{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:WR42A6MNMIEANQZLMTRK3JZIER","short_pith_number":"pith:WR42A6MN","canonical_record":{"source":{"id":"2409.01586","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-09-03T03:59:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a383b97a494deb9199879819b323d3824c71cefa662fdf0b1a70b94cb3dbf073","abstract_canon_sha256":"599300368443dddddbc6402b408d5ab8c60ca2161753c4b161fe8a072360ef8b"},"schema_version":"1.0"},"canonical_sha256":"b479a0798d620806c32b64e2ada728245f93bf083a061720d71b265bcc398b7e","source":{"kind":"arxiv","id":"2409.01586","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.01586","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"arxiv_version","alias_value":"2409.01586v4","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.01586","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"pith_short_12","alias_value":"WR42A6MNMIEA","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"pith_short_16","alias_value":"WR42A6MNMIEANQZL","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"pith_short_8","alias_value":"WR42A6MN","created_at":"2026-07-05T10:32:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:WR42A6MNMIEANQZLMTRK3JZIER","target":"record","payload":{"canonical_record":{"source":{"id":"2409.01586","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-09-03T03:59:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a383b97a494deb9199879819b323d3824c71cefa662fdf0b1a70b94cb3dbf073","abstract_canon_sha256":"599300368443dddddbc6402b408d5ab8c60ca2161753c4b161fe8a072360ef8b"},"schema_version":"1.0"},"canonical_sha256":"b479a0798d620806c32b64e2ada728245f93bf083a061720d71b265bcc398b7e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:32:29.973400Z","signature_b64":"7Bru06bJmgL98lvD6Ju1W3V3+XB+vecCektJoRcCeeyNm8I74h3I+8fMZRzkSuKRa1PT6qgXxEmeSpSfHwqcDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b479a0798d620806c32b64e2ada728245f93bf083a061720d71b265bcc398b7e","last_reissued_at":"2026-07-05T10:32:29.972632Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:32:29.972632Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.01586","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:32:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L/cjdVstpOdn0na/1iQGSSTW56AMmV2dNt96pf/Vk53tCsKRuifNtJZ/iaTzI4jpqW4zXMBWnnt6coWuz3JwDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T04:16:58.782746Z"},"content_sha256":"323acef8cc301ac66aaaff8fe37ed5f75f567adfffc90379d472b1afb0dfcc9c","schema_version":"1.0","event_id":"sha256:323acef8cc301ac66aaaff8fe37ed5f75f567adfffc90379d472b1afb0dfcc9c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:WR42A6MNMIEANQZLMTRK3JZIER","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Fatih Ilhan, Ling Liu, Selim Furkan Tekin, Sihao Hu, Tiansheng Huang","submitted_at":"2024-09-03T03:59:22Z","abstract_excerpt":"Harmful fine-tuning attack poses serious safety concerns for large language models' fine-tuning-as-a-service. While existing defenses have been proposed to mitigate the issue, their performances are still far away from satisfactory, and the root cause of the problem has not been fully recovered. To this end, we in this paper show that harmful perturbation over the model weights could be a probable cause of alignment-broken. In order to attenuate the negative impact of harmful perturbation, we propose an alignment-stage solution, dubbed Booster. Technically, along with the original alignment lo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.01586","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.01586/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:32:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0X1scUDm7Fjczfrw9OuXMP8Z6VmzLBw+jtqcwq6QaWDsLKcZGFeOBev4E/3GE8BkjOVUejjGwq01ljrcIhQcDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T04:16:58.783324Z"},"content_sha256":"7cd64ee39512b3323fc6556bed2424b0dc333350f5473b06002c103a18331b94","schema_version":"1.0","event_id":"sha256:7cd64ee39512b3323fc6556bed2424b0dc333350f5473b06002c103a18331b94"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WR42A6MNMIEANQZLMTRK3JZIER/bundle.json","state_url":"https://pith.science/pith/WR42A6MNMIEANQZLMTRK3JZIER/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WR42A6MNMIEANQZLMTRK3JZIER/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T04:16:58Z","links":{"resolver":"https://pith.science/pith/WR42A6MNMIEANQZLMTRK3JZIER","bundle":"https://pith.science/pith/WR42A6MNMIEANQZLMTRK3JZIER/bundle.json","state":"https://pith.science/pith/WR42A6MNMIEANQZLMTRK3JZIER/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WR42A6MNMIEANQZLMTRK3JZIER/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WR42A6MNMIEANQZLMTRK3JZIER","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"599300368443dddddbc6402b408d5ab8c60ca2161753c4b161fe8a072360ef8b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-09-03T03:59:22Z","title_canon_sha256":"a383b97a494deb9199879819b323d3824c71cefa662fdf0b1a70b94cb3dbf073"},"schema_version":"1.0","source":{"id":"2409.01586","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.01586","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"arxiv_version","alias_value":"2409.01586v4","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.01586","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"pith_short_12","alias_value":"WR42A6MNMIEA","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"pith_short_16","alias_value":"WR42A6MNMIEANQZL","created_at":"2026-07-05T10:32:29Z"},{"alias_kind":"pith_short_8","alias_value":"WR42A6MN","created_at":"2026-07-05T10:32:29Z"}],"graph_snapshots":[{"event_id":"sha256:7cd64ee39512b3323fc6556bed2424b0dc333350f5473b06002c103a18331b94","target":"graph","created_at":"2026-07-05T10:32:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.01586/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Harmful fine-tuning attack poses serious safety concerns for large language models' fine-tuning-as-a-service. While existing defenses have been proposed to mitigate the issue, their performances are still far away from satisfactory, and the root cause of the problem has not been fully recovered. To this end, we in this paper show that harmful perturbation over the model weights could be a probable cause of alignment-broken. In order to attenuate the negative impact of harmful perturbation, we propose an alignment-stage solution, dubbed Booster. Technically, along with the original alignment lo","authors_text":"Fatih Ilhan, Ling Liu, Selim Furkan Tekin, Sihao Hu, Tiansheng Huang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-09-03T03:59:22Z","title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.01586","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:323acef8cc301ac66aaaff8fe37ed5f75f567adfffc90379d472b1afb0dfcc9c","target":"record","created_at":"2026-07-05T10:32:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"599300368443dddddbc6402b408d5ab8c60ca2161753c4b161fe8a072360ef8b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-09-03T03:59:22Z","title_canon_sha256":"a383b97a494deb9199879819b323d3824c71cefa662fdf0b1a70b94cb3dbf073"},"schema_version":"1.0","source":{"id":"2409.01586","kind":"arxiv","version":4}},"canonical_sha256":"b479a0798d620806c32b64e2ada728245f93bf083a061720d71b265bcc398b7e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b479a0798d620806c32b64e2ada728245f93bf083a061720d71b265bcc398b7e","first_computed_at":"2026-07-05T10:32:29.972632Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:32:29.972632Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7Bru06bJmgL98lvD6Ju1W3V3+XB+vecCektJoRcCeeyNm8I74h3I+8fMZRzkSuKRa1PT6qgXxEmeSpSfHwqcDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:32:29.973400Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.01586","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:323acef8cc301ac66aaaff8fe37ed5f75f567adfffc90379d472b1afb0dfcc9c","sha256:7cd64ee39512b3323fc6556bed2424b0dc333350f5473b06002c103a18331b94"],"state_sha256":"46ebe3e010510f511d0bc76ff955da9d27e950710477853b4e0696441a29f870"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DAskqxUwcHU+SPOxiAr8wLH4q66cMbkhvrCpbs6I7YKkebTqwd6VtTwwmfRG98awP1ZIgY4go+VBzC2RNRJTCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T04:16:58.787151Z","bundle_sha256":"1a508e4c1563f0b086a21c2ed796f2b5b239a6691538f77699a5818d873737cd"}}