{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:775K5QPVWHJNZ5SJXBIPUMMJSM","short_pith_number":"pith:775K5QPV","canonical_record":{"source":{"id":"2507.22037","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T17:39:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8a40b146b4847373991a40dcfc6f7951f1490f9aea9d27cd8468072e3d29d4b6","abstract_canon_sha256":"7c2a71fe97d338bc3c18945510754bef5be395876e422638c692bff0124d4bc8"},"schema_version":"1.0"},"canonical_sha256":"fffaaec1f5b1d2dcf649b850fa3189933c265fd60c41f11cd46c1fd152794d08","source":{"kind":"arxiv","id":"2507.22037","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.22037","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"arxiv_version","alias_value":"2507.22037v1","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.22037","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"pith_short_12","alias_value":"775K5QPVWHJN","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"pith_short_16","alias_value":"775K5QPVWHJNZ5SJ","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"pith_short_8","alias_value":"775K5QPV","created_at":"2026-07-05T11:45:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:775K5QPVWHJNZ5SJXBIPUMMJSM","target":"record","payload":{"canonical_record":{"source":{"id":"2507.22037","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T17:39:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8a40b146b4847373991a40dcfc6f7951f1490f9aea9d27cd8468072e3d29d4b6","abstract_canon_sha256":"7c2a71fe97d338bc3c18945510754bef5be395876e422638c692bff0124d4bc8"},"schema_version":"1.0"},"canonical_sha256":"fffaaec1f5b1d2dcf649b850fa3189933c265fd60c41f11cd46c1fd152794d08","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:45:12.011155Z","signature_b64":"YUyPMpmjqHKIkeAmbuEmg0RVQzVtfq5wVjki8j5rgLZR1n95LDz71SMSSY0cPVIkRTYSGuaUFuf8Nl1FmvnFDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fffaaec1f5b1d2dcf649b850fa3189933c265fd60c41f11cd46c1fd152794d08","last_reissued_at":"2026-07-05T11:45:12.010664Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:45:12.010664Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.22037","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Nt2bbfy5ePHRkZ6WIZyBoWxEPBaDTssfCqw/K43hGthPUoQ16ldLh/GXom8Y2Sg34w1Q02dVR5jUp/ct8/BfDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:52:07.809473Z"},"content_sha256":"22d5da6a1d692bcf45566aff37e0e265ab358001b6d6c5e84a43e8d6fb66cb89","schema_version":"1.0","event_id":"sha256:22d5da6a1d692bcf45566aff37e0e265ab358001b6d6c5e84a43e8d6fb66cb89"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:775K5QPVWHJNZ5SJXBIPUMMJSM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hao Sun, Junyu Gao, Muzhi Dai, Shixuan Liu, Xuelong Li, Zhiyuan Zhao","submitted_at":"2025-07-29T17:39:48Z","abstract_excerpt":"The rapid advancement of multimodal large language models (MLLMs) has led to breakthroughs in various applications, yet their security remains a critical challenge. One pressing issue involves unsafe image-query pairs--jailbreak inputs specifically designed to bypass security constraints and elicit unintended responses from MLLMs. Compared to general multimodal data, such unsafe inputs are relatively sparse, which limits the diversity and richness of training samples available for developing robust defense models. Meanwhile, existing guardrail-type methods rely on external modules to enforce s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.22037","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.22037/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"opVD257TaHFr29iTRb0r/TuJAIVuj7axTyGNmkMLuXw/oOW/A9grITCBbs8Xxq59CtB9OBJofMeJOCTFtCeVDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:52:07.809997Z"},"content_sha256":"9de09375a1578039bb70788abc764d1292db4674f3764e8e991a40f32af08b10","schema_version":"1.0","event_id":"sha256:9de09375a1578039bb70788abc764d1292db4674f3764e8e991a40f32af08b10"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/775K5QPVWHJNZ5SJXBIPUMMJSM/bundle.json","state_url":"https://pith.science/pith/775K5QPVWHJNZ5SJXBIPUMMJSM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/775K5QPVWHJNZ5SJXBIPUMMJSM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T05:52:07Z","links":{"resolver":"https://pith.science/pith/775K5QPVWHJNZ5SJXBIPUMMJSM","bundle":"https://pith.science/pith/775K5QPVWHJNZ5SJXBIPUMMJSM/bundle.json","state":"https://pith.science/pith/775K5QPVWHJNZ5SJXBIPUMMJSM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/775K5QPVWHJNZ5SJXBIPUMMJSM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:775K5QPVWHJNZ5SJXBIPUMMJSM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7c2a71fe97d338bc3c18945510754bef5be395876e422638c692bff0124d4bc8","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T17:39:48Z","title_canon_sha256":"8a40b146b4847373991a40dcfc6f7951f1490f9aea9d27cd8468072e3d29d4b6"},"schema_version":"1.0","source":{"id":"2507.22037","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.22037","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"arxiv_version","alias_value":"2507.22037v1","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.22037","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"pith_short_12","alias_value":"775K5QPVWHJN","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"pith_short_16","alias_value":"775K5QPVWHJNZ5SJ","created_at":"2026-07-05T11:45:12Z"},{"alias_kind":"pith_short_8","alias_value":"775K5QPV","created_at":"2026-07-05T11:45:12Z"}],"graph_snapshots":[{"event_id":"sha256:9de09375a1578039bb70788abc764d1292db4674f3764e8e991a40f32af08b10","target":"graph","created_at":"2026-07-05T11:45:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.22037/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid advancement of multimodal large language models (MLLMs) has led to breakthroughs in various applications, yet their security remains a critical challenge. One pressing issue involves unsafe image-query pairs--jailbreak inputs specifically designed to bypass security constraints and elicit unintended responses from MLLMs. Compared to general multimodal data, such unsafe inputs are relatively sparse, which limits the diversity and richness of training samples available for developing robust defense models. Meanwhile, existing guardrail-type methods rely on external modules to enforce s","authors_text":"Hao Sun, Junyu Gao, Muzhi Dai, Shixuan Liu, Xuelong Li, Zhiyuan Zhao","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T17:39:48Z","title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.22037","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:22d5da6a1d692bcf45566aff37e0e265ab358001b6d6c5e84a43e8d6fb66cb89","target":"record","created_at":"2026-07-05T11:45:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7c2a71fe97d338bc3c18945510754bef5be395876e422638c692bff0124d4bc8","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T17:39:48Z","title_canon_sha256":"8a40b146b4847373991a40dcfc6f7951f1490f9aea9d27cd8468072e3d29d4b6"},"schema_version":"1.0","source":{"id":"2507.22037","kind":"arxiv","version":1}},"canonical_sha256":"fffaaec1f5b1d2dcf649b850fa3189933c265fd60c41f11cd46c1fd152794d08","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fffaaec1f5b1d2dcf649b850fa3189933c265fd60c41f11cd46c1fd152794d08","first_computed_at":"2026-07-05T11:45:12.010664Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:45:12.010664Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YUyPMpmjqHKIkeAmbuEmg0RVQzVtfq5wVjki8j5rgLZR1n95LDz71SMSSY0cPVIkRTYSGuaUFuf8Nl1FmvnFDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:45:12.011155Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.22037","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:22d5da6a1d692bcf45566aff37e0e265ab358001b6d6c5e84a43e8d6fb66cb89","sha256:9de09375a1578039bb70788abc764d1292db4674f3764e8e991a40f32af08b10"],"state_sha256":"e2b041338fe23a6a53b6aafbae3f5014bf1c177d3bb665bdafd7d4e448341573"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uC/siAev/FP4LHPLJqZaC502Z3p8nQ1zf3VZ/pRiprv8glE2pKp2TyJxI1KXK2vqWmjwEPhOs/W9mQaX1LsgAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T05:52:07.814833Z","bundle_sha256":"4022f689006707c5cc8da69759acd5d2c089e6f8bdab3f063c7a4c1f918473e0"}}