{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3NZIYMGYFTYCFXT5R4HGISQGOD","short_pith_number":"pith:3NZIYMGY","canonical_record":{"source":{"id":"2508.11854","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-16T00:38:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d57d6e4e9a609c5521df0b6ebf99e4a5841f3d66dd84f9afb011bd900bcde0ce","abstract_canon_sha256":"6a1fb6c90c01ae0df03ce843ef70f48030dd77b3910a0cc02ed67278c3501c85"},"schema_version":"1.0"},"canonical_sha256":"db728c30d82cf022de7d8f0e644a0670eecaa1b55192187f4671364ea1df67c4","source":{"kind":"arxiv","id":"2508.11854","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.11854","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"arxiv_version","alias_value":"2508.11854v2","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.11854","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"pith_short_12","alias_value":"3NZIYMGYFTYC","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"pith_short_16","alias_value":"3NZIYMGYFTYCFXT5","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"pith_short_8","alias_value":"3NZIYMGY","created_at":"2026-07-05T12:06:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3NZIYMGYFTYCFXT5R4HGISQGOD","target":"record","payload":{"canonical_record":{"source":{"id":"2508.11854","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-16T00:38:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d57d6e4e9a609c5521df0b6ebf99e4a5841f3d66dd84f9afb011bd900bcde0ce","abstract_canon_sha256":"6a1fb6c90c01ae0df03ce843ef70f48030dd77b3910a0cc02ed67278c3501c85"},"schema_version":"1.0"},"canonical_sha256":"db728c30d82cf022de7d8f0e644a0670eecaa1b55192187f4671364ea1df67c4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:06:17.979694Z","signature_b64":"LYJnkdfUiBKrzBxlVPW34Fbf+B2OyvMTF2om9RDqiH5EUW8w+G5ZulRt+rpNPepfQLX8st2Z5SjxBb+mQ7I5Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"db728c30d82cf022de7d8f0e644a0670eecaa1b55192187f4671364ea1df67c4","last_reissued_at":"2026-07-05T12:06:17.979131Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:06:17.979131Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.11854","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LAr2l7MTZwLKQt5Rx0f3NJqYLRnA2LfpiAeCYBxOpeyvPUsOLRMveYAaToB1/qinaxO17FbanbHC5qvcrUhcDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T08:47:36.829182Z"},"content_sha256":"eb55ca99c1ac42dc8047ae472c30d98ad0ddaa65dd2803f002d8656c73e653d3","schema_version":"1.0","event_id":"sha256:eb55ca99c1ac42dc8047ae472c30d98ad0ddaa65dd2803f002d8656c73e653d3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3NZIYMGYFTYCFXT5R4HGISQGOD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ComplicitSplat: Downstream Models are Vulnerable to Blackbox Attacks by 3D Gaussian Splat Camouflages","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Aeree Cho, Duen Horng Chau, Haorang Wang, Haoyang Yang, Mansi Phute, Martin Andreoni, Matthew Hull, Matthew Lau, Pratham Mehta, Wenke Lee, Wilian Lunardi","submitted_at":"2025-08-16T00:38:34Z","abstract_excerpt":"As 3D Gaussian Splatting (3DGS) gains rapid adoption in safety-critical tasks for efficient novel-view synthesis from static images, how might an adversary tamper images to cause harm? We introduce ComplicitSplat, the first attack that exploits standard 3DGS shading methods to create viewpoint-specific camouflage - colors and textures that change with viewing angle - to embed adversarial content in scene objects that are visible only from specific viewpoints and without requiring access to model architecture or weights. Our extensive experiments show that ComplicitSplat generalizes to successf"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.11854","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.11854/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aIiatZvjl3hfWn4oc1Y5nVUbZlzZRhHZYUQiXG7gulBtqPFk6+91Adj9JHDbXE/WtZDC7TAYqj1Q9nu1u0+DAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T08:47:36.829698Z"},"content_sha256":"4d36b690189c05cd4c564afd681d2a591e82d71fc158421b7c018a0c69c8bcee","schema_version":"1.0","event_id":"sha256:4d36b690189c05cd4c564afd681d2a591e82d71fc158421b7c018a0c69c8bcee"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3NZIYMGYFTYCFXT5R4HGISQGOD/bundle.json","state_url":"https://pith.science/pith/3NZIYMGYFTYCFXT5R4HGISQGOD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3NZIYMGYFTYCFXT5R4HGISQGOD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T08:47:36Z","links":{"resolver":"https://pith.science/pith/3NZIYMGYFTYCFXT5R4HGISQGOD","bundle":"https://pith.science/pith/3NZIYMGYFTYCFXT5R4HGISQGOD/bundle.json","state":"https://pith.science/pith/3NZIYMGYFTYCFXT5R4HGISQGOD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3NZIYMGYFTYCFXT5R4HGISQGOD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3NZIYMGYFTYCFXT5R4HGISQGOD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6a1fb6c90c01ae0df03ce843ef70f48030dd77b3910a0cc02ed67278c3501c85","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-16T00:38:34Z","title_canon_sha256":"d57d6e4e9a609c5521df0b6ebf99e4a5841f3d66dd84f9afb011bd900bcde0ce"},"schema_version":"1.0","source":{"id":"2508.11854","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.11854","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"arxiv_version","alias_value":"2508.11854v2","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.11854","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"pith_short_12","alias_value":"3NZIYMGYFTYC","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"pith_short_16","alias_value":"3NZIYMGYFTYCFXT5","created_at":"2026-07-05T12:06:17Z"},{"alias_kind":"pith_short_8","alias_value":"3NZIYMGY","created_at":"2026-07-05T12:06:17Z"}],"graph_snapshots":[{"event_id":"sha256:4d36b690189c05cd4c564afd681d2a591e82d71fc158421b7c018a0c69c8bcee","target":"graph","created_at":"2026-07-05T12:06:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.11854/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As 3D Gaussian Splatting (3DGS) gains rapid adoption in safety-critical tasks for efficient novel-view synthesis from static images, how might an adversary tamper images to cause harm? We introduce ComplicitSplat, the first attack that exploits standard 3DGS shading methods to create viewpoint-specific camouflage - colors and textures that change with viewing angle - to embed adversarial content in scene objects that are visible only from specific viewpoints and without requiring access to model architecture or weights. Our extensive experiments show that ComplicitSplat generalizes to successf","authors_text":"Aeree Cho, Duen Horng Chau, Haorang Wang, Haoyang Yang, Mansi Phute, Martin Andreoni, Matthew Hull, Matthew Lau, Pratham Mehta, Wenke Lee, Wilian Lunardi","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-16T00:38:34Z","title":"ComplicitSplat: Downstream Models are Vulnerable to Blackbox Attacks by 3D Gaussian Splat Camouflages"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.11854","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eb55ca99c1ac42dc8047ae472c30d98ad0ddaa65dd2803f002d8656c73e653d3","target":"record","created_at":"2026-07-05T12:06:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6a1fb6c90c01ae0df03ce843ef70f48030dd77b3910a0cc02ed67278c3501c85","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-16T00:38:34Z","title_canon_sha256":"d57d6e4e9a609c5521df0b6ebf99e4a5841f3d66dd84f9afb011bd900bcde0ce"},"schema_version":"1.0","source":{"id":"2508.11854","kind":"arxiv","version":2}},"canonical_sha256":"db728c30d82cf022de7d8f0e644a0670eecaa1b55192187f4671364ea1df67c4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"db728c30d82cf022de7d8f0e644a0670eecaa1b55192187f4671364ea1df67c4","first_computed_at":"2026-07-05T12:06:17.979131Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:06:17.979131Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LYJnkdfUiBKrzBxlVPW34Fbf+B2OyvMTF2om9RDqiH5EUW8w+G5ZulRt+rpNPepfQLX8st2Z5SjxBb+mQ7I5Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:06:17.979694Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.11854","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eb55ca99c1ac42dc8047ae472c30d98ad0ddaa65dd2803f002d8656c73e653d3","sha256:4d36b690189c05cd4c564afd681d2a591e82d71fc158421b7c018a0c69c8bcee"],"state_sha256":"412ce7e939737756a51aa6d024159ccba146294ba6c6ddcfed428a09698b8880"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NU+6uL8oyNXCgrHiDEywz+aDmdYtbt9sL93jNGcV07qZfKVqbfSNsQEkvmx1tSF3unsbTs+7+3ayiNGgEhdPDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T08:47:36.835418Z","bundle_sha256":"c388fe6fc184c472b4d9e55b0c7047e854b8fd450a79dc332eda826c59688d55"}}