{"id":"12a7bda4c12de0ae75115c89a474f04bfd05619e39d6a7bb4d7da839882d9265","title":"arXiv cs.AI: Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","argument":"The arXiv cs.AI paper by Jianwei Li and Jung-Eun Kim proposes a way to reduce backdoors in LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters. The authors estimate backdoor directions, construct orthogonal null spaces for each layer or head, and project the LoRA updates onto those spaces. They report that this reduces attack success rates from nearly 100% to less than 10%, while preserving the base model’s benign performance and the adapter’s learned abilities in downstream tasks. The method aims to remove backdoor behavior without discarding useful capabilities learned through the adapter. The authors describe examinations scaling from a single layer in a text classification setting to a full-parameter LLM in a generative task. These are empirical results reported by the authors; the supplied abstract does not give the specific evaluation settings behind the reported reductions and preservation.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied evidence is the arXiv abstract and page, not the paper’s full evaluation details; it does not identify the specific evaluation settings behind the reported attack success rates or capability preservation.","speaker":{"name":"Li, Jianwei, Kim, Jung-Eun","roleAtSource":"Article author"},"source":{"title":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2610.00685","publishedAt":"2026-09-30","dateBasis":"Date basis not provided."},"evidence":[{"text":"Li and Kim propose purifying LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters.","excerpt":"purifying LoRA-tuned LLMs without these assumptions and even without post-hoc retraining of the suspect parameters","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"},{"text":"The method estimates backdoor directions and projects LoRA updates onto orthogonal null spaces constructed for each layer or head.","excerpt":"for each layer or head, construct orthogonal null spaces in both the input and output channels, onto which the LoRA updates are projected.","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"},{"text":"The authors report reducing attack success rates from nearly 100% to less than 10% while preserving benign performance and adapter-learned abilities.","excerpt":"reduces the ASR from nearly 100% to less than 10%, while preserving the base model's benign performance and the adapter's learned abilities","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"},{"text":"The authors describe scaling their examinations from a single layer in text classification to a full-parameter LLM in a generative task.","excerpt":"we progressively scale our approach from a single layer in a text classification setting to a full-parameter LLM in the generative task.","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.00685","checkedAt":"2026-11-09T03:34:08.684Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which evaluation settings support the reported reductions in attack success rates and preservation of the base model’s performance and the adapter’s learned abilities?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI: Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","summary":"The arXiv cs.AI paper by Jianwei Li and Jung-Eun Kim proposes a way to reduce backdoors in LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters. The authors estimate backdoor directions, construct orthogonal null spaces for each layer or head, and project the LoRA updates onto those spaces. They report that this reduces attack success rates from nearly 100% to less than 10%, while preserving the base model’s benign performance and the adapter’s learned abilities in downstream tasks. The method aims to remove backdoor behavior without discarding useful capabilities learned through the adapter. The authors describe examinations scaling from a single layer in a text classification setting to a full-parameter LLM in a generative task. These are empirical results reported by the authors; the supplied abstract does not give the specific evaluation settings behind the reported reductions and preservation.","question":"Which evaluation settings support the reported reductions in attack success rates and preservation of the base model’s performance and the adapter’s learned abilities?","claims":[{"text":"Li and Kim propose purifying LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters.","excerpt":"purifying LoRA-tuned LLMs without these assumptions and even without post-hoc retraining of the suspect parameters","support":"source-stated"},{"text":"The method estimates backdoor directions and projects LoRA updates onto orthogonal null spaces constructed for each layer or head.","excerpt":"for each layer or head, construct orthogonal null spaces in both the input and output channels, onto which the LoRA updates are projected.","support":"source-stated"},{"text":"The authors report reducing attack success rates from nearly 100% to less than 10% while preserving benign performance and adapter-learned abilities.","excerpt":"reduces the ASR from nearly 100% to less than 10%, while preserving the base model's benign performance and the adapter's learned abilities","support":"source-stated"},{"text":"The authors describe scaling their examinations from a single layer in text classification to a full-parameter LLM in a generative task.","excerpt":"we progressively scale our approach from a single layer in a text classification setting to a full-parameter LLM in the generative task.","support":"source-stated"}],"limitations":["The supplied evidence is the arXiv abstract and page, not the paper’s full evaluation details; it does not identify the specific evaluation settings behind the reported attack success rates or capability preservation."],"mediaId":"a49a886f9ccb9e58390b88a41cf016292d497da99df44dc3bd3d418975a21cc6","correctionReason":null,"id":"12a7bda4c12de0ae75115c89a474f04bfd05619e39d6a7bb4d7da839882d9265","publicationId":"8a863546-8034-41e9-8b7c-8929a2ae3e18","version":1,"sourceUrl":"https://arxiv.org/abs/2610.00685","sourceTitle":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-09-30","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-10-02T05:05:12.584Z","createdAt":"2026-11-09T02:31:17.206Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"a49a886f9ccb9e58390b88a41cf016292d497da99df44dc3bd3d418975a21cc6","kind":"article","url":"https://arxiv.org/abs/2610.00685","sourceUrl":"https://arxiv.org/abs/2610.00685","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T02:24:51.860Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.00685","checkedAt":"2026-11-09T03:34:08.684Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"a49a886f9ccb9e58390b88a41cf016292d497da99df44dc3bd3d418975a21cc6","confidence":0.81,"provider":"typesafe","model":"jev-1.13.0","inputHash":"2dbdbf4f7171a06ac90d295cd3cfc514e1cc949c1bf5c28f05893d0315986de3","decidedAt":"2026-11-09T02:24:53.023Z"},"provenance":{"textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observationId":"5700cbfaee7122f073afc08368c91fa5374781d1ad575e6cecec66c57efcded4","retrievedAt":"2026-11-09T02:24:51.761Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"fe275c1a-87ea-4167-885c-8df0406e8469"},"reviewer":{"model":"gpt-6-luna","runId":"a67cfad6-fda5-451f-8c34-f5d68f58dc7a"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-09T02:31:17.206Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Li, Jianwei","url":null,"kind":"unknown"},{"name":"Kim, Jung-Eun","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Li, Jianwei","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Li, Jianwei","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.00685","locator":"head/meta[name=author|citation_author]"},"assertionId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T03:34:08.684Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530","sourceUrl":"https://arxiv.org/abs/2610.00685","contentSha256":"161030e083d463a0d4f5281010247174311b722d68ba93816b0d2000854f5f85","textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observedAt":"2026-11-09T03:34:08.684Z"}},{"actor":{"name":"Kim, Jung-Eun","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kim, Jung-Eun","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.00685","locator":"head/meta[name=author|citation_author]"},"assertionId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T03:34:08.684Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530","sourceUrl":"https://arxiv.org/abs/2610.00685","contentSha256":"161030e083d463a0d4f5281010247174311b722d68ba93816b0d2000854f5f85","textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observedAt":"2026-11-09T03:34:08.684Z"}}],"participationCoverage":{"total":2,"returned":2,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2610.00685","snapshotId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530","contentSha256":"161030e083d463a0d4f5281010247174311b722d68ba93816b0d2000854f5f85","textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observedAt":"2026-11-09T03:34:08.684Z","basis":"publisher-page-metadata","sourceLinks":44,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/12a7bda4c12de0ae75115c89a474f04bfd05619e39d6a7bb4d7da839882d9265/source"}},"canonicalUrl":"https://escapemeridian.com/readings/arxiv-cs-ai-backdoor-purification-for-lora-tuned-llms-via-null-12a7bda4","formats":{"html":"/readings/arxiv-cs-ai-backdoor-purification-for-lora-tuned-llms-via-null-12a7bda4","markdown":"/readings/arxiv-cs-ai-backdoor-purification-for-lora-tuned-llms-via-null-12a7bda4.md","json":"/readings/arxiv-cs-ai-backdoor-purification-for-lora-tuned-llms-via-null-12a7bda4.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-llm","name":"Large language model","explanation":"A language model with many learned numerical settings, used to process and generate language.","referenceUrl":"https://developers.google.com/machine-learning/glossary#large-language-model"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"12a7bda4c12de0ae75115c89a474f04bfd05619e39d6a7bb4d7da839882d9265","revision":"8a863546-8034-41e9-8b7c-8929a2ae3e18","revisionKind":"publication-id","title":"arXiv cs.AI: Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","url":"https://escapemeridian.com/readings/arxiv-cs-ai-backdoor-purification-for-lora-tuned-llms-via-null-12a7bda4"},"source":{"type":"source","id":"https://arxiv.org/abs/2610.00685","revision":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","revisionKind":"sha256-source-text","title":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","url":"https://arxiv.org/abs/2610.00685"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"12a7bda4c12de0ae75115c89a474f04bfd05619e39d6a7bb4d7da839882d9265","title":"arXiv cs.AI: Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","argument":"The arXiv cs.AI paper by Jianwei Li and Jung-Eun Kim proposes a way to reduce backdoors in LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters. The authors estimate backdoor directions, construct orthogonal null spaces for each layer or head, and project the LoRA updates onto those spaces. They report that this reduces attack success rates from nearly 100% to less than 10%, while preserving the base model’s benign performance and the adapter’s learned abilities in downstream tasks. The method aims to remove backdoor behavior without discarding useful capabilities learned through the adapter. The authors describe examinations scaling from a single layer in a text classification setting to a full-parameter LLM in a generative task. These are empirical results reported by the authors; the supplied abstract does not give the specific evaluation settings behind the reported reductions and preservation.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The supplied evidence is the arXiv abstract and page, not the paper’s full evaluation details; it does not identify the specific evaluation settings behind the reported attack success rates or capability preservation.","speaker":{"name":"Li, Jianwei, Kim, Jung-Eun","roleAtSource":"Article author"},"source":{"title":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2610.00685","publishedAt":"2026-09-30","dateBasis":"Date basis not provided."},"evidence":[{"text":"Li and Kim propose purifying LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters.","excerpt":"purifying LoRA-tuned LLMs without these assumptions and even without post-hoc retraining of the suspect parameters","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"},{"text":"The method estimates backdoor directions and projects LoRA updates onto orthogonal null spaces constructed for each layer or head.","excerpt":"for each layer or head, construct orthogonal null spaces in both the input and output channels, onto which the LoRA updates are projected.","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"},{"text":"The authors report reducing attack success rates from nearly 100% to less than 10% while preserving benign performance and adapter-learned abilities.","excerpt":"reduces the ASR from nearly 100% to less than 10%, while preserving the base model's benign performance and the adapter's learned abilities","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"},{"text":"The authors describe scaling their examinations from a single layer in text classification to a full-parameter LLM in a generative task.","excerpt":"we progressively scale our approach from a single layer in a text classification setting to a full-parameter LLM in the generative task.","url":"https://arxiv.org/abs/2610.00685","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.00685","checkedAt":"2026-11-09T03:34:08.684Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which evaluation settings support the reported reductions in attack success rates and preservation of the base model’s performance and the adapter’s learned abilities?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI: Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","summary":"The arXiv cs.AI paper by Jianwei Li and Jung-Eun Kim proposes a way to reduce backdoors in LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters. The authors estimate backdoor directions, construct orthogonal null spaces for each layer or head, and project the LoRA updates onto those spaces. They report that this reduces attack success rates from nearly 100% to less than 10%, while preserving the base model’s benign performance and the adapter’s learned abilities in downstream tasks. The method aims to remove backdoor behavior without discarding useful capabilities learned through the adapter. The authors describe examinations scaling from a single layer in a text classification setting to a full-parameter LLM in a generative task. These are empirical results reported by the authors; the supplied abstract does not give the specific evaluation settings behind the reported reductions and preservation.","question":"Which evaluation settings support the reported reductions in attack success rates and preservation of the base model’s performance and the adapter’s learned abilities?","claims":[{"text":"Li and Kim propose purifying LoRA-tuned LLMs without prior knowledge of triggers, clean references, or post-hoc retraining of the suspect parameters.","excerpt":"purifying LoRA-tuned LLMs without these assumptions and even without post-hoc retraining of the suspect parameters","support":"source-stated"},{"text":"The method estimates backdoor directions and projects LoRA updates onto orthogonal null spaces constructed for each layer or head.","excerpt":"for each layer or head, construct orthogonal null spaces in both the input and output channels, onto which the LoRA updates are projected.","support":"source-stated"},{"text":"The authors report reducing attack success rates from nearly 100% to less than 10% while preserving benign performance and adapter-learned abilities.","excerpt":"reduces the ASR from nearly 100% to less than 10%, while preserving the base model's benign performance and the adapter's learned abilities","support":"source-stated"},{"text":"The authors describe scaling their examinations from a single layer in text classification to a full-parameter LLM in a generative task.","excerpt":"we progressively scale our approach from a single layer in a text classification setting to a full-parameter LLM in the generative task.","support":"source-stated"}],"limitations":["The supplied evidence is the arXiv abstract and page, not the paper’s full evaluation details; it does not identify the specific evaluation settings behind the reported attack success rates or capability preservation."],"mediaId":"a49a886f9ccb9e58390b88a41cf016292d497da99df44dc3bd3d418975a21cc6","correctionReason":null,"id":"12a7bda4c12de0ae75115c89a474f04bfd05619e39d6a7bb4d7da839882d9265","publicationId":"8a863546-8034-41e9-8b7c-8929a2ae3e18","version":1,"sourceUrl":"https://arxiv.org/abs/2610.00685","sourceTitle":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-09-30","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-10-02T05:05:12.584Z","createdAt":"2026-11-09T02:31:17.206Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"a49a886f9ccb9e58390b88a41cf016292d497da99df44dc3bd3d418975a21cc6","kind":"article","url":"https://arxiv.org/abs/2610.00685","sourceUrl":"https://arxiv.org/abs/2610.00685","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T02:24:51.860Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.00685","checkedAt":"2026-11-09T03:34:08.684Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"a49a886f9ccb9e58390b88a41cf016292d497da99df44dc3bd3d418975a21cc6","confidence":0.81,"provider":"typesafe","model":"jev-1.13.0","inputHash":"2dbdbf4f7171a06ac90d295cd3cfc514e1cc949c1bf5c28f05893d0315986de3","decidedAt":"2026-11-09T02:24:53.023Z"},"provenance":{"textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observationId":"5700cbfaee7122f073afc08368c91fa5374781d1ad575e6cecec66c57efcded4","retrievedAt":"2026-11-09T02:24:51.761Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"fe275c1a-87ea-4167-885c-8df0406e8469"},"reviewer":{"model":"gpt-6-luna","runId":"a67cfad6-fda5-451f-8c34-f5d68f58dc7a"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-09T02:31:17.206Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Li, Jianwei","url":null,"kind":"unknown"},{"name":"Kim, Jung-Eun","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Li, Jianwei","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Li, Jianwei","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.00685","locator":"head/meta[name=author|citation_author]"},"assertionId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T03:34:08.684Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530","sourceUrl":"https://arxiv.org/abs/2610.00685","contentSha256":"161030e083d463a0d4f5281010247174311b722d68ba93816b0d2000854f5f85","textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observedAt":"2026-11-09T03:34:08.684Z"}},{"actor":{"name":"Kim, Jung-Eun","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kim, Jung-Eun","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.00685","locator":"head/meta[name=author|citation_author]"},"assertionId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T03:34:08.684Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530","sourceUrl":"https://arxiv.org/abs/2610.00685","contentSha256":"161030e083d463a0d4f5281010247174311b722d68ba93816b0d2000854f5f85","textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observedAt":"2026-11-09T03:34:08.684Z"}}],"participationCoverage":{"total":2,"returned":2,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2610.00685","snapshotId":"aef4abb341159cd3f68a59176b96e5c0bd3ea72990bd0e4f29b53f75619a4530","contentSha256":"161030e083d463a0d4f5281010247174311b722d68ba93816b0d2000854f5f85","textHash":"0b2902f253802fb9e7f7c894cfc11dbc8fe68da791056daeee1e3e773ff018e2","observedAt":"2026-11-09T03:34:08.684Z","basis":"publisher-page-metadata","sourceLinks":44,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/12a7bda4c12de0ae75115c89a474f04bfd05619e39d6a7bb4d7da839882d9265/source"}}}],"audits":[{"publicationId":"8a863546-8034-41e9-8b7c-8929a2ae3e18","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading correctly attributes the paper to Jianwei Li and Jung-Eun Kim on arXiv cs.AI. It presents the method and results as the authors' proposals and reported findings, not as established fact.","excerpt":"Authors:Jianwei Li, Jung-Eun Kim"},{"dimension":"summary","status":"uncertain","explanation":"The summary is faithful, but a non-specialist would struggle with it. It never says what a backdoor attack is (a hidden trigger that makes a model misbehave), what LoRA or an adapter is, or what attack success rate measures. It also drops the abstract's stated motivation: rapid adoption of LLMs and PEFT has made backdoor risk more severe, and existing defenses need strong assumptions. Smallest repair: add one plain-language sentence defining backdoor and LoRA/adapter (or tooltip them), plus one sentence on the stated motivation. The title only repeats the paper's jargon.","excerpt":"With the rapid adoption of large language models (LLMs) and parameter-efficient fine-tuning (PEFT) methods, the risk of backdoor attacks has become more severe."},{"dimension":"date","status":"pass","explanation":"The originalPublished date of 2026-09-30 matches the v1 submission date. It is not the later v2 revision (4 Nov) or the feed date (6 Nov).","excerpt":"[Submitted on 30 Sep 2026 (v1), last revised 4 Nov 2026 (this version, v2)]"},{"dimension":"support","status":"pass","explanation":"Each claim matches the abstract: no reliance on trigger knowledge, clean references or retraining; the null-space projection per layer or head; ASR falling from nearly 100% to under 10% with capabilities preserved; and the progressive scaling of experiments. The draft adds no benefits or costs beyond the abstract, and the limitation about missing evaluation details is appropriate.","excerpt":"reduces the ASR from nearly 100% to less than 10%, while preserving the base model's benign performance and the adapter's learned abilities"},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct arXiv abstract page for this paper, which is the most direct access to the source.","excerpt":null}],"createdAt":"2026-11-09T02:31:17.206Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}