{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SWBMIIEIS6OPCXSSHAB6E5VWL2","short_pith_number":"pith:SWBMIIEI","canonical_record":{"source":{"id":"2508.21004","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T17:05:18Z","cross_cats_sorted":[],"title_canon_sha256":"0e145b901c50d0eb2f17c8dc59385a115e15e67462faab4878d5059e1cca0b88","abstract_canon_sha256":"ffb9e02424286b8737b36124dcaafde9e5b0f44fa1d2666f623936fa010e18d8"},"schema_version":"1.0"},"canonical_sha256":"9582c42088979cf15e523803e276b65ea917f911dcd5c75e34592f49d41cc942","source":{"kind":"arxiv","id":"2508.21004","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.21004","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"arxiv_version","alias_value":"2508.21004v1","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.21004","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"pith_short_12","alias_value":"SWBMIIEIS6OP","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"pith_short_16","alias_value":"SWBMIIEIS6OPCXSS","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"pith_short_8","alias_value":"SWBMIIEI","created_at":"2026-07-05T12:01:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SWBMIIEIS6OPCXSSHAB6E5VWL2","target":"record","payload":{"canonical_record":{"source":{"id":"2508.21004","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T17:05:18Z","cross_cats_sorted":[],"title_canon_sha256":"0e145b901c50d0eb2f17c8dc59385a115e15e67462faab4878d5059e1cca0b88","abstract_canon_sha256":"ffb9e02424286b8737b36124dcaafde9e5b0f44fa1d2666f623936fa010e18d8"},"schema_version":"1.0"},"canonical_sha256":"9582c42088979cf15e523803e276b65ea917f911dcd5c75e34592f49d41cc942","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:01:15.083306Z","signature_b64":"r0Svbh0bI6t2Mpl0IKTKFX+b9Ftbl6KTDY9KO1bVD1oSl96CoHOXK8s8ygbrxCTE0crQIaEwC3NreqdrvxNHCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9582c42088979cf15e523803e276b65ea917f911dcd5c75e34592f49d41cc942","last_reissued_at":"2026-07-05T12:01:15.082715Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:01:15.082715Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.21004","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9bnG3cYCMFpDIvazoRj9Te/4jNbt+erswTz6tluVmbSme6+Cso5jWaaknQg9KoI4HBX4NqCE9MuyJs50GL5jDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:08:12.273333Z"},"content_sha256":"b216404b114b0d43cdac47c0175516b17a7251f820457b4f6a95aaabbe9ab724","schema_version":"1.0","event_id":"sha256:b216404b114b0d43cdac47c0175516b17a7251f820457b4f6a95aaabbe9ab724"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SWBMIIEIS6OPCXSSHAB6E5VWL2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Chen Chen, Jiaxin Gao, Kwok-Yan Lam, Qian Wang, Xueluan Gong, Yongsen Zheng, Yuchen Sun, Ziyao Wang","submitted_at":"2025-08-28T17:05:18Z","abstract_excerpt":"Large language models (LLMs) have seen significant advancements, achieving superior performance in various Natural Language Processing (NLP) tasks. However, they remain vulnerable to backdoor attacks, where models behave normally for standard queries but generate harmful responses or unintended output when specific triggers are activated. Existing backdoor defenses either lack comprehensiveness, focusing on narrow trigger settings, detection-only mechanisms, and limited domains, or fail to withstand advanced scenarios like model-editing-based, multi-trigger, and triggerless attacks. In this pa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.21004","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.21004/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rwtvLZJVX9htq+kedbnulYKijea+SYO0CTUSNUP4QTyJEX3Vg3s23Vl4v0IXPHky33kbWQOZIptG9Gq3x4dxDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:08:12.273843Z"},"content_sha256":"ab53636ceb6e1461a119665b31630cc1ce7b40704dc35b46871a7ebb315cc4cc","schema_version":"1.0","event_id":"sha256:ab53636ceb6e1461a119665b31630cc1ce7b40704dc35b46871a7ebb315cc4cc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SWBMIIEIS6OPCXSSHAB6E5VWL2/bundle.json","state_url":"https://pith.science/pith/SWBMIIEIS6OPCXSSHAB6E5VWL2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SWBMIIEIS6OPCXSSHAB6E5VWL2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T07:08:12Z","links":{"resolver":"https://pith.science/pith/SWBMIIEIS6OPCXSSHAB6E5VWL2","bundle":"https://pith.science/pith/SWBMIIEIS6OPCXSSHAB6E5VWL2/bundle.json","state":"https://pith.science/pith/SWBMIIEIS6OPCXSSHAB6E5VWL2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SWBMIIEIS6OPCXSSHAB6E5VWL2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SWBMIIEIS6OPCXSSHAB6E5VWL2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ffb9e02424286b8737b36124dcaafde9e5b0f44fa1d2666f623936fa010e18d8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T17:05:18Z","title_canon_sha256":"0e145b901c50d0eb2f17c8dc59385a115e15e67462faab4878d5059e1cca0b88"},"schema_version":"1.0","source":{"id":"2508.21004","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.21004","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"arxiv_version","alias_value":"2508.21004v1","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.21004","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"pith_short_12","alias_value":"SWBMIIEIS6OP","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"pith_short_16","alias_value":"SWBMIIEIS6OPCXSS","created_at":"2026-07-05T12:01:15Z"},{"alias_kind":"pith_short_8","alias_value":"SWBMIIEI","created_at":"2026-07-05T12:01:15Z"}],"graph_snapshots":[{"event_id":"sha256:ab53636ceb6e1461a119665b31630cc1ce7b40704dc35b46871a7ebb315cc4cc","target":"graph","created_at":"2026-07-05T12:01:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.21004/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have seen significant advancements, achieving superior performance in various Natural Language Processing (NLP) tasks. However, they remain vulnerable to backdoor attacks, where models behave normally for standard queries but generate harmful responses or unintended output when specific triggers are activated. Existing backdoor defenses either lack comprehensiveness, focusing on narrow trigger settings, detection-only mechanisms, and limited domains, or fail to withstand advanced scenarios like model-editing-based, multi-trigger, and triggerless attacks. In this pa","authors_text":"Chen Chen, Jiaxin Gao, Kwok-Yan Lam, Qian Wang, Xueluan Gong, Yongsen Zheng, Yuchen Sun, Ziyao Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T17:05:18Z","title":"Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.21004","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b216404b114b0d43cdac47c0175516b17a7251f820457b4f6a95aaabbe9ab724","target":"record","created_at":"2026-07-05T12:01:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ffb9e02424286b8737b36124dcaafde9e5b0f44fa1d2666f623936fa010e18d8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-28T17:05:18Z","title_canon_sha256":"0e145b901c50d0eb2f17c8dc59385a115e15e67462faab4878d5059e1cca0b88"},"schema_version":"1.0","source":{"id":"2508.21004","kind":"arxiv","version":1}},"canonical_sha256":"9582c42088979cf15e523803e276b65ea917f911dcd5c75e34592f49d41cc942","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9582c42088979cf15e523803e276b65ea917f911dcd5c75e34592f49d41cc942","first_computed_at":"2026-07-05T12:01:15.082715Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:01:15.082715Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"r0Svbh0bI6t2Mpl0IKTKFX+b9Ftbl6KTDY9KO1bVD1oSl96CoHOXK8s8ygbrxCTE0crQIaEwC3NreqdrvxNHCw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:01:15.083306Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.21004","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b216404b114b0d43cdac47c0175516b17a7251f820457b4f6a95aaabbe9ab724","sha256:ab53636ceb6e1461a119665b31630cc1ce7b40704dc35b46871a7ebb315cc4cc"],"state_sha256":"696fa80b56df2a028210bcaa625d3311ab248103bd99424708e4e0de66a75b8f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jP6mSkP5K5irmyWIWn77S2VnfmIanJ298d3LQ4YpebwvVSTQKZhWQe6kyaLycAfes1wY8oNU/LdQqXeAoMuCAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T07:08:12.279181Z","bundle_sha256":"e5b22e318edf8f3511338b24ff2b039ae83aeb6a5dffb1d20346283623e081c2"}}