{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:ZX45H6I3XICFLWX3JAPZ5OEIM6","short_pith_number":"pith:ZX45H6I3","canonical_record":{"source":{"id":"2012.14956","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-12-29T22:01:38Z","cross_cats_sorted":[],"title_canon_sha256":"a5d738d5219862949d367395f84d77e9872299404e6fc8bf26f534093a850bbd","abstract_canon_sha256":"af38af09332703227574c64631e8bbb530c0437f8c46dae1e7993915bd198d1c"},"schema_version":"1.0"},"canonical_sha256":"cdf9d3f91bba0455dafb481f9eb88867bf5c5ef4c97ca6468796905c0088f139","source":{"kind":"arxiv","id":"2012.14956","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.14956","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"arxiv_version","alias_value":"2012.14956v2","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.14956","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"pith_short_12","alias_value":"ZX45H6I3XICF","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"pith_short_16","alias_value":"ZX45H6I3XICFLWX3","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"pith_short_8","alias_value":"ZX45H6I3","created_at":"2026-07-05T02:36:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:ZX45H6I3XICFLWX3JAPZ5OEIM6","target":"record","payload":{"canonical_record":{"source":{"id":"2012.14956","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-12-29T22:01:38Z","cross_cats_sorted":[],"title_canon_sha256":"a5d738d5219862949d367395f84d77e9872299404e6fc8bf26f534093a850bbd","abstract_canon_sha256":"af38af09332703227574c64631e8bbb530c0437f8c46dae1e7993915bd198d1c"},"schema_version":"1.0"},"canonical_sha256":"cdf9d3f91bba0455dafb481f9eb88867bf5c5ef4c97ca6468796905c0088f139","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:36:09.492098Z","signature_b64":"oykvLzFx/I07zToMsDBS3uGh1NcAWb364kgZLXX2y04IGlBH4ddIwE/unEF1MTwjOvLvUC8PeBvD+YIcGzLhDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cdf9d3f91bba0455dafb481f9eb88867bf5c5ef4c97ca6468796905c0088f139","last_reissued_at":"2026-07-05T02:36:09.491732Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:36:09.491732Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2012.14956","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2hLPrx1HvZBP07KoiCD2zHYSqhb1gOyjKFI058w4rbpACTJeVXpO2ad449vtzRI3YsPpR2sFKqy2JsVSZ87kCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T05:13:40.099950Z"},"content_sha256":"5b5d56cb721dbf754ae8150e204e0582058f80b14d0da3b80e161dc3cafc2748","schema_version":"1.0","event_id":"sha256:5b5d56cb721dbf754ae8150e204e0582058f80b14d0da3b80e161dc3cafc2748"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:ZX45H6I3XICFLWX3JAPZ5OEIM6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Generating Natural Language Attacks in a Hard Label Black Box Setting","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Rishabh Maheshwary, Saket Maheshwary, Vikram Pudi","submitted_at":"2020-12-29T22:01:38Z","abstract_excerpt":"We study an important and challenging task of attacking natural language processing models in a hard label black box setting. We propose a decision-based attack strategy that crafts high quality adversarial examples on text classification and entailment tasks. Our proposed attack strategy leverages population-based optimization algorithm to craft plausible and semantically similar adversarial examples by observing only the top label predicted by the target model. At each iteration, the optimization procedure allow word replacements that maximizes the overall semantic similarity between the ori"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.14956","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.14956/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OPK+ARFjT+9vV+6uLGPzV8Hp9nPxFXO9hmNz3ledsR5gVUUx/2DR16yKF/wIZgMjJPW5F7YgigzcT8Vtu/pbBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T05:13:40.100441Z"},"content_sha256":"406f416e18e3db2d156c86e06b5fb463257cdb881f92ffd4f0be4bf6cb96a7f6","schema_version":"1.0","event_id":"sha256:406f416e18e3db2d156c86e06b5fb463257cdb881f92ffd4f0be4bf6cb96a7f6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZX45H6I3XICFLWX3JAPZ5OEIM6/bundle.json","state_url":"https://pith.science/pith/ZX45H6I3XICFLWX3JAPZ5OEIM6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZX45H6I3XICFLWX3JAPZ5OEIM6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T05:13:40Z","links":{"resolver":"https://pith.science/pith/ZX45H6I3XICFLWX3JAPZ5OEIM6","bundle":"https://pith.science/pith/ZX45H6I3XICFLWX3JAPZ5OEIM6/bundle.json","state":"https://pith.science/pith/ZX45H6I3XICFLWX3JAPZ5OEIM6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZX45H6I3XICFLWX3JAPZ5OEIM6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:ZX45H6I3XICFLWX3JAPZ5OEIM6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"af38af09332703227574c64631e8bbb530c0437f8c46dae1e7993915bd198d1c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-12-29T22:01:38Z","title_canon_sha256":"a5d738d5219862949d367395f84d77e9872299404e6fc8bf26f534093a850bbd"},"schema_version":"1.0","source":{"id":"2012.14956","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.14956","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"arxiv_version","alias_value":"2012.14956v2","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.14956","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"pith_short_12","alias_value":"ZX45H6I3XICF","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"pith_short_16","alias_value":"ZX45H6I3XICFLWX3","created_at":"2026-07-05T02:36:09Z"},{"alias_kind":"pith_short_8","alias_value":"ZX45H6I3","created_at":"2026-07-05T02:36:09Z"}],"graph_snapshots":[{"event_id":"sha256:406f416e18e3db2d156c86e06b5fb463257cdb881f92ffd4f0be4bf6cb96a7f6","target":"graph","created_at":"2026-07-05T02:36:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.14956/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study an important and challenging task of attacking natural language processing models in a hard label black box setting. We propose a decision-based attack strategy that crafts high quality adversarial examples on text classification and entailment tasks. Our proposed attack strategy leverages population-based optimization algorithm to craft plausible and semantically similar adversarial examples by observing only the top label predicted by the target model. At each iteration, the optimization procedure allow word replacements that maximizes the overall semantic similarity between the ori","authors_text":"Rishabh Maheshwary, Saket Maheshwary, Vikram Pudi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-12-29T22:01:38Z","title":"Generating Natural Language Attacks in a Hard Label Black Box Setting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.14956","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5b5d56cb721dbf754ae8150e204e0582058f80b14d0da3b80e161dc3cafc2748","target":"record","created_at":"2026-07-05T02:36:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"af38af09332703227574c64631e8bbb530c0437f8c46dae1e7993915bd198d1c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-12-29T22:01:38Z","title_canon_sha256":"a5d738d5219862949d367395f84d77e9872299404e6fc8bf26f534093a850bbd"},"schema_version":"1.0","source":{"id":"2012.14956","kind":"arxiv","version":2}},"canonical_sha256":"cdf9d3f91bba0455dafb481f9eb88867bf5c5ef4c97ca6468796905c0088f139","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cdf9d3f91bba0455dafb481f9eb88867bf5c5ef4c97ca6468796905c0088f139","first_computed_at":"2026-07-05T02:36:09.491732Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:36:09.491732Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oykvLzFx/I07zToMsDBS3uGh1NcAWb364kgZLXX2y04IGlBH4ddIwE/unEF1MTwjOvLvUC8PeBvD+YIcGzLhDg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:36:09.492098Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.14956","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5b5d56cb721dbf754ae8150e204e0582058f80b14d0da3b80e161dc3cafc2748","sha256:406f416e18e3db2d156c86e06b5fb463257cdb881f92ffd4f0be4bf6cb96a7f6"],"state_sha256":"937899980116893086d91273ec8a3cb7feba5270d4109d3ca1caad3bdc13d2db"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4WuYh95QRj3ubgsGW95wEzEOQINzvg4vuUwue6YAfpOUDrowONtVzdELnStWl4Q7btLgtEipKQPgSSpbh0HxAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T05:13:40.103746Z","bundle_sha256":"1d740b47bb40aba6e8e5ee6cdf962ea13abf7b579b97fd1e4e44675f505e8c4e"}}