{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:4JKF2S6D74N3V6CSCC4GVQJZC2","short_pith_number":"pith:4JKF2S6D","canonical_record":{"source":{"id":"2502.19320","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-02-26T17:13:19Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"6a95645e511ad0364432dcf7ff097a48eaeaf813b64f90f1cc802ebb34ed36ec","abstract_canon_sha256":"383eea0603cec263a1997ce9eca01601e166380e56b3902523cb793098f04f57"},"schema_version":"1.0"},"canonical_sha256":"e2545d4bc3ff1bbaf85210b86ac1391685ef09d8c3978977787a7c9f789d1d40","source":{"kind":"arxiv","id":"2502.19320","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19320","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19320v2","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19320","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"pith_short_12","alias_value":"4JKF2S6D74N3","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"pith_short_16","alias_value":"4JKF2S6D74N3V6CS","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"pith_short_8","alias_value":"4JKF2S6D","created_at":"2026-07-05T10:26:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:4JKF2S6D74N3V6CSCC4GVQJZC2","target":"record","payload":{"canonical_record":{"source":{"id":"2502.19320","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-02-26T17:13:19Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"6a95645e511ad0364432dcf7ff097a48eaeaf813b64f90f1cc802ebb34ed36ec","abstract_canon_sha256":"383eea0603cec263a1997ce9eca01601e166380e56b3902523cb793098f04f57"},"schema_version":"1.0"},"canonical_sha256":"e2545d4bc3ff1bbaf85210b86ac1391685ef09d8c3978977787a7c9f789d1d40","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:26:14.841905Z","signature_b64":"QBzl4+8z++brns7aP/leOA4sz4Furxa5DV4A7SwZHaoiQvsqp0+NDqcQ/uFtQUtWOloNzaEFZQVcW2MNBTjqBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e2545d4bc3ff1bbaf85210b86ac1391685ef09d8c3978977787a7c9f789d1d40","last_reissued_at":"2026-07-05T10:26:14.841375Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:26:14.841375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.19320","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:26:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LB2ECf53KBmun5cxbOQbQ8GfQ2Q3NO7dW3cWKr4ZYL+miZ/+aZ3z/pzZSIpD8+d+eTcczkFFZh9mf2qb9qn+CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:07:26.633152Z"},"content_sha256":"7ccd504523cb5f169eafc3b11fac7a5916756f10b62c07289663be67fc164e52","schema_version":"1.0","event_id":"sha256:7ccd504523cb5f169eafc3b11fac7a5916756f10b62c07289663be67fc164e52"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:4JKF2S6D74N3V6CSCC4GVQJZC2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Shh, don't say that! Domain Certification in LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG","stat.ML"],"primary_cat":"cs.CL","authors_text":"Adel Bibi, Alasdair Paren, Bernard Ghanem, Cornelius Emde, Maxime Kayser, Philip H.S. Torr, Preetham Arvind, Thomas Lukasiewicz, Tom Rainforth","submitted_at":"2025-02-26T17:13:19Z","abstract_excerpt":"Large language models (LLMs) are often deployed to perform constrained tasks, with narrow domains. For example, customer support bots can be built on top of LLMs, relying on their broad language understanding and capabilities to enhance performance. However, these LLMs are adversarially susceptible, potentially generating outputs outside the intended domain. To formalize, assess, and mitigate this risk, we introduce domain certification; a guarantee that accurately characterizes the out-of-domain behavior of language models. We then propose a simple yet effective approach, which we call VALID "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19320","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.19320/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:26:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AQItLr9DRDrNKjx12/YWM8DkQ/glHWzfzEk4tKQGAb+zUFQ5ShTmpSXxrch3uL1nwkkI0Om+gqSH9V+S/fJ0Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:07:26.633693Z"},"content_sha256":"70c3c10d098e1e35cbfcdfd30f6674ca085adcb181b703b8d029472f1d33e7d8","schema_version":"1.0","event_id":"sha256:70c3c10d098e1e35cbfcdfd30f6674ca085adcb181b703b8d029472f1d33e7d8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4JKF2S6D74N3V6CSCC4GVQJZC2/bundle.json","state_url":"https://pith.science/pith/4JKF2S6D74N3V6CSCC4GVQJZC2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4JKF2S6D74N3V6CSCC4GVQJZC2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T13:07:26Z","links":{"resolver":"https://pith.science/pith/4JKF2S6D74N3V6CSCC4GVQJZC2","bundle":"https://pith.science/pith/4JKF2S6D74N3V6CSCC4GVQJZC2/bundle.json","state":"https://pith.science/pith/4JKF2S6D74N3V6CSCC4GVQJZC2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4JKF2S6D74N3V6CSCC4GVQJZC2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:4JKF2S6D74N3V6CSCC4GVQJZC2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"383eea0603cec263a1997ce9eca01601e166380e56b3902523cb793098f04f57","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-02-26T17:13:19Z","title_canon_sha256":"6a95645e511ad0364432dcf7ff097a48eaeaf813b64f90f1cc802ebb34ed36ec"},"schema_version":"1.0","source":{"id":"2502.19320","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19320","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19320v2","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19320","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"pith_short_12","alias_value":"4JKF2S6D74N3","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"pith_short_16","alias_value":"4JKF2S6D74N3V6CS","created_at":"2026-07-05T10:26:14Z"},{"alias_kind":"pith_short_8","alias_value":"4JKF2S6D","created_at":"2026-07-05T10:26:14Z"}],"graph_snapshots":[{"event_id":"sha256:70c3c10d098e1e35cbfcdfd30f6674ca085adcb181b703b8d029472f1d33e7d8","target":"graph","created_at":"2026-07-05T10:26:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.19320/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are often deployed to perform constrained tasks, with narrow domains. For example, customer support bots can be built on top of LLMs, relying on their broad language understanding and capabilities to enhance performance. However, these LLMs are adversarially susceptible, potentially generating outputs outside the intended domain. To formalize, assess, and mitigate this risk, we introduce domain certification; a guarantee that accurately characterizes the out-of-domain behavior of language models. We then propose a simple yet effective approach, which we call VALID ","authors_text":"Adel Bibi, Alasdair Paren, Bernard Ghanem, Cornelius Emde, Maxime Kayser, Philip H.S. Torr, Preetham Arvind, Thomas Lukasiewicz, Tom Rainforth","cross_cats":["cs.AI","cs.CR","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-02-26T17:13:19Z","title":"Shh, don't say that! Domain Certification in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19320","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7ccd504523cb5f169eafc3b11fac7a5916756f10b62c07289663be67fc164e52","target":"record","created_at":"2026-07-05T10:26:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"383eea0603cec263a1997ce9eca01601e166380e56b3902523cb793098f04f57","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-02-26T17:13:19Z","title_canon_sha256":"6a95645e511ad0364432dcf7ff097a48eaeaf813b64f90f1cc802ebb34ed36ec"},"schema_version":"1.0","source":{"id":"2502.19320","kind":"arxiv","version":2}},"canonical_sha256":"e2545d4bc3ff1bbaf85210b86ac1391685ef09d8c3978977787a7c9f789d1d40","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e2545d4bc3ff1bbaf85210b86ac1391685ef09d8c3978977787a7c9f789d1d40","first_computed_at":"2026-07-05T10:26:14.841375Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:26:14.841375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QBzl4+8z++brns7aP/leOA4sz4Furxa5DV4A7SwZHaoiQvsqp0+NDqcQ/uFtQUtWOloNzaEFZQVcW2MNBTjqBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:26:14.841905Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.19320","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7ccd504523cb5f169eafc3b11fac7a5916756f10b62c07289663be67fc164e52","sha256:70c3c10d098e1e35cbfcdfd30f6674ca085adcb181b703b8d029472f1d33e7d8"],"state_sha256":"f71addaea86400490360a62d4fd67af379dc7be07ee2a31e38c776c6b751da09"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u9Cb0idJGznUG2rw42MKvJxo7wofrCvdDk6PNiy2leEpGaKSrN8YXXV0e2GhXsZiccwQ7cPFztnuZoNMBmTwBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T13:07:26.636343Z","bundle_sha256":"fa6ef158d4780f1f45575d35c028280710796cf62df0a3a1cb04ec979988ba31"}}