{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XZRSKUGO732OI4GAUDRH6XYWFQ","short_pith_number":"pith:XZRSKUGO","canonical_record":{"source":{"id":"2412.19512","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-27T08:03:22Z","cross_cats_sorted":[],"title_canon_sha256":"7340b647e63c8f711c6e485240497ad19cb2c6a0d908f4c0a602f27a217e946e","abstract_canon_sha256":"c0be43cf525cc1cbc751e0bbad683f2863afef9d67b66226b1e9c90cdf756919"},"schema_version":"1.0"},"canonical_sha256":"be632550cefef4e470c0a0e27f5f162c3d773067ad91cd82f50c473e4c4073cb","source":{"kind":"arxiv","id":"2412.19512","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.19512","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"arxiv_version","alias_value":"2412.19512v3","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.19512","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"pith_short_12","alias_value":"XZRSKUGO732O","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"pith_short_16","alias_value":"XZRSKUGO732OI4GA","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"pith_short_8","alias_value":"XZRSKUGO","created_at":"2026-07-05T12:00:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XZRSKUGO732OI4GAUDRH6XYWFQ","target":"record","payload":{"canonical_record":{"source":{"id":"2412.19512","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-27T08:03:22Z","cross_cats_sorted":[],"title_canon_sha256":"7340b647e63c8f711c6e485240497ad19cb2c6a0d908f4c0a602f27a217e946e","abstract_canon_sha256":"c0be43cf525cc1cbc751e0bbad683f2863afef9d67b66226b1e9c90cdf756919"},"schema_version":"1.0"},"canonical_sha256":"be632550cefef4e470c0a0e27f5f162c3d773067ad91cd82f50c473e4c4073cb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:00:26.378715Z","signature_b64":"utsbBCGvReJSC71iovhjarDlYVvFElth7g3ybBM1zSMnTnmdgZv+/LLEQHFFjRxj/morsVDh1x9L1sgOy3YIDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"be632550cefef4e470c0a0e27f5f162c3d773067ad91cd82f50c473e4c4073cb","last_reissued_at":"2026-07-05T12:00:26.378165Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:00:26.378165Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.19512","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:00:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qigog8pUBwQiFee2vy392Yu/IH1VNbUWpoEPz+ZyQoZH7FgLGSCV9UNPbqIaOBRyk50iNL/2dbPAaV10vDEeAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T21:55:03.116523Z"},"content_sha256":"3d0a4236e229402f59a642669abfffd0773233c176aec69a233e8797a3ac6c47","schema_version":"1.0","event_id":"sha256:3d0a4236e229402f59a642669abfffd0773233c176aec69a233e8797a3ac6c47"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XZRSKUGO732OI4GAUDRH6XYWFQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Safeguard Fine-Tuned LLMs Through Pre- and Post-Tuning Model Merging","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Hsuan Su, Hua Farn, Hung-yi Lee, Saurav Sahay, Shachi H Kumar, Shang-Tse Chen","submitted_at":"2024-12-27T08:03:22Z","abstract_excerpt":"Fine-tuning large language models (LLMs) for downstream tasks often leads to catastrophic forgetting, notably degrading the safety of originally aligned models. While some existing methods attempt to restore safety by incorporating additional safety data, the quality of such data typically falls short of that used in the original alignment process. Moreover, these high-quality safety datasets are generally inaccessible, making it difficult to fully recover the model's original safety. We ask: How can we preserve safety while improving downstream task performance without additional safety data?"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.19512","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.19512/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:00:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"793YE/Dp7MT0yuaEylJqzda+4Phq681zhbWrl1slCuO9LdhvzxIW1gXoK861X37lyps+Gl6uMBt5yEVvnS+MAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T21:55:03.117532Z"},"content_sha256":"69403ea93d0afcba5f0ec32f192722741b3f9cd9fb04f2deeb50c1bbc5e70640","schema_version":"1.0","event_id":"sha256:69403ea93d0afcba5f0ec32f192722741b3f9cd9fb04f2deeb50c1bbc5e70640"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XZRSKUGO732OI4GAUDRH6XYWFQ/bundle.json","state_url":"https://pith.science/pith/XZRSKUGO732OI4GAUDRH6XYWFQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XZRSKUGO732OI4GAUDRH6XYWFQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T21:55:03Z","links":{"resolver":"https://pith.science/pith/XZRSKUGO732OI4GAUDRH6XYWFQ","bundle":"https://pith.science/pith/XZRSKUGO732OI4GAUDRH6XYWFQ/bundle.json","state":"https://pith.science/pith/XZRSKUGO732OI4GAUDRH6XYWFQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XZRSKUGO732OI4GAUDRH6XYWFQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XZRSKUGO732OI4GAUDRH6XYWFQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c0be43cf525cc1cbc751e0bbad683f2863afef9d67b66226b1e9c90cdf756919","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-27T08:03:22Z","title_canon_sha256":"7340b647e63c8f711c6e485240497ad19cb2c6a0d908f4c0a602f27a217e946e"},"schema_version":"1.0","source":{"id":"2412.19512","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.19512","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"arxiv_version","alias_value":"2412.19512v3","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.19512","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"pith_short_12","alias_value":"XZRSKUGO732O","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"pith_short_16","alias_value":"XZRSKUGO732OI4GA","created_at":"2026-07-05T12:00:26Z"},{"alias_kind":"pith_short_8","alias_value":"XZRSKUGO","created_at":"2026-07-05T12:00:26Z"}],"graph_snapshots":[{"event_id":"sha256:69403ea93d0afcba5f0ec32f192722741b3f9cd9fb04f2deeb50c1bbc5e70640","target":"graph","created_at":"2026-07-05T12:00:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.19512/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Fine-tuning large language models (LLMs) for downstream tasks often leads to catastrophic forgetting, notably degrading the safety of originally aligned models. While some existing methods attempt to restore safety by incorporating additional safety data, the quality of such data typically falls short of that used in the original alignment process. Moreover, these high-quality safety datasets are generally inaccessible, making it difficult to fully recover the model's original safety. We ask: How can we preserve safety while improving downstream task performance without additional safety data?","authors_text":"Hsuan Su, Hua Farn, Hung-yi Lee, Saurav Sahay, Shachi H Kumar, Shang-Tse Chen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-27T08:03:22Z","title":"Safeguard Fine-Tuned LLMs Through Pre- and Post-Tuning Model Merging"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.19512","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3d0a4236e229402f59a642669abfffd0773233c176aec69a233e8797a3ac6c47","target":"record","created_at":"2026-07-05T12:00:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c0be43cf525cc1cbc751e0bbad683f2863afef9d67b66226b1e9c90cdf756919","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-27T08:03:22Z","title_canon_sha256":"7340b647e63c8f711c6e485240497ad19cb2c6a0d908f4c0a602f27a217e946e"},"schema_version":"1.0","source":{"id":"2412.19512","kind":"arxiv","version":3}},"canonical_sha256":"be632550cefef4e470c0a0e27f5f162c3d773067ad91cd82f50c473e4c4073cb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"be632550cefef4e470c0a0e27f5f162c3d773067ad91cd82f50c473e4c4073cb","first_computed_at":"2026-07-05T12:00:26.378165Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:00:26.378165Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"utsbBCGvReJSC71iovhjarDlYVvFElth7g3ybBM1zSMnTnmdgZv+/LLEQHFFjRxj/morsVDh1x9L1sgOy3YIDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:00:26.378715Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.19512","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3d0a4236e229402f59a642669abfffd0773233c176aec69a233e8797a3ac6c47","sha256:69403ea93d0afcba5f0ec32f192722741b3f9cd9fb04f2deeb50c1bbc5e70640"],"state_sha256":"88c6cd3c059df6d8ab6a48e755a1469dc12d567f7fa7b4477cc670cb3bde0264"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lQ1qZPJoi1M2YDpz0RIgqKnTl/FNtUo7XYJhTEIJNQE8g+yCTkpJq2actRZ0t9YecMBtAu2rPxCgSIkLJYeSBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T21:55:03.123649Z","bundle_sha256":"8fe1f88cbf309e5a77f7095b518d2a899fa828d5ba3eea90d287c3f303cc8083"}}