{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:52JP5X3OGDQNHST7UVIVX2J7K6","short_pith_number":"pith:52JP5X3O","canonical_record":{"source":{"id":"2412.00114","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-28T05:55:13Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b66366ff2b825bae449715003509998bfc473888e9421de2402868264f2f76c7","abstract_canon_sha256":"24c93d0ef7f5a5d73a67a5efc03012b3f879d2250332b6777a724c682a9dead6"},"schema_version":"1.0"},"canonical_sha256":"ee92fedf6e30e0d3ca7fa5515be93f57b98e0f85ac8a6d2874967e67e0836f31","source":{"kind":"arxiv","id":"2412.00114","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.00114","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"arxiv_version","alias_value":"2412.00114v2","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.00114","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"pith_short_12","alias_value":"52JP5X3OGDQN","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"pith_short_16","alias_value":"52JP5X3OGDQNHST7","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"pith_short_8","alias_value":"52JP5X3O","created_at":"2026-07-05T10:45:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:52JP5X3OGDQNHST7UVIVX2J7K6","target":"record","payload":{"canonical_record":{"source":{"id":"2412.00114","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-28T05:55:13Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b66366ff2b825bae449715003509998bfc473888e9421de2402868264f2f76c7","abstract_canon_sha256":"24c93d0ef7f5a5d73a67a5efc03012b3f879d2250332b6777a724c682a9dead6"},"schema_version":"1.0"},"canonical_sha256":"ee92fedf6e30e0d3ca7fa5515be93f57b98e0f85ac8a6d2874967e67e0836f31","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:45:57.720648Z","signature_b64":"vX9DZxCAAbltM1OjvzGOypks2IK8JDd78oTREk6791tV04PdSCSu62iRz+VLeue5xYuL6Xo00BFw2JkXMbsnAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ee92fedf6e30e0d3ca7fa5515be93f57b98e0f85ac8a6d2874967e67e0836f31","last_reissued_at":"2026-07-05T10:45:57.720176Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:45:57.720176Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.00114","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:45:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Xlg3aMoyW88wOduQ70IWSpbA+PquJAbeEC12QFr346PbcjmQrc9iTf9LEwvSH/J9ik4H6ADHuZfgpRbZGecqBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T20:26:27.648972Z"},"content_sha256":"17e82af5ffda53737ab17baedb2c3d39db3dc8e00db24bdefec0c43f82dd12f7","schema_version":"1.0","event_id":"sha256:17e82af5ffda53737ab17baedb2c3d39db3dc8e00db24bdefec0c43f82dd12f7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:52JP5X3OGDQNHST7UVIVX2J7K6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Di Lin, Ivor Tsang, Jie Zhang, Qing Guo, Tianwei Zhang, Yang Liu, Yue Cao, Yun Xing","submitted_at":"2024-11-28T05:55:13Z","abstract_excerpt":"Large vision-language models (LVLMs) have shown remarkable capabilities in interpreting visual content. While existing works demonstrate these models' vulnerability to deliberately placed adversarial texts, such texts are often easily identifiable as anomalous. In this paper, we present the first approach to generate scene-coherent typographic adversarial attacks that mislead advanced LVLMs while maintaining visual naturalness through the capability of the LLM-based agent. Our approach addresses three critical questions: what adversarial text to generate, where to place it within the scene, an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.00114","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.00114/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:45:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FiVXzG+VchruOK8phAtEWcpR/dMyUT4wSY+Qw2/hgRZxh11p7np/n4Ub5mvrDLRC+wf2Gs7CCF5i9RfsZJfyBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T20:26:27.649661Z"},"content_sha256":"e5e096c28f0fda91d4298a6b23a6167a57b06666bf5a41d1a0187e108430b8d0","schema_version":"1.0","event_id":"sha256:e5e096c28f0fda91d4298a6b23a6167a57b06666bf5a41d1a0187e108430b8d0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/52JP5X3OGDQNHST7UVIVX2J7K6/bundle.json","state_url":"https://pith.science/pith/52JP5X3OGDQNHST7UVIVX2J7K6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/52JP5X3OGDQNHST7UVIVX2J7K6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T20:26:27Z","links":{"resolver":"https://pith.science/pith/52JP5X3OGDQNHST7UVIVX2J7K6","bundle":"https://pith.science/pith/52JP5X3OGDQNHST7UVIVX2J7K6/bundle.json","state":"https://pith.science/pith/52JP5X3OGDQNHST7UVIVX2J7K6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/52JP5X3OGDQNHST7UVIVX2J7K6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:52JP5X3OGDQNHST7UVIVX2J7K6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"24c93d0ef7f5a5d73a67a5efc03012b3f879d2250332b6777a724c682a9dead6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-28T05:55:13Z","title_canon_sha256":"b66366ff2b825bae449715003509998bfc473888e9421de2402868264f2f76c7"},"schema_version":"1.0","source":{"id":"2412.00114","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.00114","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"arxiv_version","alias_value":"2412.00114v2","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.00114","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"pith_short_12","alias_value":"52JP5X3OGDQN","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"pith_short_16","alias_value":"52JP5X3OGDQNHST7","created_at":"2026-07-05T10:45:57Z"},{"alias_kind":"pith_short_8","alias_value":"52JP5X3O","created_at":"2026-07-05T10:45:57Z"}],"graph_snapshots":[{"event_id":"sha256:e5e096c28f0fda91d4298a6b23a6167a57b06666bf5a41d1a0187e108430b8d0","target":"graph","created_at":"2026-07-05T10:45:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.00114/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large vision-language models (LVLMs) have shown remarkable capabilities in interpreting visual content. While existing works demonstrate these models' vulnerability to deliberately placed adversarial texts, such texts are often easily identifiable as anomalous. In this paper, we present the first approach to generate scene-coherent typographic adversarial attacks that mislead advanced LVLMs while maintaining visual naturalness through the capability of the LLM-based agent. Our approach addresses three critical questions: what adversarial text to generate, where to place it within the scene, an","authors_text":"Di Lin, Ivor Tsang, Jie Zhang, Qing Guo, Tianwei Zhang, Yang Liu, Yue Cao, Yun Xing","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-28T05:55:13Z","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.00114","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:17e82af5ffda53737ab17baedb2c3d39db3dc8e00db24bdefec0c43f82dd12f7","target":"record","created_at":"2026-07-05T10:45:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"24c93d0ef7f5a5d73a67a5efc03012b3f879d2250332b6777a724c682a9dead6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-28T05:55:13Z","title_canon_sha256":"b66366ff2b825bae449715003509998bfc473888e9421de2402868264f2f76c7"},"schema_version":"1.0","source":{"id":"2412.00114","kind":"arxiv","version":2}},"canonical_sha256":"ee92fedf6e30e0d3ca7fa5515be93f57b98e0f85ac8a6d2874967e67e0836f31","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ee92fedf6e30e0d3ca7fa5515be93f57b98e0f85ac8a6d2874967e67e0836f31","first_computed_at":"2026-07-05T10:45:57.720176Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:45:57.720176Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vX9DZxCAAbltM1OjvzGOypks2IK8JDd78oTREk6791tV04PdSCSu62iRz+VLeue5xYuL6Xo00BFw2JkXMbsnAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:45:57.720648Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.00114","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:17e82af5ffda53737ab17baedb2c3d39db3dc8e00db24bdefec0c43f82dd12f7","sha256:e5e096c28f0fda91d4298a6b23a6167a57b06666bf5a41d1a0187e108430b8d0"],"state_sha256":"6cc390ce55ab7eb6ced2f56cd18303fbe2cf66ec2040a942026d975a2ed71c5d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5aodo1MvNE5EsditvkBI+lhKCStOxYaQJNK6qL5hG0r2gEK2909GzQPLytcGObset4Ms9+gGw02ltK/jwGrzAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T20:26:27.656098Z","bundle_sha256":"5b0ce5f426ad696a7ecfdfe4a920d61f3b3627c83f0a4c3ea9189193523dd067"}}