{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3HLDEB4U3P6OLYSTRF6A3PFAIM","short_pith_number":"pith:3HLDEB4U","canonical_record":{"source":{"id":"2412.02454","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-03T13:43:36Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"f59ef116aa9d725771f55149899ce6d7fe0b910274932ddd5b5bc96e07096e1a","abstract_canon_sha256":"23bdcf4507e1e5a6a27fcf3af11ac8b9446dcf4080d83700d21dcb086fd5f27b"},"schema_version":"1.0"},"canonical_sha256":"d9d6320794dbfce5e253897c0dbca0430e0ba04b1557b9d910972362f872f44e","source":{"kind":"arxiv","id":"2412.02454","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.02454","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"arxiv_version","alias_value":"2412.02454v1","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.02454","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"pith_short_12","alias_value":"3HLDEB4U3P6O","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"pith_short_16","alias_value":"3HLDEB4U3P6OLYST","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"pith_short_8","alias_value":"3HLDEB4U","created_at":"2026-07-05T09:43:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3HLDEB4U3P6OLYSTRF6A3PFAIM","target":"record","payload":{"canonical_record":{"source":{"id":"2412.02454","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-03T13:43:36Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"f59ef116aa9d725771f55149899ce6d7fe0b910274932ddd5b5bc96e07096e1a","abstract_canon_sha256":"23bdcf4507e1e5a6a27fcf3af11ac8b9446dcf4080d83700d21dcb086fd5f27b"},"schema_version":"1.0"},"canonical_sha256":"d9d6320794dbfce5e253897c0dbca0430e0ba04b1557b9d910972362f872f44e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:43:50.128492Z","signature_b64":"+Y0S2hhrBGO/fzJooxPGS0MFxFtldjcsMTIIu7KhDOYSABvn1XvSiSAT9nB5w2HCKcy1wfXowej/Y9mnQxuQCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d9d6320794dbfce5e253897c0dbca0430e0ba04b1557b9d910972362f872f44e","last_reissued_at":"2026-07-05T09:43:50.128067Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:43:50.128067Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.02454","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:43:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vjqhsDk14dv+r77jjvaoMpm5n/ksT+I3t1hMrQ+LoG2IEkmUV64C05wV0QZUPbiLjRkY+AgL6UtaGkaTDNiuAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T03:18:28.372211Z"},"content_sha256":"46ffccdc8a0925077f1522765ac0220e25ebe0a6251f23eb16764276cc968358","schema_version":"1.0","event_id":"sha256:46ffccdc8a0925077f1522765ac0220e25ebe0a6251f23eb16764276cc968358"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3HLDEB4U3P6OLYSTRF6A3PFAIM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Gracefully Filtering Backdoor Samples for Generative Large Language Models without Retraining","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Gongshen Liu, Lingyong Fang, Pengzhou Cheng, Zhuosheng Zhang, Zongru Wu","submitted_at":"2024-12-03T13:43:36Z","abstract_excerpt":"Backdoor attacks remain significant security threats to generative large language models (LLMs). Since generative LLMs output sequences of high-dimensional token logits instead of low-dimensional classification logits, most existing backdoor defense methods designed for discriminative models like BERT are ineffective for generative LLMs. Inspired by the observed differences in learning behavior between backdoor and clean mapping in the frequency space, we transform gradients of each training sample, directly influencing parameter updates, into the frequency space. Our findings reveal a distinc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.02454","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.02454/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:43:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5ItU/xd6Sjre8EiUmG9r00nE97LuX+ppYjpljqMsFer2VxhwnsMFPalCNr6cQvO6GythxiEMUkmXNoEScgjbAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T03:18:28.372639Z"},"content_sha256":"98687ec803d6472efd11ba1a3597583ab6cdc0e9e96212d670d4a934e397d4a0","schema_version":"1.0","event_id":"sha256:98687ec803d6472efd11ba1a3597583ab6cdc0e9e96212d670d4a934e397d4a0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3HLDEB4U3P6OLYSTRF6A3PFAIM/bundle.json","state_url":"https://pith.science/pith/3HLDEB4U3P6OLYSTRF6A3PFAIM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3HLDEB4U3P6OLYSTRF6A3PFAIM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T03:18:28Z","links":{"resolver":"https://pith.science/pith/3HLDEB4U3P6OLYSTRF6A3PFAIM","bundle":"https://pith.science/pith/3HLDEB4U3P6OLYSTRF6A3PFAIM/bundle.json","state":"https://pith.science/pith/3HLDEB4U3P6OLYSTRF6A3PFAIM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3HLDEB4U3P6OLYSTRF6A3PFAIM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3HLDEB4U3P6OLYSTRF6A3PFAIM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"23bdcf4507e1e5a6a27fcf3af11ac8b9446dcf4080d83700d21dcb086fd5f27b","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-03T13:43:36Z","title_canon_sha256":"f59ef116aa9d725771f55149899ce6d7fe0b910274932ddd5b5bc96e07096e1a"},"schema_version":"1.0","source":{"id":"2412.02454","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.02454","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"arxiv_version","alias_value":"2412.02454v1","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.02454","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"pith_short_12","alias_value":"3HLDEB4U3P6O","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"pith_short_16","alias_value":"3HLDEB4U3P6OLYST","created_at":"2026-07-05T09:43:50Z"},{"alias_kind":"pith_short_8","alias_value":"3HLDEB4U","created_at":"2026-07-05T09:43:50Z"}],"graph_snapshots":[{"event_id":"sha256:98687ec803d6472efd11ba1a3597583ab6cdc0e9e96212d670d4a934e397d4a0","target":"graph","created_at":"2026-07-05T09:43:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.02454/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks remain significant security threats to generative large language models (LLMs). Since generative LLMs output sequences of high-dimensional token logits instead of low-dimensional classification logits, most existing backdoor defense methods designed for discriminative models like BERT are ineffective for generative LLMs. Inspired by the observed differences in learning behavior between backdoor and clean mapping in the frequency space, we transform gradients of each training sample, directly influencing parameter updates, into the frequency space. Our findings reveal a distinc","authors_text":"Gongshen Liu, Lingyong Fang, Pengzhou Cheng, Zhuosheng Zhang, Zongru Wu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-03T13:43:36Z","title":"Gracefully Filtering Backdoor Samples for Generative Large Language Models without Retraining"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.02454","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:46ffccdc8a0925077f1522765ac0220e25ebe0a6251f23eb16764276cc968358","target":"record","created_at":"2026-07-05T09:43:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"23bdcf4507e1e5a6a27fcf3af11ac8b9446dcf4080d83700d21dcb086fd5f27b","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-12-03T13:43:36Z","title_canon_sha256":"f59ef116aa9d725771f55149899ce6d7fe0b910274932ddd5b5bc96e07096e1a"},"schema_version":"1.0","source":{"id":"2412.02454","kind":"arxiv","version":1}},"canonical_sha256":"d9d6320794dbfce5e253897c0dbca0430e0ba04b1557b9d910972362f872f44e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d9d6320794dbfce5e253897c0dbca0430e0ba04b1557b9d910972362f872f44e","first_computed_at":"2026-07-05T09:43:50.128067Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:43:50.128067Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+Y0S2hhrBGO/fzJooxPGS0MFxFtldjcsMTIIu7KhDOYSABvn1XvSiSAT9nB5w2HCKcy1wfXowej/Y9mnQxuQCw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:43:50.128492Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.02454","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:46ffccdc8a0925077f1522765ac0220e25ebe0a6251f23eb16764276cc968358","sha256:98687ec803d6472efd11ba1a3597583ab6cdc0e9e96212d670d4a934e397d4a0"],"state_sha256":"b328adc01aa1779b8844ca87bcb78726a2ae6d199c1db44462eab159296a72b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jq/m8M6teBgrKriS1CuE7Wvf2SAYxkhMzCZJR95lCZ9FZ8xqynNqRdUUWKgA9tnqhd5wm/1wmhbHox+lDN8IBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T03:18:28.375549Z","bundle_sha256":"fd6943854c35bd50e003a0095f82f77a9a5cb742b09079a55812eaa4e8b91f53"}}