{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:2KUB7FCWAP4J22RTWXKGUS5PCO","short_pith_number":"pith:2KUB7FCW","canonical_record":{"source":{"id":"2607.10269","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-11T11:56:05Z","cross_cats_sorted":[],"title_canon_sha256":"7d9d6ec40af048754b6ee0866ad5f6bb6688154347878e23c3a94f49b5fd08b3","abstract_canon_sha256":"60cbeecbf5a0efde48d3f704c6b249647155355172f4702f6e1f77a38881806a"},"schema_version":"1.0"},"canonical_sha256":"d2a81f945603f89d6a33b5d46a4baf13b749fadc55718b231f4f8b6ad95f054b","source":{"kind":"arxiv","id":"2607.10269","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.10269","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"arxiv_version","alias_value":"2607.10269v1","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.10269","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"pith_short_12","alias_value":"2KUB7FCWAP4J","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"pith_short_16","alias_value":"2KUB7FCWAP4J22RT","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"pith_short_8","alias_value":"2KUB7FCW","created_at":"2026-07-14T01:20:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:2KUB7FCWAP4J22RTWXKGUS5PCO","target":"record","payload":{"canonical_record":{"source":{"id":"2607.10269","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-11T11:56:05Z","cross_cats_sorted":[],"title_canon_sha256":"7d9d6ec40af048754b6ee0866ad5f6bb6688154347878e23c3a94f49b5fd08b3","abstract_canon_sha256":"60cbeecbf5a0efde48d3f704c6b249647155355172f4702f6e1f77a38881806a"},"schema_version":"1.0"},"canonical_sha256":"d2a81f945603f89d6a33b5d46a4baf13b749fadc55718b231f4f8b6ad95f054b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-14T01:20:33.843798Z","signature_b64":"GCS2Rc9Eyx+b6YQjjSr1u+xau5ygJqwx5WX721TfUjh14W9zcJuMywtwiBBiyRjmlIisJjWrnr1z/1hLi5K1Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d2a81f945603f89d6a33b5d46a4baf13b749fadc55718b231f4f8b6ad95f054b","last_reissued_at":"2026-07-14T01:20:33.842961Z","signature_status":"signed_v1","first_computed_at":"2026-07-14T01:20:33.842961Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.10269","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-14T01:20:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e9qzGCjLcsQFmWq/3OoCT8oaJW0n8BC2scWqS+uT7yncDQ5pYQzys7Of3Ewz1JDdDA9ek7VpUyIQPkAH9qOTAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:17:13.692602Z"},"content_sha256":"a107f1ef58eb0fbdb9f587a1f14c381d67bdb5923e65e8bb05ace5e173def087","schema_version":"1.0","event_id":"sha256:a107f1ef58eb0fbdb9f587a1f14c381d67bdb5923e65e8bb05ace5e173def087"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:2KUB7FCWAP4J22RTWXKGUS5PCO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Devil in the Lens: Analyzing and Defending Physical Prompt Injection Against Vision-Language Models on Wearable Devices","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hao Wang, Shuhao Zhang, Yanda Shao, Yan Long, Yaxin Li","submitted_at":"2026-07-11T11:56:05Z","abstract_excerpt":"Vision-Language Models (VLMs) are rapidly deployed on human-facing wearable devices such as smart glasses to enable multimodal perception and AI-assisted decision-making. While prior research has demonstrated the risks of visual prompt injection into digital image inputs of VLMs, the unique security challenges posed by the increasing integration between physical environments and wearable intelligence, such as those embodied in VLM-enabled AI glasses, remain underexplored. Toward understanding and modeling such threats, our work characterizes how malicious textual information embedded in physic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.10269","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.10269/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-14T01:20:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FNluOhGQdJEH5xMVBE2Ga+mshhyiGWNDFyLGDcuLI2bQjMzf/p+yzDMYPi4TCJldUKq9CQkaTzXFNkc0re+MBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:17:13.693197Z"},"content_sha256":"57baebb957a98816eaae2893c7a26c4f2f012dcb21185c40b859fec27d260bd2","schema_version":"1.0","event_id":"sha256:57baebb957a98816eaae2893c7a26c4f2f012dcb21185c40b859fec27d260bd2"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:2KUB7FCWAP4J22RTWXKGUS5PCO","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/92024.findings-acl.624) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Qiusi Zhan, Zhixiang Liang, Zifan Ying, and Daniel Kang. 2024. InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents. InFindings of the Association for Computational Linguistics: ACL 2024, Lun-We","arxiv_id":"2607.10269","detector":"doi_compliance","evidence":{"ref_index":35,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"Qiusi Zhan, Zhixiang Liang, Zifan Ying, and Daniel Kang. 2024. InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents. InFindings of the Association for Computational Linguistics: ACL 2024, Lun-We","reconstructed_doi":"10.18653/v1/92024.findings-acl.624"},"severity":"advisory","ref_index":35,"audited_at":"2026-07-14T13:08:33.033344Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/92024.findings-acl.624","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"10fdba7736a72951fed692c044abd91dbc0affec8767d7da78fe04eebf1bb5bb","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.0.0","detected_arxiv_id":null,"integrity_event_id":13342,"payload_sha256":"3d24b243e36e126cc5d9cfafafc94569e714135a7b56846f35b579d2bbdc3baf","signature_b64":"DJ0HWMV/nra22Lhv3oQZNykmCcGL0NlubgTVL9vXoezcY4K1P0B+5VNbqYkDn8BKGddKcITgS99hZ/ErPJN+DA==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-14T13:11:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yuVl4aNwXBbxKiikqjTfDUA81/o8uMMUQ5oK5S3HkTR40BAtZWTPj5BDpWwL+ZJof29Fnr+tMLL+7UP8gknoAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:17:13.695656Z"},"content_sha256":"41880df7a3eec41fec1c409cc352d4e224c86ab53529430e52698bcdf9d92afd","schema_version":"1.0","event_id":"sha256:41880df7a3eec41fec1c409cc352d4e224c86ab53529430e52698bcdf9d92afd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2KUB7FCWAP4J22RTWXKGUS5PCO/bundle.json","state_url":"https://pith.science/pith/2KUB7FCWAP4J22RTWXKGUS5PCO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2KUB7FCWAP4J22RTWXKGUS5PCO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T00:17:13Z","links":{"resolver":"https://pith.science/pith/2KUB7FCWAP4J22RTWXKGUS5PCO","bundle":"https://pith.science/pith/2KUB7FCWAP4J22RTWXKGUS5PCO/bundle.json","state":"https://pith.science/pith/2KUB7FCWAP4J22RTWXKGUS5PCO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2KUB7FCWAP4J22RTWXKGUS5PCO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:2KUB7FCWAP4J22RTWXKGUS5PCO","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"60cbeecbf5a0efde48d3f704c6b249647155355172f4702f6e1f77a38881806a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-11T11:56:05Z","title_canon_sha256":"7d9d6ec40af048754b6ee0866ad5f6bb6688154347878e23c3a94f49b5fd08b3"},"schema_version":"1.0","source":{"id":"2607.10269","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.10269","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"arxiv_version","alias_value":"2607.10269v1","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.10269","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"pith_short_12","alias_value":"2KUB7FCWAP4J","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"pith_short_16","alias_value":"2KUB7FCWAP4J22RT","created_at":"2026-07-14T01:20:33Z"},{"alias_kind":"pith_short_8","alias_value":"2KUB7FCW","created_at":"2026-07-14T01:20:33Z"}],"graph_snapshots":[{"event_id":"sha256:57baebb957a98816eaae2893c7a26c4f2f012dcb21185c40b859fec27d260bd2","target":"graph","created_at":"2026-07-14T01:20:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.10269/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Language Models (VLMs) are rapidly deployed on human-facing wearable devices such as smart glasses to enable multimodal perception and AI-assisted decision-making. While prior research has demonstrated the risks of visual prompt injection into digital image inputs of VLMs, the unique security challenges posed by the increasing integration between physical environments and wearable intelligence, such as those embodied in VLM-enabled AI glasses, remain underexplored. Toward understanding and modeling such threats, our work characterizes how malicious textual information embedded in physic","authors_text":"Hao Wang, Shuhao Zhang, Yanda Shao, Yan Long, Yaxin Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-11T11:56:05Z","title":"Devil in the Lens: Analyzing and Defending Physical Prompt Injection Against Vision-Language Models on Wearable Devices"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.10269","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a107f1ef58eb0fbdb9f587a1f14c381d67bdb5923e65e8bb05ace5e173def087","target":"record","created_at":"2026-07-14T01:20:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"60cbeecbf5a0efde48d3f704c6b249647155355172f4702f6e1f77a38881806a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-11T11:56:05Z","title_canon_sha256":"7d9d6ec40af048754b6ee0866ad5f6bb6688154347878e23c3a94f49b5fd08b3"},"schema_version":"1.0","source":{"id":"2607.10269","kind":"arxiv","version":1}},"canonical_sha256":"d2a81f945603f89d6a33b5d46a4baf13b749fadc55718b231f4f8b6ad95f054b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d2a81f945603f89d6a33b5d46a4baf13b749fadc55718b231f4f8b6ad95f054b","first_computed_at":"2026-07-14T01:20:33.842961Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-14T01:20:33.842961Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GCS2Rc9Eyx+b6YQjjSr1u+xau5ygJqwx5WX721TfUjh14W9zcJuMywtwiBBiyRjmlIisJjWrnr1z/1hLi5K1Dw==","signature_status":"signed_v1","signed_at":"2026-07-14T01:20:33.843798Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.10269","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a107f1ef58eb0fbdb9f587a1f14c381d67bdb5923e65e8bb05ace5e173def087","sha256:57baebb957a98816eaae2893c7a26c4f2f012dcb21185c40b859fec27d260bd2","sha256:41880df7a3eec41fec1c409cc352d4e224c86ab53529430e52698bcdf9d92afd"],"state_sha256":"79823fd37ba652c81ef28f903a1c1dee336e01ae789d49ce058a5aefc388bc31"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JTkUysdOBvczuR2p7ah5EWmA+egdrOHPqJIE+QF5j42nXj31GPR9i6Jz6y/yOnSQE5zm1+2vq4o8srq2p9XZAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T00:17:13.697813Z","bundle_sha256":"68644c789064627a213f410d296a660e61fa92b4cfedd8c161ee6668fd2b6def"}}