{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:YFFWS2GKEXM2GW5RNZUAW5DY2X","short_pith_number":"pith:YFFWS2GK","canonical_record":{"source":{"id":"2502.02958","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-05T07:51:32Z","cross_cats_sorted":[],"title_canon_sha256":"dd2e477dc78af7fc06657a9f249290cadea1550466f8f75b06ebf8529cae1808","abstract_canon_sha256":"1216da26902df806a53ef4b02dbc47e38cb2a523c0bfa81649743d041a1b1195"},"schema_version":"1.0"},"canonical_sha256":"c14b6968ca25d9a35bb16e680b7478d5f43a9777d7da40a8ecf97ab57a21e78e","source":{"kind":"arxiv","id":"2502.02958","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.02958","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"arxiv_version","alias_value":"2502.02958v3","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.02958","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"pith_short_12","alias_value":"YFFWS2GKEXM2","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"pith_short_16","alias_value":"YFFWS2GKEXM2GW5R","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"pith_short_8","alias_value":"YFFWS2GK","created_at":"2026-07-05T11:22:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:YFFWS2GKEXM2GW5RNZUAW5DY2X","target":"record","payload":{"canonical_record":{"source":{"id":"2502.02958","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-05T07:51:32Z","cross_cats_sorted":[],"title_canon_sha256":"dd2e477dc78af7fc06657a9f249290cadea1550466f8f75b06ebf8529cae1808","abstract_canon_sha256":"1216da26902df806a53ef4b02dbc47e38cb2a523c0bfa81649743d041a1b1195"},"schema_version":"1.0"},"canonical_sha256":"c14b6968ca25d9a35bb16e680b7478d5f43a9777d7da40a8ecf97ab57a21e78e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:22:36.307557Z","signature_b64":"RYcudL04bZ23lAr56K2gADF/lv/k3/jBwTka+HvzaHi29MlKYeZPYjR44undlgeSY3wBZAEUakG4qthQdB0kCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c14b6968ca25d9a35bb16e680b7478d5f43a9777d7da40a8ecf97ab57a21e78e","last_reissued_at":"2026-07-05T11:22:36.306952Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:22:36.306952Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.02958","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:22:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MpsainNFpFK4msynizJA3cGjZ5ObEUAr8gF9gIUtr8kTH3RBTKpNilZJwfd+1/GGJ78MMlzv26tQ6S1oMsWwBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:39:05.329224Z"},"content_sha256":"e901461faeea0fe2936de713f2a335dfa6540d5bd23567542ff4e99aa03db339","schema_version":"1.0","event_id":"sha256:e901461faeea0fe2936de713f2a335dfa6540d5bd23567542ff4e99aa03db339"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:YFFWS2GKEXM2GW5RNZUAW5DY2X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Position: Editing Large Language Models Poses Serious Safety Risks","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Christin Seifert, Daniel Braun, J\\\"org Schl\\\"otterer, Paul Youssef, Zhixue Zhao","submitted_at":"2025-02-05T07:51:32Z","abstract_excerpt":"Large Language Models (LLMs) contain large amounts of facts about the world. These facts can become outdated over time, which has led to the development of knowledge editing methods (KEs) that can change specific facts in LLMs with limited side effects. This position paper argues that editing LLMs poses serious safety risks that have been largely overlooked. First, we note the fact that KEs are widely available, computationally inexpensive, highly performant, and stealthy makes them an attractive tool for malicious actors. Second, we discuss malicious use cases of KEs, showing how KEs can be e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.02958","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.02958/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:22:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O0KuWjnsr5RlIFVv2Y7WWWPsN+qeiVb3c63kZT40LKvnp1LysctHgqncB5HmSp0NZKQ+qXJXVuwD5cdHKiVdCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:39:05.329801Z"},"content_sha256":"d81bcc88e27db32d400710ac853814881217c439acc2c5dd7aaf4567b527e2d1","schema_version":"1.0","event_id":"sha256:d81bcc88e27db32d400710ac853814881217c439acc2c5dd7aaf4567b527e2d1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YFFWS2GKEXM2GW5RNZUAW5DY2X/bundle.json","state_url":"https://pith.science/pith/YFFWS2GKEXM2GW5RNZUAW5DY2X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YFFWS2GKEXM2GW5RNZUAW5DY2X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T09:39:05Z","links":{"resolver":"https://pith.science/pith/YFFWS2GKEXM2GW5RNZUAW5DY2X","bundle":"https://pith.science/pith/YFFWS2GKEXM2GW5RNZUAW5DY2X/bundle.json","state":"https://pith.science/pith/YFFWS2GKEXM2GW5RNZUAW5DY2X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YFFWS2GKEXM2GW5RNZUAW5DY2X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YFFWS2GKEXM2GW5RNZUAW5DY2X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1216da26902df806a53ef4b02dbc47e38cb2a523c0bfa81649743d041a1b1195","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-05T07:51:32Z","title_canon_sha256":"dd2e477dc78af7fc06657a9f249290cadea1550466f8f75b06ebf8529cae1808"},"schema_version":"1.0","source":{"id":"2502.02958","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.02958","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"arxiv_version","alias_value":"2502.02958v3","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.02958","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"pith_short_12","alias_value":"YFFWS2GKEXM2","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"pith_short_16","alias_value":"YFFWS2GKEXM2GW5R","created_at":"2026-07-05T11:22:36Z"},{"alias_kind":"pith_short_8","alias_value":"YFFWS2GK","created_at":"2026-07-05T11:22:36Z"}],"graph_snapshots":[{"event_id":"sha256:d81bcc88e27db32d400710ac853814881217c439acc2c5dd7aaf4567b527e2d1","target":"graph","created_at":"2026-07-05T11:22:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.02958/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) contain large amounts of facts about the world. These facts can become outdated over time, which has led to the development of knowledge editing methods (KEs) that can change specific facts in LLMs with limited side effects. This position paper argues that editing LLMs poses serious safety risks that have been largely overlooked. First, we note the fact that KEs are widely available, computationally inexpensive, highly performant, and stealthy makes them an attractive tool for malicious actors. Second, we discuss malicious use cases of KEs, showing how KEs can be e","authors_text":"Christin Seifert, Daniel Braun, J\\\"org Schl\\\"otterer, Paul Youssef, Zhixue Zhao","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-05T07:51:32Z","title":"Position: Editing Large Language Models Poses Serious Safety Risks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.02958","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e901461faeea0fe2936de713f2a335dfa6540d5bd23567542ff4e99aa03db339","target":"record","created_at":"2026-07-05T11:22:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1216da26902df806a53ef4b02dbc47e38cb2a523c0bfa81649743d041a1b1195","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-05T07:51:32Z","title_canon_sha256":"dd2e477dc78af7fc06657a9f249290cadea1550466f8f75b06ebf8529cae1808"},"schema_version":"1.0","source":{"id":"2502.02958","kind":"arxiv","version":3}},"canonical_sha256":"c14b6968ca25d9a35bb16e680b7478d5f43a9777d7da40a8ecf97ab57a21e78e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c14b6968ca25d9a35bb16e680b7478d5f43a9777d7da40a8ecf97ab57a21e78e","first_computed_at":"2026-07-05T11:22:36.306952Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:22:36.306952Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RYcudL04bZ23lAr56K2gADF/lv/k3/jBwTka+HvzaHi29MlKYeZPYjR44undlgeSY3wBZAEUakG4qthQdB0kCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:22:36.307557Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.02958","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e901461faeea0fe2936de713f2a335dfa6540d5bd23567542ff4e99aa03db339","sha256:d81bcc88e27db32d400710ac853814881217c439acc2c5dd7aaf4567b527e2d1"],"state_sha256":"40ee87d63ae7f6f5e0f68cc940816496d9f0890ecbf0d57c4437d96c1d0c77ae"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8kvyC+NU1oF05BESx6xi9TB4vVET/SVTI2IIHLnps0MoZ5PPospiAGrYKWWXop2gqrQDePyHvIzmZ0Zr849bBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T09:39:05.334019Z","bundle_sha256":"dcfdfe1ab2a0513382ddab7b1e55ac39ed08ef00eb06fdbea0373a80d4414a01"}}