{"id":"ae10092269104a329914cdfc56d594bd4b2c70c937a08b2ec4720be8562fcef1","title":"arXiv cs.AI: A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","argument":"The authors—Quentin Le Roux, Marti Jimenez, Yannick Teglia and Philippe Loubet Moundi—propose three practical defenses for deep learning-based face recognition systems whose training is done in-house but whose data comes from third parties that may be compromised. They target data poisoning-based backdoor attacks, in which tainted training data can create a hidden vulnerability. One defense looks for poisoned identities during training or before deployment; two others filter suspicious inputs at inference-time, before a system returns an answer to a potential attacker. The authors frame these measures as ways to harden mature, multi-stage systems. They say they evaluate the methods on realistic face recognition workloads and present their computational impact. The abstract does not name or describe the three methods, or report results or computational impact figures. It therefore outlines the proposed approach and evaluation scope, but does not establish how well the defenses work or what they cost to run.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied abstract does not name or describe the three defenses, or give their evaluation results or computational impact figures; the strength and costs of the methods cannot be assessed from this evidence alone.","speaker":{"name":"Roux, Quentin Le, Jimenez, Marti, Teglia, Yannick, Moundi, Philippe Loubet","roleAtSource":"Article author"},"source":{"title":"A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.06412","publishedAt":"2026-11-04","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors propose three defenses for face recognition systems whose training data comes from potentially compromised third parties, even though model training is performed in-house.","excerpt":"although model training is performed in-house, training data is sourced from possibly-compromised third parties. Given this setting, we present three practical defense","url":"https://arxiv.org/abs/2611.06412","relationship":"Source-stated"},{"text":"One proposed defense detects poisoned identities during training or before deployment; the other two filter suspicious inputs at inference-time.","excerpt":"The first operates at training-time, detecting poisoned identities during training or prior to a pipeline's deployment. The last two operate at inference-time, filtering suspicious inputs","url":"https://arxiv.org/abs/2611.06412","relationship":"Source-stated"},{"text":"The authors say they evaluate the methods on realistic face recognition workloads and present their computational impact.","excerpt":"Each method is presented with their motivation, algorithms and computational impact, and evaluated on realistic face recognition workloads.","url":"https://arxiv.org/abs/2611.06412","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06412","checkedAt":"2026-11-09T12:04:09.006Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What results and computational impacts do the authors report for the three defenses on the face recognition workloads they evaluate?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI: A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","summary":"The authors—Quentin Le Roux, Marti Jimenez, Yannick Teglia and Philippe Loubet Moundi—propose three practical defenses for deep learning-based face recognition systems whose training is done in-house but whose data comes from third parties that may be compromised. They target data poisoning-based backdoor attacks, in which tainted training data can create a hidden vulnerability. One defense looks for poisoned identities during training or before deployment; two others filter suspicious inputs at inference-time, before a system returns an answer to a potential attacker. The authors frame these measures as ways to harden mature, multi-stage systems. They say they evaluate the methods on realistic face recognition workloads and present their computational impact. The abstract does not name or describe the three methods, or report results or computational impact figures. It therefore outlines the proposed approach and evaluation scope, but does not establish how well the defenses work or what they cost to run.","question":"What results and computational impacts do the authors report for the three defenses on the face recognition workloads they evaluate?","claims":[{"text":"The authors propose three defenses for face recognition systems whose training data comes from potentially compromised third parties, even though model training is performed in-house.","excerpt":"although model training is performed in-house, training data is sourced from possibly-compromised third parties. Given this setting, we present three practical defense","support":"source-stated"},{"text":"One proposed defense detects poisoned identities during training or before deployment; the other two filter suspicious inputs at inference-time.","excerpt":"The first operates at training-time, detecting poisoned identities during training or prior to a pipeline's deployment. The last two operate at inference-time, filtering suspicious inputs","support":"source-stated"},{"text":"The authors say they evaluate the methods on realistic face recognition workloads and present their computational impact.","excerpt":"Each method is presented with their motivation, algorithms and computational impact, and evaluated on realistic face recognition workloads.","support":"source-stated"}],"limitations":["The supplied abstract does not name or describe the three defenses, or give their evaluation results or computational impact figures; the strength and costs of the methods cannot be assessed from this evidence alone."],"mediaId":"175db5acb3111c16b368586b90479097fad3b377499652a0a763ec1bbe1366d8","correctionReason":"Added the deep learning-based qualifier to the title and summary to match the paper’s stated scope.","id":"ae10092269104a329914cdfc56d594bd4b2c70c937a08b2ec4720be8562fcef1","publicationId":"ee1d5579-844c-490d-811b-4bb782d0c2d8","version":1,"sourceUrl":"https://arxiv.org/abs/2611.06412","sourceTitle":"A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-04","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:00:35.249Z","createdAt":"2026-11-09T11:32:56.452Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"175db5acb3111c16b368586b90479097fad3b377499652a0a763ec1bbe1366d8","kind":"article","url":"https://arxiv.org/abs/2611.06412","sourceUrl":"https://arxiv.org/abs/2611.06412","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T11:26:08.716Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06412","checkedAt":"2026-11-09T12:04:09.006Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"175db5acb3111c16b368586b90479097fad3b377499652a0a763ec1bbe1366d8","confidence":0.55,"provider":"typesafe","model":"jev-1.13.0","inputHash":"bc0d44d50fedbd2780f83989a3611b9e2df928de6d741c37545de26e6081d7c0","decidedAt":"2026-11-09T11:26:10.486Z"},"provenance":{"textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observationId":"369ab1ecab6e805b20aa4722aa480689a97f6fbbab9af8ce3c830fc71eca878f","retrievedAt":"2026-11-09T11:26:08.422Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"db57fd66-c40d-4d1a-8d32-aa416655a978"},"reviewer":{"model":"gpt-6-luna","runId":"1b2a795c-2ec2-4a81-85f0-ebe0aa4d9fe8"}},"audit":{"status":"passed","reviewedAt":"2026-11-09T11:32:56.452Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Roux, Quentin Le","url":null,"kind":"unknown"},{"name":"Jimenez, Marti","url":null,"kind":"unknown"},{"name":"Teglia, Yannick","url":null,"kind":"unknown"},{"name":"Moundi, Philippe Loubet","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Roux, Quentin Le","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Roux, Quentin Le","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}},{"actor":{"name":"Jimenez, Marti","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Jimenez, Marti","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}},{"actor":{"name":"Teglia, Yannick","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Teglia, Yannick","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}},{"actor":{"name":"Moundi, Philippe Loubet","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Moundi, Philippe Loubet","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}}],"participationCoverage":{"total":4,"returned":4,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.06412","snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z","basis":"publisher-page-metadata","sourceLinks":45,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/ae10092269104a329914cdfc56d594bd4b2c70c937a08b2ec4720be8562fcef1/source"}},"canonicalUrl":"https://escapemeridian.com/readings/arxiv-cs-ai-a-bag-of-tricks-for-defending-deep-learning-based-ae100922","formats":{"html":"/readings/arxiv-cs-ai-a-bag-of-tricks-for-defending-deep-learning-based-ae100922","markdown":"/readings/arxiv-cs-ai-a-bag-of-tricks-for-defending-deep-learning-based-ae100922.md","json":"/readings/arxiv-cs-ai-a-bag-of-tricks-for-defending-deep-learning-based-ae100922.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-deep-learning","name":"Deep learning","explanation":"Machine learning that uses many layers of simple calculations; the basis of most current AI.","referenceUrl":"https://en.wikipedia.org/wiki/Deep_learning"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"},{"id":"time","name":"TIME","kind":"organization","context":"TIME is a news magazine publishing reporting on world affairs, business, technology and the workers behind digital services.","referenceUrls":["https://time.com/"],"path":"/entities/time","json":"/entities/time.json","markdown":"/entities/time.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"ae10092269104a329914cdfc56d594bd4b2c70c937a08b2ec4720be8562fcef1","revision":"ee1d5579-844c-490d-811b-4bb782d0c2d8","revisionKind":"publication-id","title":"arXiv cs.AI: A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","url":"https://escapemeridian.com/readings/arxiv-cs-ai-a-bag-of-tricks-for-defending-deep-learning-based-ae100922"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.06412","revision":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","revisionKind":"sha256-source-text","title":"A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","url":"https://arxiv.org/abs/2611.06412"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"ae10092269104a329914cdfc56d594bd4b2c70c937a08b2ec4720be8562fcef1","title":"arXiv cs.AI: A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","argument":"The authors—Quentin Le Roux, Marti Jimenez, Yannick Teglia and Philippe Loubet Moundi—propose three practical defenses for deep learning-based face recognition systems whose training is done in-house but whose data comes from third parties that may be compromised. They target data poisoning-based backdoor attacks, in which tainted training data can create a hidden vulnerability. One defense looks for poisoned identities during training or before deployment; two others filter suspicious inputs at inference-time, before a system returns an answer to a potential attacker. The authors frame these measures as ways to harden mature, multi-stage systems. They say they evaluate the methods on realistic face recognition workloads and present their computational impact. The abstract does not name or describe the three methods, or report results or computational impact figures. It therefore outlines the proposed approach and evaluation scope, but does not establish how well the defenses work or what they cost to run.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied abstract does not name or describe the three defenses, or give their evaluation results or computational impact figures; the strength and costs of the methods cannot be assessed from this evidence alone.","speaker":{"name":"Roux, Quentin Le, Jimenez, Marti, Teglia, Yannick, Moundi, Philippe Loubet","roleAtSource":"Article author"},"source":{"title":"A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.06412","publishedAt":"2026-11-04","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors propose three defenses for face recognition systems whose training data comes from potentially compromised third parties, even though model training is performed in-house.","excerpt":"although model training is performed in-house, training data is sourced from possibly-compromised third parties. Given this setting, we present three practical defense","url":"https://arxiv.org/abs/2611.06412","relationship":"Source-stated"},{"text":"One proposed defense detects poisoned identities during training or before deployment; the other two filter suspicious inputs at inference-time.","excerpt":"The first operates at training-time, detecting poisoned identities during training or prior to a pipeline's deployment. The last two operate at inference-time, filtering suspicious inputs","url":"https://arxiv.org/abs/2611.06412","relationship":"Source-stated"},{"text":"The authors say they evaluate the methods on realistic face recognition workloads and present their computational impact.","excerpt":"Each method is presented with their motivation, algorithms and computational impact, and evaluated on realistic face recognition workloads.","url":"https://arxiv.org/abs/2611.06412","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06412","checkedAt":"2026-11-09T12:04:09.006Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What results and computational impacts do the authors report for the three defenses on the face recognition workloads they evaluate?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI: A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","summary":"The authors—Quentin Le Roux, Marti Jimenez, Yannick Teglia and Philippe Loubet Moundi—propose three practical defenses for deep learning-based face recognition systems whose training is done in-house but whose data comes from third parties that may be compromised. They target data poisoning-based backdoor attacks, in which tainted training data can create a hidden vulnerability. One defense looks for poisoned identities during training or before deployment; two others filter suspicious inputs at inference-time, before a system returns an answer to a potential attacker. The authors frame these measures as ways to harden mature, multi-stage systems. They say they evaluate the methods on realistic face recognition workloads and present their computational impact. The abstract does not name or describe the three methods, or report results or computational impact figures. It therefore outlines the proposed approach and evaluation scope, but does not establish how well the defenses work or what they cost to run.","question":"What results and computational impacts do the authors report for the three defenses on the face recognition workloads they evaluate?","claims":[{"text":"The authors propose three defenses for face recognition systems whose training data comes from potentially compromised third parties, even though model training is performed in-house.","excerpt":"although model training is performed in-house, training data is sourced from possibly-compromised third parties. Given this setting, we present three practical defense","support":"source-stated"},{"text":"One proposed defense detects poisoned identities during training or before deployment; the other two filter suspicious inputs at inference-time.","excerpt":"The first operates at training-time, detecting poisoned identities during training or prior to a pipeline's deployment. The last two operate at inference-time, filtering suspicious inputs","support":"source-stated"},{"text":"The authors say they evaluate the methods on realistic face recognition workloads and present their computational impact.","excerpt":"Each method is presented with their motivation, algorithms and computational impact, and evaluated on realistic face recognition workloads.","support":"source-stated"}],"limitations":["The supplied abstract does not name or describe the three defenses, or give their evaluation results or computational impact figures; the strength and costs of the methods cannot be assessed from this evidence alone."],"mediaId":"175db5acb3111c16b368586b90479097fad3b377499652a0a763ec1bbe1366d8","correctionReason":"Added the deep learning-based qualifier to the title and summary to match the paper’s stated scope.","id":"ae10092269104a329914cdfc56d594bd4b2c70c937a08b2ec4720be8562fcef1","publicationId":"ee1d5579-844c-490d-811b-4bb782d0c2d8","version":1,"sourceUrl":"https://arxiv.org/abs/2611.06412","sourceTitle":"A Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor Attacks","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-04","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:00:35.249Z","createdAt":"2026-11-09T11:32:56.452Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"175db5acb3111c16b368586b90479097fad3b377499652a0a763ec1bbe1366d8","kind":"article","url":"https://arxiv.org/abs/2611.06412","sourceUrl":"https://arxiv.org/abs/2611.06412","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T11:26:08.716Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06412","checkedAt":"2026-11-09T12:04:09.006Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"175db5acb3111c16b368586b90479097fad3b377499652a0a763ec1bbe1366d8","confidence":0.55,"provider":"typesafe","model":"jev-1.13.0","inputHash":"bc0d44d50fedbd2780f83989a3611b9e2df928de6d741c37545de26e6081d7c0","decidedAt":"2026-11-09T11:26:10.486Z"},"provenance":{"textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observationId":"369ab1ecab6e805b20aa4722aa480689a97f6fbbab9af8ce3c830fc71eca878f","retrievedAt":"2026-11-09T11:26:08.422Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"db57fd66-c40d-4d1a-8d32-aa416655a978"},"reviewer":{"model":"gpt-6-luna","runId":"1b2a795c-2ec2-4a81-85f0-ebe0aa4d9fe8"}},"audit":{"status":"passed","reviewedAt":"2026-11-09T11:32:56.452Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Roux, Quentin Le","url":null,"kind":"unknown"},{"name":"Jimenez, Marti","url":null,"kind":"unknown"},{"name":"Teglia, Yannick","url":null,"kind":"unknown"},{"name":"Moundi, Philippe Loubet","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Roux, Quentin Le","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Roux, Quentin Le","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}},{"actor":{"name":"Jimenez, Marti","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Jimenez, Marti","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}},{"actor":{"name":"Teglia, Yannick","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Teglia, Yannick","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}},{"actor":{"name":"Moundi, Philippe Loubet","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Moundi, Philippe Loubet","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06412","locator":"head/meta[name=author|citation_author]"},"assertionId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T12:04:09.006Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","sourceUrl":"https://arxiv.org/abs/2611.06412","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z"}}],"participationCoverage":{"total":4,"returned":4,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.06412","snapshotId":"101592f86885b916333d6d1b1aac5eaf48eeb482c23d7ddb43283a4deb1daca4","contentSha256":"2679038b5460918e9fd1f24f6b84e6710468fab170e15a95415cb07fd795c771","textHash":"d3a62a7774a11e56ec4bb6a2a85c2cf4dd7e2faec59499023c97d1d54e595699","observedAt":"2026-11-09T12:04:09.006Z","basis":"publisher-page-metadata","sourceLinks":45,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/ae10092269104a329914cdfc56d594bd4b2c70c937a08b2ec4720be8562fcef1/source"}}}],"audits":[{"publicationId":"ee1d5579-844c-490d-811b-4bb782d0c2d8","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"The four authors are named correctly, and the claims are attributed to them rather than presented as established fact. The arXiv cs.AI label matches the feed publisher, although the paper's primary category is cs.CV.","excerpt":"Authors:Quentin Le Roux, Marti Jimenez, Yannick Teglia, Philippe Loubet Moundi"},{"dimension":"summary","status":"pass","explanation":"The summary accurately conveys the threat model, the three defenses and when each operates, and the stated evaluation scope. Data-poisoning backdoors are explained in plain language. The limitation that the abstract does not 'name or describe' the methods slightly understates the brief descriptions it gives; 'does not detail' would be more precise. This is not material. The question is a fair unresolved issue.","excerpt":"we present three practical defense \"tricks\" against data poisoning-based backdoor attacks"},{"dimension":"date","status":"pass","explanation":"The originalPublished date of 2026-11-04 matches the v1 submission date. The feed date of 2026-11-05 is correctly not used.","excerpt":"[Submitted on 4 Nov 2026]"},{"dimension":"support","status":"pass","explanation":"Each claim is supported by a verbatim excerpt. The reading does not invent results, costs or benefits, and it correctly notes that the abstract does not establish effectiveness or cost.","excerpt":"Each method is presented with their motivation, algorithms and computational impact, and evaluated on realistic face recognition workloads."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct arXiv abstract page for the source paper.","excerpt":null}],"createdAt":"2026-11-09T11:32:56.452Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}