{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:Z2DRCOJIUJV265OCX4IQ3TFLV5","short_pith_number":"pith:Z2DRCOJI","canonical_record":{"source":{"id":"2508.11053","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-14T20:28:48Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"095e324e8d18fe4c2d8f2375dd3d1518920937043b0bf28f00b282cfc0f68c35","abstract_canon_sha256":"98070f60f92a7778cf6fb26fd6197ee4062e20f40174324d5d6515917b3fad50"},"schema_version":"1.0"},"canonical_sha256":"ce87113928a26baf75c2bf110dccabaf4bcc8288a78cf4bfef938b3b469c308b","source":{"kind":"arxiv","id":"2508.11053","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.11053","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"arxiv_version","alias_value":"2508.11053v1","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.11053","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"pith_short_12","alias_value":"Z2DRCOJIUJV2","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"pith_short_16","alias_value":"Z2DRCOJIUJV265OC","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"pith_short_8","alias_value":"Z2DRCOJI","created_at":"2026-07-05T11:54:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:Z2DRCOJIUJV265OCX4IQ3TFLV5","target":"record","payload":{"canonical_record":{"source":{"id":"2508.11053","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-14T20:28:48Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"095e324e8d18fe4c2d8f2375dd3d1518920937043b0bf28f00b282cfc0f68c35","abstract_canon_sha256":"98070f60f92a7778cf6fb26fd6197ee4062e20f40174324d5d6515917b3fad50"},"schema_version":"1.0"},"canonical_sha256":"ce87113928a26baf75c2bf110dccabaf4bcc8288a78cf4bfef938b3b469c308b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:54:17.566770Z","signature_b64":"mgaEpQExSsLV7FoI/1J9h9zGm2QOKIPuar0iCZoVcC8s3/NdkPEtI+idUoWC20xHgTaUbtglwIyswnxykMMPBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ce87113928a26baf75c2bf110dccabaf4bcc8288a78cf4bfef938b3b469c308b","last_reissued_at":"2026-07-05T11:54:17.566333Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:54:17.566333Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.11053","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:54:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QMnonB9ednizsd2YC1ofLcoDyiDEqHpy+ic05JN9TO0MRBVzc/EG8tFXt+6QPtw8y42RFyF/ULQ2+SxhlItHCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:35:10.649636Z"},"content_sha256":"a747643fbf6dde0ee72af8c6c06779fac44739fb5a1952d7f6f8a1db80ae8c8b","schema_version":"1.0","event_id":"sha256:a747643fbf6dde0ee72af8c6c06779fac44739fb5a1952d7f6f8a1db80ae8c8b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:Z2DRCOJIUJV265OCX4IQ3TFLV5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SHLIME: Foiling adversarial attacks fooling SHAP and LIME","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Estelle Duguet, Hugh Van Deventer, Jack Kruger, Karthik Ramakrishnan, Ranjan Subbaraman, Sam Chauhan","submitted_at":"2025-08-14T20:28:48Z","abstract_excerpt":"Post hoc explanation methods, such as LIME and SHAP, provide interpretable insights into black-box classifiers and are increasingly used to assess model biases and generalizability. However, these methods are vulnerable to adversarial manipulation, potentially concealing harmful biases. Building on the work of Slack et al. (2020), we investigate the susceptibility of LIME and SHAP to biased models and evaluate strategies for improving robustness. We first replicate the original COMPAS experiment to validate prior findings and establish a baseline. We then introduce a modular testing framework "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.11053","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.11053/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:54:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XdAuj9SQBbv+rN6y2Y7sZru7y3Uk4AvS3OZvviJ6iujvYspwNR1Cv+WTGCkZNb2UFerHlOYtTv0RD+RTVrMlAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:35:10.650020Z"},"content_sha256":"5752323ea68e8bc951d499280ac87fb4ec11d947c399c685a2b95c80c592ec86","schema_version":"1.0","event_id":"sha256:5752323ea68e8bc951d499280ac87fb4ec11d947c399c685a2b95c80c592ec86"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z2DRCOJIUJV265OCX4IQ3TFLV5/bundle.json","state_url":"https://pith.science/pith/Z2DRCOJIUJV265OCX4IQ3TFLV5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z2DRCOJIUJV265OCX4IQ3TFLV5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T07:35:10Z","links":{"resolver":"https://pith.science/pith/Z2DRCOJIUJV265OCX4IQ3TFLV5","bundle":"https://pith.science/pith/Z2DRCOJIUJV265OCX4IQ3TFLV5/bundle.json","state":"https://pith.science/pith/Z2DRCOJIUJV265OCX4IQ3TFLV5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z2DRCOJIUJV265OCX4IQ3TFLV5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:Z2DRCOJIUJV265OCX4IQ3TFLV5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"98070f60f92a7778cf6fb26fd6197ee4062e20f40174324d5d6515917b3fad50","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-14T20:28:48Z","title_canon_sha256":"095e324e8d18fe4c2d8f2375dd3d1518920937043b0bf28f00b282cfc0f68c35"},"schema_version":"1.0","source":{"id":"2508.11053","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.11053","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"arxiv_version","alias_value":"2508.11053v1","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.11053","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"pith_short_12","alias_value":"Z2DRCOJIUJV2","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"pith_short_16","alias_value":"Z2DRCOJIUJV265OC","created_at":"2026-07-05T11:54:17Z"},{"alias_kind":"pith_short_8","alias_value":"Z2DRCOJI","created_at":"2026-07-05T11:54:17Z"}],"graph_snapshots":[{"event_id":"sha256:5752323ea68e8bc951d499280ac87fb4ec11d947c399c685a2b95c80c592ec86","target":"graph","created_at":"2026-07-05T11:54:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.11053/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Post hoc explanation methods, such as LIME and SHAP, provide interpretable insights into black-box classifiers and are increasingly used to assess model biases and generalizability. However, these methods are vulnerable to adversarial manipulation, potentially concealing harmful biases. Building on the work of Slack et al. (2020), we investigate the susceptibility of LIME and SHAP to biased models and evaluate strategies for improving robustness. We first replicate the original COMPAS experiment to validate prior findings and establish a baseline. We then introduce a modular testing framework ","authors_text":"Estelle Duguet, Hugh Van Deventer, Jack Kruger, Karthik Ramakrishnan, Ranjan Subbaraman, Sam Chauhan","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-14T20:28:48Z","title":"SHLIME: Foiling adversarial attacks fooling SHAP and LIME"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.11053","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a747643fbf6dde0ee72af8c6c06779fac44739fb5a1952d7f6f8a1db80ae8c8b","target":"record","created_at":"2026-07-05T11:54:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"98070f60f92a7778cf6fb26fd6197ee4062e20f40174324d5d6515917b3fad50","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-14T20:28:48Z","title_canon_sha256":"095e324e8d18fe4c2d8f2375dd3d1518920937043b0bf28f00b282cfc0f68c35"},"schema_version":"1.0","source":{"id":"2508.11053","kind":"arxiv","version":1}},"canonical_sha256":"ce87113928a26baf75c2bf110dccabaf4bcc8288a78cf4bfef938b3b469c308b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ce87113928a26baf75c2bf110dccabaf4bcc8288a78cf4bfef938b3b469c308b","first_computed_at":"2026-07-05T11:54:17.566333Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:54:17.566333Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mgaEpQExSsLV7FoI/1J9h9zGm2QOKIPuar0iCZoVcC8s3/NdkPEtI+idUoWC20xHgTaUbtglwIyswnxykMMPBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:54:17.566770Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.11053","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a747643fbf6dde0ee72af8c6c06779fac44739fb5a1952d7f6f8a1db80ae8c8b","sha256:5752323ea68e8bc951d499280ac87fb4ec11d947c399c685a2b95c80c592ec86"],"state_sha256":"9642fd66e45434c957120382acd7e4d2476e1a258b33d9c907cf3486626e7943"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ng58s2OI3YNiVVuNTPJQY0G1dZmkrWtwuBsMBqgf5y5Vz1EVc7UAfJH7aw+wxaPGyFP3pOc2PVoB1ZPWLBBdDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T07:35:10.652153Z","bundle_sha256":"2b5de6f2f74c8e92078d14f24330f1bb0e7ab24898e774ab4fc320476ac9bd39"}}