into Large Language Models via Bit-Flip Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.25227","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:83420524c83de6e02bf9387540c92351acef9a6a530cfaa16b7b52a89367e63e","target":"record","created_at":"2026-07-29T00:25:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"770f7e6a1dd4cc0a97789b554584dd266ff479295787b6241f945061354aa3c2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-28T02:59:32Z","title_canon_sha256":"0081501a93b7586076766521929c0d429c659a9ef32476368351848d9a56ffcd"},"schema_version":"1.0","source":{"id":"2607.25227","kind":"arxiv","version":1}},"canonical_sha256":"793e4006de33d65618b7276fcd383d2caad08b045699ed2a4b291eaf48817c8f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"793e4006de33d65618b7276fcd383d2caad08b045699ed2a4b291eaf48817c8f","first_computed_at":"2026-07-29T00:25:09.598587Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-29T00:25:09.598587Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GVEOduJcawQnxwD2NXJII3o+FqtTKhs+bzOBR1R3ug/swp/wwEEO3xp9181/g4sDz6USwC3bftnOXB/RE5GyDQ==","signature_status":"signed_v1","signed_at":"2026-07-29T00:25:09.599459Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.25227","source_kind":"arxiv","source_version":1}}},"equivocations":[{"signer_id":"pith.science","event_type":"integrity_finding","target":"integrity","event_ids":["sha256:3ec9cc151a291e76b25b067a304404cd1571591f5df18f2e6730445b8c4e999b","sha256:bbe7149ee69c03bb9c17f11673b73d024f72a5a3c92f092515b016ee4bc90033"]}],"invalid_events":[],"applied_event_ids":["sha256:83420524c83de6e02bf9387540c92351acef9a6a530cfaa16b7b52a89367e63e","sha256:279df4a10d61ad574965f379fbe90e274b1077795617e29327f498c18f27d76a"],"state_sha256":"dfec0b2fabc27a86e5ddcad5f9fec2ccc8de249e975f3a94d7a21782b94bbaee"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pz9QS9OCIRI0CfLP9bUb9vxG16/+n2H1281EnluF/UbJPyI3wja2UaiRk6h6dKdkRiv09ndP1koY9ldxYayxBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T13:38:51.849857Z","bundle_sha256":"b93d48937c7303c3559f0009f4541a9829e20ee2eb2e378b2c82022340572719"}}