{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RCLLWIBZ26UE45TTVTKVA5ZHLS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"09b8989033415d912ddab3e6095e564d109101d724329b66eede6f2548527bd1","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-23T07:19:20Z","title_canon_sha256":"255d3b32add524c0c80bc41dc75fb32408354fbcbcff2694c381c9f8e0311999"},"schema_version":"1.0","source":{"id":"2404.14795","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.14795","created_at":"2026-07-05T09:58:19Z"},{"alias_kind":"arxiv_version","alias_value":"2404.14795v5","created_at":"2026-07-05T09:58:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.14795","created_at":"2026-07-05T09:58:19Z"},{"alias_kind":"pith_short_12","alias_value":"RCLLWIBZ26UE","created_at":"2026-07-05T09:58:19Z"},{"alias_kind":"pith_short_16","alias_value":"RCLLWIBZ26UE45TT","created_at":"2026-07-05T09:58:19Z"},{"alias_kind":"pith_short_8","alias_value":"RCLLWIBZ","created_at":"2026-07-05T09:58:19Z"}],"graph_snapshots":[{"event_id":"sha256:001d212c509c00474ed76639762a882fdd8cd326c9938d27f467a9ca798b740a","target":"graph","created_at":"2026-07-05T09:58:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.14795/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Mainstream backdoor attacks on large language models (LLMs) typically set a fixed trigger in the input instance and specific responses for triggered queries. However, the fixed trigger setting (e.g., unusual words) may be easily detected by human detection, limiting the effectiveness and practicality in real-world scenarios. To enhance the stealthiness of backdoor activation, we present a new poisoning paradigm against LLMs triggered by specifying generation conditions, which are commonly adopted strategies by users during model inference. The poisoned model performs normally for output under ","authors_text":"Guanyu Hou, Hongwei Li, Jiaming He, Rui Zhang, Wenbo Jiang, Wenshu Fan","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-23T07:19:20Z","title":"Watch Out for Your Guidance on Generation! Exploring Conditional Backdoor Attacks against Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.14795","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6bdbff32afad3492d1ab45b438002847cf1b165eff97f5d0e8913c551177e99f","target":"record","created_at":"2026-07-05T09:58:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"09b8989033415d912ddab3e6095e564d109101d724329b66eede6f2548527bd1","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-04-23T07:19:20Z","title_canon_sha256":"255d3b32add524c0c80bc41dc75fb32408354fbcbcff2694c381c9f8e0311999"},"schema_version":"1.0","source":{"id":"2404.14795","kind":"arxiv","version":5}},"canonical_sha256":"8896bb2039d7a84e7673acd55077275caecf708ff74bc7e1aa53f08fcccab423","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8896bb2039d7a84e7673acd55077275caecf708ff74bc7e1aa53f08fcccab423","first_computed_at":"2026-07-05T09:58:19.941750Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:58:19.941750Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZsUuG3MQvgH8B43nXiqIycLwGuWGUP9GRPs+vP5LtlYX0J6syPfa0cRbYeLDh4eigpSjFouePL+faODWN43oDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:58:19.942228Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.14795","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6bdbff32afad3492d1ab45b438002847cf1b165eff97f5d0e8913c551177e99f","sha256:001d212c509c00474ed76639762a882fdd8cd326c9938d27f467a9ca798b740a"],"state_sha256":"4035d26242516e7ade07a11056c8a7ebec616836f0dbf60f4768349cd5321d67"}