{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:Y6P4JOEONJOVSDFC5FBCQUA72A","short_pith_number":"pith:Y6P4JOEO","canonical_record":{"source":{"id":"2211.02878","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-11-05T11:19:47Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"c56c712b4cfe6852abb5b64f2aa6f6b0fc8aa76339c52c73e67c5b259bbe26d4","abstract_canon_sha256":"5d5260e61e426edf9e5514913b6ce5eb83e6f7ddfd29bf3ea3d95dedef82be5f"},"schema_version":"1.0"},"canonical_sha256":"c79fc4b88e6a5d590ca2e94228501fd020ff79a973f6d57a341d13a05465579c","source":{"kind":"arxiv","id":"2211.02878","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.02878","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"arxiv_version","alias_value":"2211.02878v1","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.02878","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_12","alias_value":"Y6P4JOEONJOV","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_16","alias_value":"Y6P4JOEONJOVSDFC","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_8","alias_value":"Y6P4JOEO","created_at":"2026-07-05T05:13:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:Y6P4JOEONJOVSDFC5FBCQUA72A","target":"record","payload":{"canonical_record":{"source":{"id":"2211.02878","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-11-05T11:19:47Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"c56c712b4cfe6852abb5b64f2aa6f6b0fc8aa76339c52c73e67c5b259bbe26d4","abstract_canon_sha256":"5d5260e61e426edf9e5514913b6ce5eb83e6f7ddfd29bf3ea3d95dedef82be5f"},"schema_version":"1.0"},"canonical_sha256":"c79fc4b88e6a5d590ca2e94228501fd020ff79a973f6d57a341d13a05465579c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:13:41.491491Z","signature_b64":"kcq/NO2o+mZz0SsvwXW9tf9s7252Jdo1RLCFPLC8Dxf5wgz64FHCEJU4TXpdtwWLFR9SeiE2J8LdckXRZkmoBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c79fc4b88e6a5d590ca2e94228501fd020ff79a973f6d57a341d13a05465579c","last_reissued_at":"2026-07-05T05:13:41.491036Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:13:41.491036Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.02878","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SxP4hiLriUPkPS7a9jiFCwQnzvrywrBDIbxu4mHOlxJigIe7JCnu6PsdBH8BgSw6o7wpGygI8oMkuCmnwizOBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:25:30.047534Z"},"content_sha256":"b5f47248fc42b00d98f3dd2ada075f43158be4ac377b58898f1f158bd4647c25","schema_version":"1.0","event_id":"sha256:b5f47248fc42b00d98f3dd2ada075f43158be4ac377b58898f1f158bd4647c25"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:Y6P4JOEONJOVSDFC5FBCQUA72A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Dang Minh Nguyen, Luu Anh Tuan","submitted_at":"2022-11-05T11:19:47Z","abstract_excerpt":"Recent studies on adversarial images have shown that they tend to leave the underlying low-dimensional data manifold, making them significantly more challenging for current models to make correct predictions. This so-called off-manifold conjecture has inspired a novel line of defenses against adversarial attacks on images. In this study, we find a similar phenomenon occurs in the contextualized embedding space induced by pretrained language models, in which adversarial texts tend to have their embeddings diverge from the manifold of natural ones. Based on this finding, we propose Textual Manif"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.02878","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.02878/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kqn5XErKbpwv57rKIe+OWB6TJx2f8x5foxMd9z9sbG55oOn7Y19L4nRh9oWvtGuP91PXHM1L++l6i1wQ2/gBDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:25:30.048526Z"},"content_sha256":"80315b5fac633de70bc380fa0cc22d3961d3702188868c4161b5d4ef6d619347","schema_version":"1.0","event_id":"sha256:80315b5fac633de70bc380fa0cc22d3961d3702188868c4161b5d4ef6d619347"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y6P4JOEONJOVSDFC5FBCQUA72A/bundle.json","state_url":"https://pith.science/pith/Y6P4JOEONJOVSDFC5FBCQUA72A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y6P4JOEONJOVSDFC5FBCQUA72A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T01:25:30Z","links":{"resolver":"https://pith.science/pith/Y6P4JOEONJOVSDFC5FBCQUA72A","bundle":"https://pith.science/pith/Y6P4JOEONJOVSDFC5FBCQUA72A/bundle.json","state":"https://pith.science/pith/Y6P4JOEONJOVSDFC5FBCQUA72A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y6P4JOEONJOVSDFC5FBCQUA72A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:Y6P4JOEONJOVSDFC5FBCQUA72A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5d5260e61e426edf9e5514913b6ce5eb83e6f7ddfd29bf3ea3d95dedef82be5f","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-11-05T11:19:47Z","title_canon_sha256":"c56c712b4cfe6852abb5b64f2aa6f6b0fc8aa76339c52c73e67c5b259bbe26d4"},"schema_version":"1.0","source":{"id":"2211.02878","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.02878","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"arxiv_version","alias_value":"2211.02878v1","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.02878","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_12","alias_value":"Y6P4JOEONJOV","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_16","alias_value":"Y6P4JOEONJOVSDFC","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_8","alias_value":"Y6P4JOEO","created_at":"2026-07-05T05:13:41Z"}],"graph_snapshots":[{"event_id":"sha256:80315b5fac633de70bc380fa0cc22d3961d3702188868c4161b5d4ef6d619347","target":"graph","created_at":"2026-07-05T05:13:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.02878/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies on adversarial images have shown that they tend to leave the underlying low-dimensional data manifold, making them significantly more challenging for current models to make correct predictions. This so-called off-manifold conjecture has inspired a novel line of defenses against adversarial attacks on images. In this study, we find a similar phenomenon occurs in the contextualized embedding space induced by pretrained language models, in which adversarial texts tend to have their embeddings diverge from the manifold of natural ones. Based on this finding, we propose Textual Manif","authors_text":"Dang Minh Nguyen, Luu Anh Tuan","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-11-05T11:19:47Z","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.02878","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b5f47248fc42b00d98f3dd2ada075f43158be4ac377b58898f1f158bd4647c25","target":"record","created_at":"2026-07-05T05:13:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5d5260e61e426edf9e5514913b6ce5eb83e6f7ddfd29bf3ea3d95dedef82be5f","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-11-05T11:19:47Z","title_canon_sha256":"c56c712b4cfe6852abb5b64f2aa6f6b0fc8aa76339c52c73e67c5b259bbe26d4"},"schema_version":"1.0","source":{"id":"2211.02878","kind":"arxiv","version":1}},"canonical_sha256":"c79fc4b88e6a5d590ca2e94228501fd020ff79a973f6d57a341d13a05465579c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c79fc4b88e6a5d590ca2e94228501fd020ff79a973f6d57a341d13a05465579c","first_computed_at":"2026-07-05T05:13:41.491036Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:13:41.491036Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kcq/NO2o+mZz0SsvwXW9tf9s7252Jdo1RLCFPLC8Dxf5wgz64FHCEJU4TXpdtwWLFR9SeiE2J8LdckXRZkmoBg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:13:41.491491Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.02878","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b5f47248fc42b00d98f3dd2ada075f43158be4ac377b58898f1f158bd4647c25","sha256:80315b5fac633de70bc380fa0cc22d3961d3702188868c4161b5d4ef6d619347"],"state_sha256":"df282170849dea620ce569216b66efce2eac8672a921274f7ed7387a5e6e28cf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OYg8/N4xIRj6JaqHf/5D9VRYkAXYkSoVLVErwH5WGSY3fpD8xEfPMOpnLs01oUmNUtLCUpxrZPOM9/uR2ptXBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T01:25:30.105182Z","bundle_sha256":"28307e8862ec54c6f8f1e70205fb346eb72895b2194cef47cb23720107c1b515"}}