{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:FVOAPZCGQ75VJUZI6LXRHJA6PO","short_pith_number":"pith:FVOAPZCG","canonical_record":{"source":{"id":"2501.15529","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-26T13:43:39Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"bec650035e97b38c45c58e2147ae1d9e0d8b62593bce5237cf37ad07d1f7b399","abstract_canon_sha256":"c4df87a1f999ea8b97a33ad7948a69fe00c43f83b7e603f129e4819b846bf9bc"},"schema_version":"1.0"},"canonical_sha256":"2d5c07e44687fb54d328f2ef13a41e7bb4479d990b6c89d37def02f6d64cfc2d","source":{"kind":"arxiv","id":"2501.15529","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.15529","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"arxiv_version","alias_value":"2501.15529v1","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.15529","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"pith_short_12","alias_value":"FVOAPZCGQ75V","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"pith_short_16","alias_value":"FVOAPZCGQ75VJUZI","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"pith_short_8","alias_value":"FVOAPZCG","created_at":"2026-07-05T10:05:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:FVOAPZCGQ75VJUZI6LXRHJA6PO","target":"record","payload":{"canonical_record":{"source":{"id":"2501.15529","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-26T13:43:39Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"bec650035e97b38c45c58e2147ae1d9e0d8b62593bce5237cf37ad07d1f7b399","abstract_canon_sha256":"c4df87a1f999ea8b97a33ad7948a69fe00c43f83b7e603f129e4819b846bf9bc"},"schema_version":"1.0"},"canonical_sha256":"2d5c07e44687fb54d328f2ef13a41e7bb4479d990b6c89d37def02f6d64cfc2d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:05:30.722041Z","signature_b64":"Mib7CD2q48V18hoAtBVu9ImqUy/Usgfh9m4rzAp3WGg+zPGEOxBv0kxcypFblYPEUWujYbcn58fzckxcI92wDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2d5c07e44687fb54d328f2ef13a41e7bb4479d990b6c89d37def02f6d64cfc2d","last_reissued_at":"2026-07-05T10:05:30.721469Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:05:30.721469Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.15529","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y8I9fpwEb8PxMi5QMs4PZ8kUkcqGUn4ixBZQEAkrCyqBDL5P6laT1u0yjrduC0s4Zl8W8hKxKzJLlxgI7JKADA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T18:51:23.076317Z"},"content_sha256":"4cd3334a9cc19caf0f5dd61ba294fd91dd0af8148d0f56f1785d1a2287326f2a","schema_version":"1.0","event_id":"sha256:4cd3334a9cc19caf0f5dd61ba294fd91dd0af8148d0f56f1785d1a2287326f2a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:FVOAPZCGQ75VJUZI6LXRHJA6PO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"UNIDOOR: A Universal Framework for Action-Level Backdoor Attacks in Deep Reinforcement Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Chunyi Zhou, Linkang Du, Oubo Ma, Qingming Li, Shouling Ji, Yang Dai, Yuwen Pu","submitted_at":"2025-01-26T13:43:39Z","abstract_excerpt":"Deep reinforcement learning (DRL) is widely applied to safety-critical decision-making scenarios. However, DRL is vulnerable to backdoor attacks, especially action-level backdoors, which pose significant threats through precise manipulation and flexible activation, risking outcomes like vehicle collisions or drone crashes. The key distinction of action-level backdoors lies in the utilization of the backdoor reward function to associate triggers with target actions. Nevertheless, existing studies typically rely on backdoor reward functions with fixed values or conditional flipping, which lack u"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.15529","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.15529/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XdZWfBQYRPRCOb17TB1EbY/B2ar8/F6Fvu5K1je7LyBIoQLY8/EJLM6TVpvAqmcQA/9WT1kbh3x3WwJlopLRCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T18:51:23.076806Z"},"content_sha256":"33f6a880fa6a1f649a4d04407f5a04e5a6c147a9f4b5dbbcbd923e5e67215289","schema_version":"1.0","event_id":"sha256:33f6a880fa6a1f649a4d04407f5a04e5a6c147a9f4b5dbbcbd923e5e67215289"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FVOAPZCGQ75VJUZI6LXRHJA6PO/bundle.json","state_url":"https://pith.science/pith/FVOAPZCGQ75VJUZI6LXRHJA6PO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FVOAPZCGQ75VJUZI6LXRHJA6PO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T18:51:23Z","links":{"resolver":"https://pith.science/pith/FVOAPZCGQ75VJUZI6LXRHJA6PO","bundle":"https://pith.science/pith/FVOAPZCGQ75VJUZI6LXRHJA6PO/bundle.json","state":"https://pith.science/pith/FVOAPZCGQ75VJUZI6LXRHJA6PO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FVOAPZCGQ75VJUZI6LXRHJA6PO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:FVOAPZCGQ75VJUZI6LXRHJA6PO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c4df87a1f999ea8b97a33ad7948a69fe00c43f83b7e603f129e4819b846bf9bc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-26T13:43:39Z","title_canon_sha256":"bec650035e97b38c45c58e2147ae1d9e0d8b62593bce5237cf37ad07d1f7b399"},"schema_version":"1.0","source":{"id":"2501.15529","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.15529","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"arxiv_version","alias_value":"2501.15529v1","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.15529","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"pith_short_12","alias_value":"FVOAPZCGQ75V","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"pith_short_16","alias_value":"FVOAPZCGQ75VJUZI","created_at":"2026-07-05T10:05:30Z"},{"alias_kind":"pith_short_8","alias_value":"FVOAPZCG","created_at":"2026-07-05T10:05:30Z"}],"graph_snapshots":[{"event_id":"sha256:33f6a880fa6a1f649a4d04407f5a04e5a6c147a9f4b5dbbcbd923e5e67215289","target":"graph","created_at":"2026-07-05T10:05:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.15529/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep reinforcement learning (DRL) is widely applied to safety-critical decision-making scenarios. However, DRL is vulnerable to backdoor attacks, especially action-level backdoors, which pose significant threats through precise manipulation and flexible activation, risking outcomes like vehicle collisions or drone crashes. The key distinction of action-level backdoors lies in the utilization of the backdoor reward function to associate triggers with target actions. Nevertheless, existing studies typically rely on backdoor reward functions with fixed values or conditional flipping, which lack u","authors_text":"Chunyi Zhou, Linkang Du, Oubo Ma, Qingming Li, Shouling Ji, Yang Dai, Yuwen Pu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-26T13:43:39Z","title":"UNIDOOR: A Universal Framework for Action-Level Backdoor Attacks in Deep Reinforcement Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.15529","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4cd3334a9cc19caf0f5dd61ba294fd91dd0af8148d0f56f1785d1a2287326f2a","target":"record","created_at":"2026-07-05T10:05:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c4df87a1f999ea8b97a33ad7948a69fe00c43f83b7e603f129e4819b846bf9bc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-26T13:43:39Z","title_canon_sha256":"bec650035e97b38c45c58e2147ae1d9e0d8b62593bce5237cf37ad07d1f7b399"},"schema_version":"1.0","source":{"id":"2501.15529","kind":"arxiv","version":1}},"canonical_sha256":"2d5c07e44687fb54d328f2ef13a41e7bb4479d990b6c89d37def02f6d64cfc2d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2d5c07e44687fb54d328f2ef13a41e7bb4479d990b6c89d37def02f6d64cfc2d","first_computed_at":"2026-07-05T10:05:30.721469Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:05:30.721469Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Mib7CD2q48V18hoAtBVu9ImqUy/Usgfh9m4rzAp3WGg+zPGEOxBv0kxcypFblYPEUWujYbcn58fzckxcI92wDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:05:30.722041Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.15529","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4cd3334a9cc19caf0f5dd61ba294fd91dd0af8148d0f56f1785d1a2287326f2a","sha256:33f6a880fa6a1f649a4d04407f5a04e5a6c147a9f4b5dbbcbd923e5e67215289"],"state_sha256":"57ecdb1721e3d2d681398bacc517d5ad8625af645906fedc9e110234f62474a5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I4OCkIUIbntGLumDb6q9F/7IWssmyg1s8o9G6UlR092645nOY6anUbaUwr67Fpd3kVhR3JYy6C6BY2+0bVg9Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T18:51:23.080883Z","bundle_sha256":"57d1174b78534bcfa7b286ca2f4cf4edf6f177415b06b5d44b1d5a9b4cb6744b"}}