{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:R444ZXKMH7HUY4PNT2LQQRE2A7","short_pith_number":"pith:R444ZXKM","canonical_record":{"source":{"id":"2307.10563","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-20T04:00:37Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"059503b0e59ca06f41b06fcdf5db9f275665a3ab21b91f93fc19653ac2044303","abstract_canon_sha256":"2c8ee71ef974f33ae131b7e1cb50514b2a2a99d8ed295811baf0b93e5de175db"},"schema_version":"1.0"},"canonical_sha256":"8f39ccdd4c3fcf4c71ed9e9708449a07fe575cb85043f2ee90ad399e7bc72f25","source":{"kind":"arxiv","id":"2307.10563","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10563","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10563v1","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10563","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"pith_short_12","alias_value":"R444ZXKMH7HU","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"pith_short_16","alias_value":"R444ZXKMH7HUY4PN","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"pith_short_8","alias_value":"R444ZXKM","created_at":"2026-07-05T06:33:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:R444ZXKMH7HUY4PNT2LQQRE2A7","target":"record","payload":{"canonical_record":{"source":{"id":"2307.10563","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-20T04:00:37Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"059503b0e59ca06f41b06fcdf5db9f275665a3ab21b91f93fc19653ac2044303","abstract_canon_sha256":"2c8ee71ef974f33ae131b7e1cb50514b2a2a99d8ed295811baf0b93e5de175db"},"schema_version":"1.0"},"canonical_sha256":"8f39ccdd4c3fcf4c71ed9e9708449a07fe575cb85043f2ee90ad399e7bc72f25","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:33:07.084633Z","signature_b64":"ZgNjlBCT/pYHJbUCcsOhcmYbbLn8DSJ3XaH3IlrqTxNtEFx/nA+0dpxLTueJz+CEQFdp3haQzUXtYKqE5KZCCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8f39ccdd4c3fcf4c71ed9e9708449a07fe575cb85043f2ee90ad399e7bc72f25","last_reissued_at":"2026-07-05T06:33:07.084123Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:33:07.084123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.10563","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:33:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9uk4mb+/Na9MJc0CIM6Bjk/Qd+4sWaeLuAK0Q+x8fcCOTNai6s3awWJqCFD2UZPsPKHtXIC9/Qlfpm9M/kxJBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T15:01:28.228702Z"},"content_sha256":"898323ef8964b0e2da733268aa79b89885905add7d0226c2f8a0f6d56c0b34d8","schema_version":"1.0","event_id":"sha256:898323ef8964b0e2da733268aa79b89885905add7d0226c2f8a0f6d56c0b34d8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:R444ZXKMH7HUY4PNT2LQQRE2A7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FACADE: A Framework for Adversarial Circuit Anomaly Detection and Evaluation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Andres Carranza, Arnuv Tandon, Dhruv Pai, Rylan Schaeffer, Sanmi Koyejo","submitted_at":"2023-07-20T04:00:37Z","abstract_excerpt":"We present FACADE, a novel probabilistic and geometric framework designed for unsupervised mechanistic anomaly detection in deep neural networks. Its primary goal is advancing the understanding and mitigation of adversarial attacks. FACADE aims to generate probabilistic distributions over circuits, which provide critical insights to their contribution to changes in the manifold properties of pseudo-classes, or high-dimensional modes in activation space, yielding a powerful tool for uncovering and combating adversarial attacks. Our approach seeks to improve model robustness, enhance scalable mo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10563","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.10563/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:33:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jgPUlY/XjsuD+uz75SzKFIDDV5vtPKdhn6nQ/ozuliAkkGzPETDxjxgr3g3Prt2qLu+QRJ6xrl9fZ7up/Xx/CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T15:01:28.229309Z"},"content_sha256":"1a1e0797c3081ff4c6c300b18d2665f1851b8660ebc743394d063d44150372d8","schema_version":"1.0","event_id":"sha256:1a1e0797c3081ff4c6c300b18d2665f1851b8660ebc743394d063d44150372d8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R444ZXKMH7HUY4PNT2LQQRE2A7/bundle.json","state_url":"https://pith.science/pith/R444ZXKMH7HUY4PNT2LQQRE2A7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R444ZXKMH7HUY4PNT2LQQRE2A7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T15:01:28Z","links":{"resolver":"https://pith.science/pith/R444ZXKMH7HUY4PNT2LQQRE2A7","bundle":"https://pith.science/pith/R444ZXKMH7HUY4PNT2LQQRE2A7/bundle.json","state":"https://pith.science/pith/R444ZXKMH7HUY4PNT2LQQRE2A7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R444ZXKMH7HUY4PNT2LQQRE2A7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:R444ZXKMH7HUY4PNT2LQQRE2A7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2c8ee71ef974f33ae131b7e1cb50514b2a2a99d8ed295811baf0b93e5de175db","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-20T04:00:37Z","title_canon_sha256":"059503b0e59ca06f41b06fcdf5db9f275665a3ab21b91f93fc19653ac2044303"},"schema_version":"1.0","source":{"id":"2307.10563","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10563","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10563v1","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10563","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"pith_short_12","alias_value":"R444ZXKMH7HU","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"pith_short_16","alias_value":"R444ZXKMH7HUY4PN","created_at":"2026-07-05T06:33:07Z"},{"alias_kind":"pith_short_8","alias_value":"R444ZXKM","created_at":"2026-07-05T06:33:07Z"}],"graph_snapshots":[{"event_id":"sha256:1a1e0797c3081ff4c6c300b18d2665f1851b8660ebc743394d063d44150372d8","target":"graph","created_at":"2026-07-05T06:33:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.10563/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present FACADE, a novel probabilistic and geometric framework designed for unsupervised mechanistic anomaly detection in deep neural networks. Its primary goal is advancing the understanding and mitigation of adversarial attacks. FACADE aims to generate probabilistic distributions over circuits, which provide critical insights to their contribution to changes in the manifold properties of pseudo-classes, or high-dimensional modes in activation space, yielding a powerful tool for uncovering and combating adversarial attacks. Our approach seeks to improve model robustness, enhance scalable mo","authors_text":"Andres Carranza, Arnuv Tandon, Dhruv Pai, Rylan Schaeffer, Sanmi Koyejo","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-20T04:00:37Z","title":"FACADE: A Framework for Adversarial Circuit Anomaly Detection and Evaluation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10563","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:898323ef8964b0e2da733268aa79b89885905add7d0226c2f8a0f6d56c0b34d8","target":"record","created_at":"2026-07-05T06:33:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2c8ee71ef974f33ae131b7e1cb50514b2a2a99d8ed295811baf0b93e5de175db","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-20T04:00:37Z","title_canon_sha256":"059503b0e59ca06f41b06fcdf5db9f275665a3ab21b91f93fc19653ac2044303"},"schema_version":"1.0","source":{"id":"2307.10563","kind":"arxiv","version":1}},"canonical_sha256":"8f39ccdd4c3fcf4c71ed9e9708449a07fe575cb85043f2ee90ad399e7bc72f25","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8f39ccdd4c3fcf4c71ed9e9708449a07fe575cb85043f2ee90ad399e7bc72f25","first_computed_at":"2026-07-05T06:33:07.084123Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:33:07.084123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZgNjlBCT/pYHJbUCcsOhcmYbbLn8DSJ3XaH3IlrqTxNtEFx/nA+0dpxLTueJz+CEQFdp3haQzUXtYKqE5KZCCg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:33:07.084633Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.10563","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:898323ef8964b0e2da733268aa79b89885905add7d0226c2f8a0f6d56c0b34d8","sha256:1a1e0797c3081ff4c6c300b18d2665f1851b8660ebc743394d063d44150372d8"],"state_sha256":"0725f06ba4239f2e91226b4dd21e3f03fa2b16ec52f3323fc0c33cd57a9bc985"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bla35T9TTxUdgS+v1ug0/YKOmeixiJfmPzEb0N8NErMs5BszNIReKjyra4AXkfkXYuGfG+sGmFL/LHpFLMHXBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T15:01:28.235053Z","bundle_sha256":"6874af9dfd66fb529c178492a77542c6deec26c57848fc375fab69ea20a68b90"}}