{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:W3FSSJ6CGYI2QVJFWSNQ3OZCTO","short_pith_number":"pith:W3FSSJ6C","canonical_record":{"source":{"id":"2502.05374","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T23:03:55Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"c74580974e8522b8f4dbfe3c3a2a4cd72da7543b0d37ed3433e2c7e60055d5f5","abstract_canon_sha256":"4177f31da9dfc04e0dd64c5f0f59e79dd28d78c645e04be04f3549026964c5f1"},"schema_version":"1.0"},"canonical_sha256":"b6cb2927c23611a85525b49b0dbb229b85a20152e4cbe5d4fce2ecff588626b6","source":{"kind":"arxiv","id":"2502.05374","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.05374","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"arxiv_version","alias_value":"2502.05374v4","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.05374","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"pith_short_12","alias_value":"W3FSSJ6CGYI2","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"pith_short_16","alias_value":"W3FSSJ6CGYI2QVJF","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"pith_short_8","alias_value":"W3FSSJ6C","created_at":"2026-07-05T11:10:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:W3FSSJ6CGYI2QVJFWSNQ3OZCTO","target":"record","payload":{"canonical_record":{"source":{"id":"2502.05374","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T23:03:55Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"c74580974e8522b8f4dbfe3c3a2a4cd72da7543b0d37ed3433e2c7e60055d5f5","abstract_canon_sha256":"4177f31da9dfc04e0dd64c5f0f59e79dd28d78c645e04be04f3549026964c5f1"},"schema_version":"1.0"},"canonical_sha256":"b6cb2927c23611a85525b49b0dbb229b85a20152e4cbe5d4fce2ecff588626b6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:10:04.564925Z","signature_b64":"9mmXKWtl4Ko0j8eZVWu2DWvMPQSFK3suoYpsH4OaoICaVmDUsamsjG5KjwFrPpN6sFgHKQDbjOj4yzrxlXU6DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b6cb2927c23611a85525b49b0dbb229b85a20152e4cbe5d4fce2ecff588626b6","last_reissued_at":"2026-07-05T11:10:04.563466Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:10:04.563466Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.05374","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9Vpo/gnlp1SjoppVzkKl2DCFrj010P5wc1JAAEEF/cggCHkc02pxtn0XTDXT2dhR7SHE03ovjE8tk/fO8ofMDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T11:46:54.460536Z"},"content_sha256":"b1ab03f6bf077f9f2a5f08669b3419801f25c91bcbce65172b8bc9816bee9c21","schema_version":"1.0","event_id":"sha256:b1ab03f6bf077f9f2a5f08669b3419801f25c91bcbce65172b8bc9816bee9c21"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:W3FSSJ6CGYI2QVJFWSNQ3OZCTO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.LG","authors_text":"Anil Ramakrishna, Chongyu Fan, Jinghan Jia, Mingyi Hong, Sijia Liu, Yihua Zhang","submitted_at":"2025-02-07T23:03:55Z","abstract_excerpt":"The LLM unlearning technique has recently been introduced to comply with data regulations and address the safety and ethical concerns of LLMs by removing the undesired data-model influence. However, state-of-the-art unlearning methods face a critical vulnerability: they are susceptible to ``relearning'' the removed information from a small number of forget data points, known as relearning attacks. In this paper, we systematically investigate how to make unlearned models robust against such attacks. For the first time, we establish a connection between robust unlearning and sharpness-aware mini"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.05374","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.05374/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KnPLSCL+SOxuFRaQNdNqGU/v3RKVl4qvVkp1o1pDOzcgNzM/bL3Jol3lfSNUHaSjha4jAm1Q46B3hSFA60ddCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T11:46:54.461113Z"},"content_sha256":"b2e5de81a5967fd6cd8d30d2ff9415205cbeebed758e977d05c03222e9bd0ac8","schema_version":"1.0","event_id":"sha256:b2e5de81a5967fd6cd8d30d2ff9415205cbeebed758e977d05c03222e9bd0ac8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W3FSSJ6CGYI2QVJFWSNQ3OZCTO/bundle.json","state_url":"https://pith.science/pith/W3FSSJ6CGYI2QVJFWSNQ3OZCTO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W3FSSJ6CGYI2QVJFWSNQ3OZCTO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T11:46:54Z","links":{"resolver":"https://pith.science/pith/W3FSSJ6CGYI2QVJFWSNQ3OZCTO","bundle":"https://pith.science/pith/W3FSSJ6CGYI2QVJFWSNQ3OZCTO/bundle.json","state":"https://pith.science/pith/W3FSSJ6CGYI2QVJFWSNQ3OZCTO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W3FSSJ6CGYI2QVJFWSNQ3OZCTO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:W3FSSJ6CGYI2QVJFWSNQ3OZCTO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4177f31da9dfc04e0dd64c5f0f59e79dd28d78c645e04be04f3549026964c5f1","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T23:03:55Z","title_canon_sha256":"c74580974e8522b8f4dbfe3c3a2a4cd72da7543b0d37ed3433e2c7e60055d5f5"},"schema_version":"1.0","source":{"id":"2502.05374","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.05374","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"arxiv_version","alias_value":"2502.05374v4","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.05374","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"pith_short_12","alias_value":"W3FSSJ6CGYI2","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"pith_short_16","alias_value":"W3FSSJ6CGYI2QVJF","created_at":"2026-07-05T11:10:04Z"},{"alias_kind":"pith_short_8","alias_value":"W3FSSJ6C","created_at":"2026-07-05T11:10:04Z"}],"graph_snapshots":[{"event_id":"sha256:b2e5de81a5967fd6cd8d30d2ff9415205cbeebed758e977d05c03222e9bd0ac8","target":"graph","created_at":"2026-07-05T11:10:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.05374/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The LLM unlearning technique has recently been introduced to comply with data regulations and address the safety and ethical concerns of LLMs by removing the undesired data-model influence. However, state-of-the-art unlearning methods face a critical vulnerability: they are susceptible to ``relearning'' the removed information from a small number of forget data points, known as relearning attacks. In this paper, we systematically investigate how to make unlearned models robust against such attacks. For the first time, we establish a connection between robust unlearning and sharpness-aware mini","authors_text":"Anil Ramakrishna, Chongyu Fan, Jinghan Jia, Mingyi Hong, Sijia Liu, Yihua Zhang","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T23:03:55Z","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.05374","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b1ab03f6bf077f9f2a5f08669b3419801f25c91bcbce65172b8bc9816bee9c21","target":"record","created_at":"2026-07-05T11:10:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4177f31da9dfc04e0dd64c5f0f59e79dd28d78c645e04be04f3549026964c5f1","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T23:03:55Z","title_canon_sha256":"c74580974e8522b8f4dbfe3c3a2a4cd72da7543b0d37ed3433e2c7e60055d5f5"},"schema_version":"1.0","source":{"id":"2502.05374","kind":"arxiv","version":4}},"canonical_sha256":"b6cb2927c23611a85525b49b0dbb229b85a20152e4cbe5d4fce2ecff588626b6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b6cb2927c23611a85525b49b0dbb229b85a20152e4cbe5d4fce2ecff588626b6","first_computed_at":"2026-07-05T11:10:04.563466Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:10:04.563466Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9mmXKWtl4Ko0j8eZVWu2DWvMPQSFK3suoYpsH4OaoICaVmDUsamsjG5KjwFrPpN6sFgHKQDbjOj4yzrxlXU6DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:10:04.564925Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.05374","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b1ab03f6bf077f9f2a5f08669b3419801f25c91bcbce65172b8bc9816bee9c21","sha256:b2e5de81a5967fd6cd8d30d2ff9415205cbeebed758e977d05c03222e9bd0ac8"],"state_sha256":"2f090bac3cd6b7d9b0d9f87438f9bc8ce09984b8a82b415843b142347e5fe91c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vi2gCgg6y7qSTFD+YZYDamsT0eL0lpWxdCSTMlRvnHDrWj6tZSlS6slXgmOJOJm2O3ppJ2FbMsnxiNQ9INVeBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T11:46:54.466785Z","bundle_sha256":"a4b1a3ba381e05d0ca59a1a98eb1eb6cdaaed9d341e299e433acfc424e61bef4"}}