{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UXQ7J4OZ45R5HMWJQVA3EE3ZOA","short_pith_number":"pith:UXQ7J4OZ","canonical_record":{"source":{"id":"2508.18235","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-20T00:57:21Z","cross_cats_sorted":[],"title_canon_sha256":"344a6b5a2f374335983db1b1c58a3db24b5af509f38925ec3cb1b3746a671e9f","abstract_canon_sha256":"951b9894c22271908066bf431016b69888470119467f989ed11847345f63612a"},"schema_version":"1.0"},"canonical_sha256":"a5e1f4f1d9e763d3b2c98541b213797034f8193bb5621f9f47430d29441c0225","source":{"kind":"arxiv","id":"2508.18235","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.18235","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"arxiv_version","alias_value":"2508.18235v1","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.18235","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"pith_short_12","alias_value":"UXQ7J4OZ45R5","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"pith_short_16","alias_value":"UXQ7J4OZ45R5HMWJ","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"pith_short_8","alias_value":"UXQ7J4OZ","created_at":"2026-07-05T11:58:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UXQ7J4OZ45R5HMWJQVA3EE3ZOA","target":"record","payload":{"canonical_record":{"source":{"id":"2508.18235","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-20T00:57:21Z","cross_cats_sorted":[],"title_canon_sha256":"344a6b5a2f374335983db1b1c58a3db24b5af509f38925ec3cb1b3746a671e9f","abstract_canon_sha256":"951b9894c22271908066bf431016b69888470119467f989ed11847345f63612a"},"schema_version":"1.0"},"canonical_sha256":"a5e1f4f1d9e763d3b2c98541b213797034f8193bb5621f9f47430d29441c0225","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:58:55.968490Z","signature_b64":"RIbVQHQ4j1SDAHrfuFCFCVbHUo/uGEHujGRFsClB1xofeOksc+zIA8xgEbiRDpX6iMHunxDth0BJ/jS4KYRVCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a5e1f4f1d9e763d3b2c98541b213797034f8193bb5621f9f47430d29441c0225","last_reissued_at":"2026-07-05T11:58:55.967947Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:58:55.967947Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.18235","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:58:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CDuMX3m01Flj5Y7+R6pEL+05teRg/kvzbX11Tj9lwEqdgdO72mGFqBL+NFdHG6xdn+vuaXGZrXz8ZMUUJL8MCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:27:53.903135Z"},"content_sha256":"96927f546ec8f1b7765d6f33c6fe6b708214c0d5743d774578a2c7377130d503","schema_version":"1.0","event_id":"sha256:96927f546ec8f1b7765d6f33c6fe6b708214c0d5743d774578a2c7377130d503"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UXQ7J4OZ45R5HMWJQVA3EE3ZOA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Abha Jha, Ashwath Vaithinathan Aravindan, Atharva Sandeep Bhide, Duygu Nur Yaldiz, Matthew Salaway","submitted_at":"2025-08-20T00:57:21Z","abstract_excerpt":"Text-to-image diffusion models have revolutionized generative AI, but their vulnerability to backdoor attacks poses significant security risks. Adversaries can inject imperceptible textual triggers into training data, causing models to generate manipulated outputs. Although text-based backdoor defenses in classification models are well-explored, generative models lack effective mitigation techniques against. We address this by selectively erasing the model's learned associations between adversarial text triggers and poisoned outputs, while preserving overall generation quality. Our approach, S"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.18235","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.18235/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:58:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l1VFC9BPWWOvXeI482VeZQ/gtxmPoOgTZQivQG2spbUNNjLECoP676v9FgT1YqIUG7PCqzG+25nD7F/F0VQQCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:27:53.903433Z"},"content_sha256":"bc41b7d42e43909b0626931312b300b7f4773d732bd457174435a39374ce1c3f","schema_version":"1.0","event_id":"sha256:bc41b7d42e43909b0626931312b300b7f4773d732bd457174435a39374ce1c3f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UXQ7J4OZ45R5HMWJQVA3EE3ZOA/bundle.json","state_url":"https://pith.science/pith/UXQ7J4OZ45R5HMWJQVA3EE3ZOA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UXQ7J4OZ45R5HMWJQVA3EE3ZOA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T01:27:53Z","links":{"resolver":"https://pith.science/pith/UXQ7J4OZ45R5HMWJQVA3EE3ZOA","bundle":"https://pith.science/pith/UXQ7J4OZ45R5HMWJQVA3EE3ZOA/bundle.json","state":"https://pith.science/pith/UXQ7J4OZ45R5HMWJQVA3EE3ZOA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UXQ7J4OZ45R5HMWJQVA3EE3ZOA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UXQ7J4OZ45R5HMWJQVA3EE3ZOA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"951b9894c22271908066bf431016b69888470119467f989ed11847345f63612a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-20T00:57:21Z","title_canon_sha256":"344a6b5a2f374335983db1b1c58a3db24b5af509f38925ec3cb1b3746a671e9f"},"schema_version":"1.0","source":{"id":"2508.18235","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.18235","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"arxiv_version","alias_value":"2508.18235v1","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.18235","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"pith_short_12","alias_value":"UXQ7J4OZ45R5","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"pith_short_16","alias_value":"UXQ7J4OZ45R5HMWJ","created_at":"2026-07-05T11:58:55Z"},{"alias_kind":"pith_short_8","alias_value":"UXQ7J4OZ","created_at":"2026-07-05T11:58:55Z"}],"graph_snapshots":[{"event_id":"sha256:bc41b7d42e43909b0626931312b300b7f4773d732bd457174435a39374ce1c3f","target":"graph","created_at":"2026-07-05T11:58:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.18235/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Text-to-image diffusion models have revolutionized generative AI, but their vulnerability to backdoor attacks poses significant security risks. Adversaries can inject imperceptible textual triggers into training data, causing models to generate manipulated outputs. Although text-based backdoor defenses in classification models are well-explored, generative models lack effective mitigation techniques against. We address this by selectively erasing the model's learned associations between adversarial text triggers and poisoned outputs, while preserving overall generation quality. Our approach, S","authors_text":"Abha Jha, Ashwath Vaithinathan Aravindan, Atharva Sandeep Bhide, Duygu Nur Yaldiz, Matthew Salaway","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-20T00:57:21Z","title":"Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.18235","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:96927f546ec8f1b7765d6f33c6fe6b708214c0d5743d774578a2c7377130d503","target":"record","created_at":"2026-07-05T11:58:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"951b9894c22271908066bf431016b69888470119467f989ed11847345f63612a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-20T00:57:21Z","title_canon_sha256":"344a6b5a2f374335983db1b1c58a3db24b5af509f38925ec3cb1b3746a671e9f"},"schema_version":"1.0","source":{"id":"2508.18235","kind":"arxiv","version":1}},"canonical_sha256":"a5e1f4f1d9e763d3b2c98541b213797034f8193bb5621f9f47430d29441c0225","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a5e1f4f1d9e763d3b2c98541b213797034f8193bb5621f9f47430d29441c0225","first_computed_at":"2026-07-05T11:58:55.967947Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:58:55.967947Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RIbVQHQ4j1SDAHrfuFCFCVbHUo/uGEHujGRFsClB1xofeOksc+zIA8xgEbiRDpX6iMHunxDth0BJ/jS4KYRVCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:58:55.968490Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.18235","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:96927f546ec8f1b7765d6f33c6fe6b708214c0d5743d774578a2c7377130d503","sha256:bc41b7d42e43909b0626931312b300b7f4773d732bd457174435a39374ce1c3f"],"state_sha256":"becd65abaa48263c67e55d699bcb26fe0e84ce586173cd8535371fd37acdcdc5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IsXNUHBd0660yLSpGyCrQoOzggpn9J24dU18vxlZGoJNUNdNvgVwfqlqJyUtANpB02yMjRwaZh1R6AFg+8p6AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T01:27:53.906525Z","bundle_sha256":"bafc3e13f756e4a9de163f381260bc2904cf9a509d3fb53423724bb385ca08ad"}}