{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:RID3GGLWTLXUTY7R5QY5EGDZYQ","short_pith_number":"pith:RID3GGLW","canonical_record":{"source":{"id":"1909.06044","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-13T05:50:50Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"15f38a9e5c1081910be91802ddf2b51a4e226a9720c00e9f8a44eaa1fd7d56ea","abstract_canon_sha256":"ed305f093e9cf005b2f20bed74ab382681c7218e0ae5fcc7f25908c2ecc845d5"},"schema_version":"1.0"},"canonical_sha256":"8a07b319769aef49e3f1ec31d21879c42b05af00fbc8020da97c62392cc43aac","source":{"kind":"arxiv","id":"1909.06044","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.06044","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"arxiv_version","alias_value":"1909.06044v3","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.06044","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"pith_short_12","alias_value":"RID3GGLWTLXU","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"pith_short_16","alias_value":"RID3GGLWTLXUTY7R","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"pith_short_8","alias_value":"RID3GGLW","created_at":"2026-07-05T00:07:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:RID3GGLWTLXUTY7R5QY5EGDZYQ","target":"record","payload":{"canonical_record":{"source":{"id":"1909.06044","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-13T05:50:50Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"15f38a9e5c1081910be91802ddf2b51a4e226a9720c00e9f8a44eaa1fd7d56ea","abstract_canon_sha256":"ed305f093e9cf005b2f20bed74ab382681c7218e0ae5fcc7f25908c2ecc845d5"},"schema_version":"1.0"},"canonical_sha256":"8a07b319769aef49e3f1ec31d21879c42b05af00fbc8020da97c62392cc43aac","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:07:37.649038Z","signature_b64":"BIOruFf67DP2K+BdpaSn794qBObRSD4bEL6/VJnxPYdurmR5ORQv+/FblHfDgw+XJeBz/KG9Ic2JOFAYQxEaBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a07b319769aef49e3f1ec31d21879c42b05af00fbc8020da97c62392cc43aac","last_reissued_at":"2026-07-05T00:07:37.648636Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:07:37.648636Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.06044","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:07:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IHC/N7ygd68k7ADPjS9wcZS7y7DwuPy70IK4BGOalxCOvDwz53A4xoN+a5n1X9Ay2Cjsp8c+IIF/wkMmjJJ2BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T15:06:43.426656Z"},"content_sha256":"68f2853cb53659c98dc50805aa62a38acc219f84b6a689b6a46d8f0a4662c6f8","schema_version":"1.0","event_id":"sha256:68f2853cb53659c98dc50805aa62a38acc219f84b6a689b6a46d8f0a4662c6f8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:RID3GGLWTLXUTY7R5QY5EGDZYQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Say What I Want: Towards the Dark Side of Neural Dialogue Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CL","authors_text":"Haochen Liu, Jiliang Tang, Tyler Derr, Zitao Liu","submitted_at":"2019-09-13T05:50:50Z","abstract_excerpt":"Neural dialogue models have been widely adopted in various chatbot applications because of their good performance in simulating and generalizing human conversations. However, there exists a dark side of these models -- due to the vulnerability of neural networks, a neural dialogue model can be manipulated by users to say what they want, which brings in concerns about the security of practical chatbot services. In this work, we investigate whether we can craft inputs that lead a well-trained black-box neural dialogue model to generate targeted outputs. We formulate this as a reinforcement learn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.06044","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.06044/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:07:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IWk59ngk69ubTkw3Hl88yeHweBx99U/6kozMVvpAyo9t3ybehZGQ23QXgIwKdyNkxMiP2h+7IXt3SfJyM+0ICQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T15:06:43.427032Z"},"content_sha256":"d0e3719cadda2fef1dfc76552fce2fba6200d20df4f6b710818159d14f68d026","schema_version":"1.0","event_id":"sha256:d0e3719cadda2fef1dfc76552fce2fba6200d20df4f6b710818159d14f68d026"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RID3GGLWTLXUTY7R5QY5EGDZYQ/bundle.json","state_url":"https://pith.science/pith/RID3GGLWTLXUTY7R5QY5EGDZYQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RID3GGLWTLXUTY7R5QY5EGDZYQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T15:06:43Z","links":{"resolver":"https://pith.science/pith/RID3GGLWTLXUTY7R5QY5EGDZYQ","bundle":"https://pith.science/pith/RID3GGLWTLXUTY7R5QY5EGDZYQ/bundle.json","state":"https://pith.science/pith/RID3GGLWTLXUTY7R5QY5EGDZYQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RID3GGLWTLXUTY7R5QY5EGDZYQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:RID3GGLWTLXUTY7R5QY5EGDZYQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ed305f093e9cf005b2f20bed74ab382681c7218e0ae5fcc7f25908c2ecc845d5","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-13T05:50:50Z","title_canon_sha256":"15f38a9e5c1081910be91802ddf2b51a4e226a9720c00e9f8a44eaa1fd7d56ea"},"schema_version":"1.0","source":{"id":"1909.06044","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.06044","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"arxiv_version","alias_value":"1909.06044v3","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.06044","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"pith_short_12","alias_value":"RID3GGLWTLXU","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"pith_short_16","alias_value":"RID3GGLWTLXUTY7R","created_at":"2026-07-05T00:07:37Z"},{"alias_kind":"pith_short_8","alias_value":"RID3GGLW","created_at":"2026-07-05T00:07:37Z"}],"graph_snapshots":[{"event_id":"sha256:d0e3719cadda2fef1dfc76552fce2fba6200d20df4f6b710818159d14f68d026","target":"graph","created_at":"2026-07-05T00:07:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.06044/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural dialogue models have been widely adopted in various chatbot applications because of their good performance in simulating and generalizing human conversations. However, there exists a dark side of these models -- due to the vulnerability of neural networks, a neural dialogue model can be manipulated by users to say what they want, which brings in concerns about the security of practical chatbot services. In this work, we investigate whether we can craft inputs that lead a well-trained black-box neural dialogue model to generate targeted outputs. We formulate this as a reinforcement learn","authors_text":"Haochen Liu, Jiliang Tang, Tyler Derr, Zitao Liu","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-13T05:50:50Z","title":"Say What I Want: Towards the Dark Side of Neural Dialogue Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.06044","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:68f2853cb53659c98dc50805aa62a38acc219f84b6a689b6a46d8f0a4662c6f8","target":"record","created_at":"2026-07-05T00:07:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ed305f093e9cf005b2f20bed74ab382681c7218e0ae5fcc7f25908c2ecc845d5","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-13T05:50:50Z","title_canon_sha256":"15f38a9e5c1081910be91802ddf2b51a4e226a9720c00e9f8a44eaa1fd7d56ea"},"schema_version":"1.0","source":{"id":"1909.06044","kind":"arxiv","version":3}},"canonical_sha256":"8a07b319769aef49e3f1ec31d21879c42b05af00fbc8020da97c62392cc43aac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a07b319769aef49e3f1ec31d21879c42b05af00fbc8020da97c62392cc43aac","first_computed_at":"2026-07-05T00:07:37.648636Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:07:37.648636Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BIOruFf67DP2K+BdpaSn794qBObRSD4bEL6/VJnxPYdurmR5ORQv+/FblHfDgw+XJeBz/KG9Ic2JOFAYQxEaBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:07:37.649038Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.06044","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:68f2853cb53659c98dc50805aa62a38acc219f84b6a689b6a46d8f0a4662c6f8","sha256:d0e3719cadda2fef1dfc76552fce2fba6200d20df4f6b710818159d14f68d026"],"state_sha256":"94eb2f3b1256f433ab09f8479e34821eb83b096b72e166b2eeacb2c5d5bbada1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mmb8Yt3zSmLF7sZ3oRJ6v/QS/iilwObtHeMJk+4qn+SdUrp0vMrXFavn/fKYvhpQtHAB4eEErPsGZQpZqeavCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T15:06:43.429489Z","bundle_sha256":"abce041275c6cf3bc0b4fb5fc29ebd40ad90a0255d1f41edf709757e39dd516f"}}