{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SK2OTKPI7HTC45UNATYZ3U5W6Z","short_pith_number":"pith:SK2OTKPI","canonical_record":{"source":{"id":"2403.13355","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-20T07:34:18Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"08f7aa7140fa5ef9711424780e176dd7bcc2a8b0678bf46c1b72f8ece0bb8b3e","abstract_canon_sha256":"d37b699deef63063b0ff3f57bb2f696473a1de0e79bed53bb4fed7f245a5419e"},"schema_version":"1.0"},"canonical_sha256":"92b4e9a9e8f9e62e768d04f19dd3b6f6526934ea6d128a69a83f15ebb2d44c4a","source":{"kind":"arxiv","id":"2403.13355","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.13355","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"arxiv_version","alias_value":"2403.13355v1","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.13355","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"pith_short_12","alias_value":"SK2OTKPI7HTC","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"pith_short_16","alias_value":"SK2OTKPI7HTC45UN","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"pith_short_8","alias_value":"SK2OTKPI","created_at":"2026-07-05T07:58:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SK2OTKPI7HTC45UNATYZ3U5W6Z","target":"record","payload":{"canonical_record":{"source":{"id":"2403.13355","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-20T07:34:18Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"08f7aa7140fa5ef9711424780e176dd7bcc2a8b0678bf46c1b72f8ece0bb8b3e","abstract_canon_sha256":"d37b699deef63063b0ff3f57bb2f696473a1de0e79bed53bb4fed7f245a5419e"},"schema_version":"1.0"},"canonical_sha256":"92b4e9a9e8f9e62e768d04f19dd3b6f6526934ea6d128a69a83f15ebb2d44c4a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:58:35.274592Z","signature_b64":"E1DIB7ywpjHuywAVCMsIDyhcwnzN3xSPUis2h6SFdQgH5q1T+cJ1BU1W1pIJ6LM3rduS9eFfxuCj5/JTK+FpCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"92b4e9a9e8f9e62e768d04f19dd3b6f6526934ea6d128a69a83f15ebb2d44c4a","last_reissued_at":"2026-07-05T07:58:35.274092Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:58:35.274092Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.13355","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:58:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/qf9bYthFbGTWXvh5HRZYtUgocAW+cO08344do7LekjmfrKEEpp8x3wBQTfHx95hiCD0Y4sDQYu0saRffTqVDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:59:28.346181Z"},"content_sha256":"d3ef71930d18ff4d197792e498076ba2d22aec32f75e123d5d4ecb40f7503030","schema_version":"1.0","event_id":"sha256:d3ef71930d18ff4d197792e498076ba2d22aec32f75e123d5d4ecb40f7503030"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SK2OTKPI7HTC45UNATYZ3U5W6Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BadEdit: Backdooring large language models by model editing","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jian Zhang, Kangjie Chen, Shangqing Liu, Tianlin Li, Tianwei Zhang, Wenhan Wang, Yang Liu, Yanzhou Li","submitted_at":"2024-03-20T07:34:18Z","abstract_excerpt":"Mainstream backdoor attack methods typically demand substantial tuning data for poisoning, limiting their practicality and potentially degrading the overall performance when applied to Large Language Models (LLMs). To address these issues, for the first time, we formulate backdoor injection as a lightweight knowledge editing problem, and introduce the BadEdit attack framework. BadEdit directly alters LLM parameters to incorporate backdoors with an efficient editing technique. It boasts superiority over existing backdoor injection techniques in several areas: (1) Practicality: BadEdit necessita"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.13355","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.13355/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:58:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CjeABoI5EuI/qEI9xS/OTUXnU7IdrTg5XWwbcfMZTo7qLaJYAhyoW9wDNUVu0NDgqoQ8qWnqdgiT/DoSqtPqCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:59:28.346597Z"},"content_sha256":"2553cb6726180de7afcd9b6c5d9d6f9291fa10b449d7a2411be64406ed97709a","schema_version":"1.0","event_id":"sha256:2553cb6726180de7afcd9b6c5d9d6f9291fa10b449d7a2411be64406ed97709a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SK2OTKPI7HTC45UNATYZ3U5W6Z/bundle.json","state_url":"https://pith.science/pith/SK2OTKPI7HTC45UNATYZ3U5W6Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SK2OTKPI7HTC45UNATYZ3U5W6Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T02:59:28Z","links":{"resolver":"https://pith.science/pith/SK2OTKPI7HTC45UNATYZ3U5W6Z","bundle":"https://pith.science/pith/SK2OTKPI7HTC45UNATYZ3U5W6Z/bundle.json","state":"https://pith.science/pith/SK2OTKPI7HTC45UNATYZ3U5W6Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SK2OTKPI7HTC45UNATYZ3U5W6Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SK2OTKPI7HTC45UNATYZ3U5W6Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d37b699deef63063b0ff3f57bb2f696473a1de0e79bed53bb4fed7f245a5419e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-20T07:34:18Z","title_canon_sha256":"08f7aa7140fa5ef9711424780e176dd7bcc2a8b0678bf46c1b72f8ece0bb8b3e"},"schema_version":"1.0","source":{"id":"2403.13355","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.13355","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"arxiv_version","alias_value":"2403.13355v1","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.13355","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"pith_short_12","alias_value":"SK2OTKPI7HTC","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"pith_short_16","alias_value":"SK2OTKPI7HTC45UN","created_at":"2026-07-05T07:58:35Z"},{"alias_kind":"pith_short_8","alias_value":"SK2OTKPI","created_at":"2026-07-05T07:58:35Z"}],"graph_snapshots":[{"event_id":"sha256:2553cb6726180de7afcd9b6c5d9d6f9291fa10b449d7a2411be64406ed97709a","target":"graph","created_at":"2026-07-05T07:58:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.13355/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Mainstream backdoor attack methods typically demand substantial tuning data for poisoning, limiting their practicality and potentially degrading the overall performance when applied to Large Language Models (LLMs). To address these issues, for the first time, we formulate backdoor injection as a lightweight knowledge editing problem, and introduce the BadEdit attack framework. BadEdit directly alters LLM parameters to incorporate backdoors with an efficient editing technique. It boasts superiority over existing backdoor injection techniques in several areas: (1) Practicality: BadEdit necessita","authors_text":"Jian Zhang, Kangjie Chen, Shangqing Liu, Tianlin Li, Tianwei Zhang, Wenhan Wang, Yang Liu, Yanzhou Li","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-20T07:34:18Z","title":"BadEdit: Backdooring large language models by model editing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.13355","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d3ef71930d18ff4d197792e498076ba2d22aec32f75e123d5d4ecb40f7503030","target":"record","created_at":"2026-07-05T07:58:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d37b699deef63063b0ff3f57bb2f696473a1de0e79bed53bb4fed7f245a5419e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-20T07:34:18Z","title_canon_sha256":"08f7aa7140fa5ef9711424780e176dd7bcc2a8b0678bf46c1b72f8ece0bb8b3e"},"schema_version":"1.0","source":{"id":"2403.13355","kind":"arxiv","version":1}},"canonical_sha256":"92b4e9a9e8f9e62e768d04f19dd3b6f6526934ea6d128a69a83f15ebb2d44c4a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"92b4e9a9e8f9e62e768d04f19dd3b6f6526934ea6d128a69a83f15ebb2d44c4a","first_computed_at":"2026-07-05T07:58:35.274092Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:58:35.274092Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"E1DIB7ywpjHuywAVCMsIDyhcwnzN3xSPUis2h6SFdQgH5q1T+cJ1BU1W1pIJ6LM3rduS9eFfxuCj5/JTK+FpCA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:58:35.274592Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.13355","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d3ef71930d18ff4d197792e498076ba2d22aec32f75e123d5d4ecb40f7503030","sha256:2553cb6726180de7afcd9b6c5d9d6f9291fa10b449d7a2411be64406ed97709a"],"state_sha256":"18488f4842dcd7d9a78179c8af276a8012a7b56ea144c8956c8e0bf616d957fe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rUANpZzeb+kBCeX7iJSJiMExyE13Kl0vMiV4H+OGWwiJrcz+o7xhLAqHeJ+qYYenWJKWxEONrqJBW8cGLh+cAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T02:59:28.348982Z","bundle_sha256":"fdfac6b64f78d5e0f2cef765b5a33b260a069d52dbf087dd52b2c4f580d0e1de"}}