{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:VQP2KRIGFTRQ4P5A7NIARMN74Z","short_pith_number":"pith:VQP2KRIG","canonical_record":{"source":{"id":"2310.01452","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T06:57:25Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9890579d3f1511f5950a2ab5abf718f33191ceb8c8abaca2208d2c7d17882b09","abstract_canon_sha256":"a81e13b5aa0969061dae7b4908677ae23f5aa08827eb0663110baa3cb142a292"},"schema_version":"1.0"},"canonical_sha256":"ac1fa545062ce30e3fa0fb5008b1bfe6472c292a03302fb0c90d5b30cf72f8f0","source":{"kind":"arxiv","id":"2310.01452","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.01452","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"arxiv_version","alias_value":"2310.01452v2","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.01452","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_12","alias_value":"VQP2KRIGFTRQ","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_16","alias_value":"VQP2KRIGFTRQ4P5A","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_8","alias_value":"VQP2KRIG","created_at":"2026-07-05T08:29:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:VQP2KRIGFTRQ4P5A7NIARMN74Z","target":"record","payload":{"canonical_record":{"source":{"id":"2310.01452","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T06:57:25Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9890579d3f1511f5950a2ab5abf718f33191ceb8c8abaca2208d2c7d17882b09","abstract_canon_sha256":"a81e13b5aa0969061dae7b4908677ae23f5aa08827eb0663110baa3cb142a292"},"schema_version":"1.0"},"canonical_sha256":"ac1fa545062ce30e3fa0fb5008b1bfe6472c292a03302fb0c90d5b30cf72f8f0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:29:17.731190Z","signature_b64":"7vK7qSZWEvz9XaeNUXuuNsHnubV8FU2Lli6nDZ6Kq6IbqKXreEjtdfztc0LI2+/gSEppzn5IC1iKhzTAnOp4AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ac1fa545062ce30e3fa0fb5008b1bfe6472c292a03302fb0c90d5b30cf72f8f0","last_reissued_at":"2026-07-05T08:29:17.730712Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:29:17.730712Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.01452","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uZ2kF2Fpv+Q/7vgY+59Iknu1GJUIgn2NND1bJVDlHIOKITJWq4k4S1RZM0p+3eKHdy+K9PlEyMa2F9d9tK/1Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:02:28.738341Z"},"content_sha256":"f9efa4c7a16f0785c80cb4ba5a6602fc9d3427526f6259c80cbefcaa59b31d3b","schema_version":"1.0","event_id":"sha256:f9efa4c7a16f0785c80cb4ba5a6602fc9d3427526f6259c80cbefcaa59b31d3b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:VQP2KRIGFTRQ4P5A7NIARMN74Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fooling the Textual Fooler via Randomizing Latent Representations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Duy C. Hoang, Khoa D. Doan, Kok-Seng Wong, Minlong Peng, Quang H. Nguyen, Saurav Manchanda","submitted_at":"2023-10-02T06:57:25Z","abstract_excerpt":"Despite outstanding performance in a variety of NLP tasks, recent studies have revealed that NLP models are vulnerable to adversarial attacks that slightly perturb the input to cause the models to misbehave. Among these attacks, adversarial word-level perturbations are well-studied and effective attack strategies. Since these attacks work in black-box settings, they do not require access to the model architecture or model parameters and thus can be detrimental to existing NLP applications. To perform an attack, the adversary queries the victim model many times to determine the most important w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.01452","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.01452/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eFhTMIBHSjEHv1TA9PwC71XyrBhdMmD7UUgjN+VC2Bl20wMXRtiLoiXba1WJZjV8rNDmDw/0zT1x/eJki3suCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:02:28.738729Z"},"content_sha256":"24fe51a2c39004de769c22ec3b87316e1e1be63018630e48a5752554a2840e42","schema_version":"1.0","event_id":"sha256:24fe51a2c39004de769c22ec3b87316e1e1be63018630e48a5752554a2840e42"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VQP2KRIGFTRQ4P5A7NIARMN74Z/bundle.json","state_url":"https://pith.science/pith/VQP2KRIGFTRQ4P5A7NIARMN74Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VQP2KRIGFTRQ4P5A7NIARMN74Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T03:02:28Z","links":{"resolver":"https://pith.science/pith/VQP2KRIGFTRQ4P5A7NIARMN74Z","bundle":"https://pith.science/pith/VQP2KRIGFTRQ4P5A7NIARMN74Z/bundle.json","state":"https://pith.science/pith/VQP2KRIGFTRQ4P5A7NIARMN74Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VQP2KRIGFTRQ4P5A7NIARMN74Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:VQP2KRIGFTRQ4P5A7NIARMN74Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a81e13b5aa0969061dae7b4908677ae23f5aa08827eb0663110baa3cb142a292","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T06:57:25Z","title_canon_sha256":"9890579d3f1511f5950a2ab5abf718f33191ceb8c8abaca2208d2c7d17882b09"},"schema_version":"1.0","source":{"id":"2310.01452","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.01452","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"arxiv_version","alias_value":"2310.01452v2","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.01452","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_12","alias_value":"VQP2KRIGFTRQ","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_16","alias_value":"VQP2KRIGFTRQ4P5A","created_at":"2026-07-05T08:29:17Z"},{"alias_kind":"pith_short_8","alias_value":"VQP2KRIG","created_at":"2026-07-05T08:29:17Z"}],"graph_snapshots":[{"event_id":"sha256:24fe51a2c39004de769c22ec3b87316e1e1be63018630e48a5752554a2840e42","target":"graph","created_at":"2026-07-05T08:29:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.01452/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite outstanding performance in a variety of NLP tasks, recent studies have revealed that NLP models are vulnerable to adversarial attacks that slightly perturb the input to cause the models to misbehave. Among these attacks, adversarial word-level perturbations are well-studied and effective attack strategies. Since these attacks work in black-box settings, they do not require access to the model architecture or model parameters and thus can be detrimental to existing NLP applications. To perform an attack, the adversary queries the victim model many times to determine the most important w","authors_text":"Duy C. Hoang, Khoa D. Doan, Kok-Seng Wong, Minlong Peng, Quang H. Nguyen, Saurav Manchanda","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T06:57:25Z","title":"Fooling the Textual Fooler via Randomizing Latent Representations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.01452","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f9efa4c7a16f0785c80cb4ba5a6602fc9d3427526f6259c80cbefcaa59b31d3b","target":"record","created_at":"2026-07-05T08:29:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a81e13b5aa0969061dae7b4908677ae23f5aa08827eb0663110baa3cb142a292","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T06:57:25Z","title_canon_sha256":"9890579d3f1511f5950a2ab5abf718f33191ceb8c8abaca2208d2c7d17882b09"},"schema_version":"1.0","source":{"id":"2310.01452","kind":"arxiv","version":2}},"canonical_sha256":"ac1fa545062ce30e3fa0fb5008b1bfe6472c292a03302fb0c90d5b30cf72f8f0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ac1fa545062ce30e3fa0fb5008b1bfe6472c292a03302fb0c90d5b30cf72f8f0","first_computed_at":"2026-07-05T08:29:17.730712Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:29:17.730712Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7vK7qSZWEvz9XaeNUXuuNsHnubV8FU2Lli6nDZ6Kq6IbqKXreEjtdfztc0LI2+/gSEppzn5IC1iKhzTAnOp4AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:29:17.731190Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.01452","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f9efa4c7a16f0785c80cb4ba5a6602fc9d3427526f6259c80cbefcaa59b31d3b","sha256:24fe51a2c39004de769c22ec3b87316e1e1be63018630e48a5752554a2840e42"],"state_sha256":"0c5cf5b444c2be9c79e130e2fb16b07fb6ad7cfa54bb185b0a5deb67e03a5696"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hPChpwvlxiMChaHXY9UqDzAPei9ruZfZ1T5bPsp7t5S5K9IDXGvWrOZ3Rc0elRnGsIwZ7kgDM8fgjsbww2vnBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T03:02:28.740698Z","bundle_sha256":"5abfc13d8ed7617fbb7e54b5f443f5a092aa089e812f9fb9cde54010b4511902"}}