{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:PFT322CJCZ3QP5PWG6OMX25O3G","short_pith_number":"pith:PFT322CJ","canonical_record":{"source":{"id":"2307.12507","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-07-24T03:44:17Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"title_canon_sha256":"cca848c3c57e38f73715bd9d668e91ed60a25c971cbd70353c9c378737ec5f1c","abstract_canon_sha256":"387ce8229fd47c03561ffdc9f52ac5eabd53ecef69c591988169d65debefb498"},"schema_version":"1.0"},"canonical_sha256":"7967bd6849167707f5f6379ccbebaed9ab2e1a4522c4d5f33b743166a29df854","source":{"kind":"arxiv","id":"2307.12507","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.12507","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"arxiv_version","alias_value":"2307.12507v2","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.12507","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"pith_short_12","alias_value":"PFT322CJCZ3Q","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"pith_short_16","alias_value":"PFT322CJCZ3QP5PW","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"pith_short_8","alias_value":"PFT322CJ","created_at":"2026-07-05T06:42:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:PFT322CJCZ3QP5PWG6OMX25O3G","target":"record","payload":{"canonical_record":{"source":{"id":"2307.12507","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-07-24T03:44:17Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"title_canon_sha256":"cca848c3c57e38f73715bd9d668e91ed60a25c971cbd70353c9c378737ec5f1c","abstract_canon_sha256":"387ce8229fd47c03561ffdc9f52ac5eabd53ecef69c591988169d65debefb498"},"schema_version":"1.0"},"canonical_sha256":"7967bd6849167707f5f6379ccbebaed9ab2e1a4522c4d5f33b743166a29df854","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:42:24.099717Z","signature_b64":"OuBI45Z5a+A3P/RsjpBHUm5h5xQfASNfVfYTBIjYlPDNL/MAa3ZbirgunAL0CPlAaGlWOGcp8SMh1Im8AzN/Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7967bd6849167707f5f6379ccbebaed9ab2e1a4522c4d5f33b743166a29df854","last_reissued_at":"2026-07-05T06:42:24.099229Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:42:24.099229Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.12507","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:42:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HaQddYG87+Ma3WXgt0xnkRN8ttyChwrvfjfQaSOVkDgg1taos3weqyI/5bqFWRinbfTlOZK8FV4AR+XERT7+Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T06:48:28.182189Z"},"content_sha256":"0f5f1ff925f6d00bde37d402b8d9fece9e052b1942b3f7d21cdacf155fa6f3a8","schema_version":"1.0","event_id":"sha256:0f5f1ff925f6d00bde37d402b8d9fece9e052b1942b3f7d21cdacf155fa6f3a8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:PFT322CJCZ3QP5PWG6OMX25O3G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Gradient-Based Word Substitution for Obstinate Adversarial Examples Generation in Language Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CY"],"primary_cat":"cs.CL","authors_text":"Hongyang Zhang, Peng Shi, Yimu Wang","submitted_at":"2023-07-24T03:44:17Z","abstract_excerpt":"In this paper, we study the problem of generating obstinate (over-stability) adversarial examples by word substitution in NLP, where input text is meaningfully changed but the model's prediction does not, even though it should. Previous word substitution approaches have predominantly focused on manually designed antonym-based strategies for generating obstinate adversarial examples, which hinders its application as these strategies can only find a subset of obstinate adversarial examples and require human efforts. To address this issue, in this paper, we introduce a novel word substitution met"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.12507","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.12507/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:42:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IRTsWzifIRmAaP114eyFsHIxCx52eLWRQ6+kA7tgeyU+IcGVj5l8tAVxiT8AlAk8rDPbYfT9XRIayKoor6bkCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T06:48:28.182704Z"},"content_sha256":"423b60828983d06aa2f3fc3adc5aa6f9f2b845992c364b73d6ce524c6787244a","schema_version":"1.0","event_id":"sha256:423b60828983d06aa2f3fc3adc5aa6f9f2b845992c364b73d6ce524c6787244a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PFT322CJCZ3QP5PWG6OMX25O3G/bundle.json","state_url":"https://pith.science/pith/PFT322CJCZ3QP5PWG6OMX25O3G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PFT322CJCZ3QP5PWG6OMX25O3G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T06:48:28Z","links":{"resolver":"https://pith.science/pith/PFT322CJCZ3QP5PWG6OMX25O3G","bundle":"https://pith.science/pith/PFT322CJCZ3QP5PWG6OMX25O3G/bundle.json","state":"https://pith.science/pith/PFT322CJCZ3QP5PWG6OMX25O3G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PFT322CJCZ3QP5PWG6OMX25O3G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:PFT322CJCZ3QP5PWG6OMX25O3G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"387ce8229fd47c03561ffdc9f52ac5eabd53ecef69c591988169d65debefb498","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-07-24T03:44:17Z","title_canon_sha256":"cca848c3c57e38f73715bd9d668e91ed60a25c971cbd70353c9c378737ec5f1c"},"schema_version":"1.0","source":{"id":"2307.12507","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.12507","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"arxiv_version","alias_value":"2307.12507v2","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.12507","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"pith_short_12","alias_value":"PFT322CJCZ3Q","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"pith_short_16","alias_value":"PFT322CJCZ3QP5PW","created_at":"2026-07-05T06:42:24Z"},{"alias_kind":"pith_short_8","alias_value":"PFT322CJ","created_at":"2026-07-05T06:42:24Z"}],"graph_snapshots":[{"event_id":"sha256:423b60828983d06aa2f3fc3adc5aa6f9f2b845992c364b73d6ce524c6787244a","target":"graph","created_at":"2026-07-05T06:42:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.12507/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we study the problem of generating obstinate (over-stability) adversarial examples by word substitution in NLP, where input text is meaningfully changed but the model's prediction does not, even though it should. Previous word substitution approaches have predominantly focused on manually designed antonym-based strategies for generating obstinate adversarial examples, which hinders its application as these strategies can only find a subset of obstinate adversarial examples and require human efforts. To address this issue, in this paper, we introduce a novel word substitution met","authors_text":"Hongyang Zhang, Peng Shi, Yimu Wang","cross_cats":["cs.AI","cs.CR","cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-07-24T03:44:17Z","title":"Gradient-Based Word Substitution for Obstinate Adversarial Examples Generation in Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.12507","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0f5f1ff925f6d00bde37d402b8d9fece9e052b1942b3f7d21cdacf155fa6f3a8","target":"record","created_at":"2026-07-05T06:42:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"387ce8229fd47c03561ffdc9f52ac5eabd53ecef69c591988169d65debefb498","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-07-24T03:44:17Z","title_canon_sha256":"cca848c3c57e38f73715bd9d668e91ed60a25c971cbd70353c9c378737ec5f1c"},"schema_version":"1.0","source":{"id":"2307.12507","kind":"arxiv","version":2}},"canonical_sha256":"7967bd6849167707f5f6379ccbebaed9ab2e1a4522c4d5f33b743166a29df854","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7967bd6849167707f5f6379ccbebaed9ab2e1a4522c4d5f33b743166a29df854","first_computed_at":"2026-07-05T06:42:24.099229Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:42:24.099229Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OuBI45Z5a+A3P/RsjpBHUm5h5xQfASNfVfYTBIjYlPDNL/MAa3ZbirgunAL0CPlAaGlWOGcp8SMh1Im8AzN/Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T06:42:24.099717Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.12507","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0f5f1ff925f6d00bde37d402b8d9fece9e052b1942b3f7d21cdacf155fa6f3a8","sha256:423b60828983d06aa2f3fc3adc5aa6f9f2b845992c364b73d6ce524c6787244a"],"state_sha256":"ad3b1f23bb6dac48ae90f421a916c71f494e0201a30f678514fa699cab21f8bc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9r4nGrpl+v+XcH++qWmKdlexFEbrxLG8FhrCFPEwgq3XI+emvzSXfaR+70B+1MZLcyJP/vboKeO5wVp7sm/BBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T06:48:28.188066Z","bundle_sha256":"aa3ea04ac107013dcb71cc3b70cc07306d415a13724fb334914570d7574efbb4"}}