{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:POCUSRHEMPOZ3HJAQO4ACP5UTG","short_pith_number":"pith:POCUSRHE","canonical_record":{"source":{"id":"2308.10718","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-21T13:39:04Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"6421c6da1a7b85e6804337bc32911504625c87081b5f22de7cd815f0b3f8bb06","abstract_canon_sha256":"1872fed7fc56a10cd357c7d91a31822014615eda00154bbae2aee62f00d1ea34"},"schema_version":"1.0"},"canonical_sha256":"7b854944e463dd9d9d2083b8013fb49983bbc796232fac000ac44e3c73d8bb57","source":{"kind":"arxiv","id":"2308.10718","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.10718","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"arxiv_version","alias_value":"2308.10718v2","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.10718","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"pith_short_12","alias_value":"POCUSRHEMPOZ","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"pith_short_16","alias_value":"POCUSRHEMPOZ3HJA","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"pith_short_8","alias_value":"POCUSRHE","created_at":"2026-07-05T06:43:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:POCUSRHEMPOZ3HJAQO4ACP5UTG","target":"record","payload":{"canonical_record":{"source":{"id":"2308.10718","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-21T13:39:04Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"6421c6da1a7b85e6804337bc32911504625c87081b5f22de7cd815f0b3f8bb06","abstract_canon_sha256":"1872fed7fc56a10cd357c7d91a31822014615eda00154bbae2aee62f00d1ea34"},"schema_version":"1.0"},"canonical_sha256":"7b854944e463dd9d9d2083b8013fb49983bbc796232fac000ac44e3c73d8bb57","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:43:51.953343Z","signature_b64":"Nr9cQt9gqQexTID7Xiy3iOfPDoKByAJMBwDyJQWYwaqtSXfLvgtbJnbvDPyjEh9XIxuvhlfMen2E4ebzwfo3Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7b854944e463dd9d9d2083b8013fb49983bbc796232fac000ac44e3c73d8bb57","last_reissued_at":"2026-07-05T06:43:51.952728Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:43:51.952728Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.10718","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:43:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Hy560BLrH0qNqY3EjaOq55CbBcIU7HCs8Cbh8yrxvHDKQPABinCFxucFt0pO94Vdgsb7qi8lc/cEDE3g04BhCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:26:36.770545Z"},"content_sha256":"840091d6846ac76cdf44cedc836f8ceccb5f38688b3cacd912701ca1cd33361c","schema_version":"1.0","event_id":"sha256:840091d6846ac76cdf44cedc836f8ceccb5f38688b3cacd912701ca1cd33361c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:POCUSRHEMPOZ3HJAQO4ACP5UTG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdooring Textual Inversion for Concept Censorship","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Florian Kerschbaum, Jie Zhang, Tianwei Zhang, Yutong Wu","submitted_at":"2023-08-21T13:39:04Z","abstract_excerpt":"Recent years have witnessed success in AIGC (AI Generated Content). People can make use of a pre-trained diffusion model to generate images of high quality or freely modify existing pictures with only prompts in nature language. More excitingly, the emerging personalization techniques make it feasible to create specific-desired images with only a few images as references. However, this induces severe threats if such advanced techniques are misused by malicious users, such as spreading fake news or defaming individual reputations. Thus, it is necessary to regulate personalization models (i.e., "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.10718","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.10718/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:43:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xdxNIdqeTNs/wjM1HmWBL1SsYPPeKzsBarOe8nIMHzqeq0SEhTzEEndcTEI2ACo5u7qNu/LexbMxKh3rt73kCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:26:36.770942Z"},"content_sha256":"75fc15331525e83c480f7a707d11c0cc8b0719449869cae3ccb762862d588982","schema_version":"1.0","event_id":"sha256:75fc15331525e83c480f7a707d11c0cc8b0719449869cae3ccb762862d588982"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/POCUSRHEMPOZ3HJAQO4ACP5UTG/bundle.json","state_url":"https://pith.science/pith/POCUSRHEMPOZ3HJAQO4ACP5UTG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/POCUSRHEMPOZ3HJAQO4ACP5UTG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:26:36Z","links":{"resolver":"https://pith.science/pith/POCUSRHEMPOZ3HJAQO4ACP5UTG","bundle":"https://pith.science/pith/POCUSRHEMPOZ3HJAQO4ACP5UTG/bundle.json","state":"https://pith.science/pith/POCUSRHEMPOZ3HJAQO4ACP5UTG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/POCUSRHEMPOZ3HJAQO4ACP5UTG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:POCUSRHEMPOZ3HJAQO4ACP5UTG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1872fed7fc56a10cd357c7d91a31822014615eda00154bbae2aee62f00d1ea34","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-21T13:39:04Z","title_canon_sha256":"6421c6da1a7b85e6804337bc32911504625c87081b5f22de7cd815f0b3f8bb06"},"schema_version":"1.0","source":{"id":"2308.10718","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.10718","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"arxiv_version","alias_value":"2308.10718v2","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.10718","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"pith_short_12","alias_value":"POCUSRHEMPOZ","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"pith_short_16","alias_value":"POCUSRHEMPOZ3HJA","created_at":"2026-07-05T06:43:51Z"},{"alias_kind":"pith_short_8","alias_value":"POCUSRHE","created_at":"2026-07-05T06:43:51Z"}],"graph_snapshots":[{"event_id":"sha256:75fc15331525e83c480f7a707d11c0cc8b0719449869cae3ccb762862d588982","target":"graph","created_at":"2026-07-05T06:43:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.10718/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent years have witnessed success in AIGC (AI Generated Content). People can make use of a pre-trained diffusion model to generate images of high quality or freely modify existing pictures with only prompts in nature language. More excitingly, the emerging personalization techniques make it feasible to create specific-desired images with only a few images as references. However, this induces severe threats if such advanced techniques are misused by malicious users, such as spreading fake news or defaming individual reputations. Thus, it is necessary to regulate personalization models (i.e., ","authors_text":"Florian Kerschbaum, Jie Zhang, Tianwei Zhang, Yutong Wu","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-21T13:39:04Z","title":"Backdooring Textual Inversion for Concept Censorship"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.10718","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:840091d6846ac76cdf44cedc836f8ceccb5f38688b3cacd912701ca1cd33361c","target":"record","created_at":"2026-07-05T06:43:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1872fed7fc56a10cd357c7d91a31822014615eda00154bbae2aee62f00d1ea34","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-21T13:39:04Z","title_canon_sha256":"6421c6da1a7b85e6804337bc32911504625c87081b5f22de7cd815f0b3f8bb06"},"schema_version":"1.0","source":{"id":"2308.10718","kind":"arxiv","version":2}},"canonical_sha256":"7b854944e463dd9d9d2083b8013fb49983bbc796232fac000ac44e3c73d8bb57","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7b854944e463dd9d9d2083b8013fb49983bbc796232fac000ac44e3c73d8bb57","first_computed_at":"2026-07-05T06:43:51.952728Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:43:51.952728Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Nr9cQt9gqQexTID7Xiy3iOfPDoKByAJMBwDyJQWYwaqtSXfLvgtbJnbvDPyjEh9XIxuvhlfMen2E4ebzwfo3Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:43:51.953343Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.10718","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:840091d6846ac76cdf44cedc836f8ceccb5f38688b3cacd912701ca1cd33361c","sha256:75fc15331525e83c480f7a707d11c0cc8b0719449869cae3ccb762862d588982"],"state_sha256":"a57fc47a9216394df35d1c18261c2e2a29159206c35c184a3b1c07845462c491"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a4H4cEI9NQMhrMRsu0A/JXYq5WZjmQzJ4UAm3s3wf50UvXebsdwaou7zb+nVDiziIVEOozBAiPdNRd3EDA6wCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:26:36.773833Z","bundle_sha256":"14566ff7f64e9a8f2b0682e8494407d8ed6c8460e1e0dd7187b8b247a45612c6"}}