{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7D4762HGCT4S3LKUY3CXHGTF5C","short_pith_number":"pith:7D4762HG","canonical_record":{"source":{"id":"2406.18844","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-06-27T02:31:03Z","cross_cats_sorted":[],"title_canon_sha256":"6d285bf7893624604005651516d3d1029b7b27e8d5e60eec0a2a18f963469002","abstract_canon_sha256":"c705c8927db6ca5ae9df203152e3a846ba5bc63433ea4c3a3015ee4f29e3f8a3"},"schema_version":"1.0"},"canonical_sha256":"f8f9ff68e614f92dad54c6c5739a65e8aa002e34200d3225665ded0e85d10a13","source":{"kind":"arxiv","id":"2406.18844","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.18844","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"arxiv_version","alias_value":"2406.18844v4","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.18844","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"pith_short_12","alias_value":"7D4762HGCT4S","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"pith_short_16","alias_value":"7D4762HGCT4S3LKU","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"pith_short_8","alias_value":"7D4762HG","created_at":"2026-07-05T09:49:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7D4762HGCT4S3LKUY3CXHGTF5C","target":"record","payload":{"canonical_record":{"source":{"id":"2406.18844","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-06-27T02:31:03Z","cross_cats_sorted":[],"title_canon_sha256":"6d285bf7893624604005651516d3d1029b7b27e8d5e60eec0a2a18f963469002","abstract_canon_sha256":"c705c8927db6ca5ae9df203152e3a846ba5bc63433ea4c3a3015ee4f29e3f8a3"},"schema_version":"1.0"},"canonical_sha256":"f8f9ff68e614f92dad54c6c5739a65e8aa002e34200d3225665ded0e85d10a13","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:49:07.225003Z","signature_b64":"nO80FL0C3SEWIW8n6jomiNSCTt7jvKIyKGNMbJiZD6xkcHSf4+zo5hdU9nOHoIwd+Rt4Yq6OVEoKpAx3BKVQBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f8f9ff68e614f92dad54c6c5739a65e8aa002e34200d3225665ded0e85d10a13","last_reissued_at":"2026-07-05T09:49:07.224512Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:49:07.224512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.18844","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:49:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uUdtVS6pRz7dw9/nmWk55gQ7pB3kz7Vb26vxAqZ5qjGme+zh3/XB96Dln3Fs2AiC1A6QXsvea9VASQWvgkaiAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T19:30:51.808153Z"},"content_sha256":"25359e9390c5e46679aa29bf7abd4b00b946137540eaa625546131851a75be22","schema_version":"1.0","event_id":"sha256:25359e9390c5e46679aa29bf7abd4b00b946137540eaa625546131851a75be22"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7D4762HGCT4S3LKUY3CXHGTF5C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Aishan Liu, Chao Du, Dacheng Tao, Jiawei Liang, Mingli Zhu, Siyuan Liang, Tianyu Pang, Xiaochun Cao","submitted_at":"2024-06-27T02:31:03Z","abstract_excerpt":"Instruction tuning enhances large vision-language models (LVLMs) but increases their vulnerability to backdoor attacks due to their open design. Unlike prior studies in static settings, this paper explores backdoor attacks in LVLM instruction tuning across mismatched training and testing domains. We introduce a new evaluation dimension, backdoor domain generalization, to assess attack robustness under visual and text domain shifts. Our findings reveal two insights: (1) backdoor generalizability improves when distinctive trigger patterns are independent of specific data domains or model archite"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.18844","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.18844/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:49:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eCN9poSfS9oERGbsuTPzsDXtrUp+mpIuCGi0T+kSaMwvzXMiItkUTuSTsFjhIjaI2hXnx9Vq+zCVSfgkg/H4Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T19:30:51.808706Z"},"content_sha256":"5f0144680b4ceb48e6407fed2540f805917bad17bcefe345454f93b4e653fe69","schema_version":"1.0","event_id":"sha256:5f0144680b4ceb48e6407fed2540f805917bad17bcefe345454f93b4e653fe69"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7D4762HGCT4S3LKUY3CXHGTF5C/bundle.json","state_url":"https://pith.science/pith/7D4762HGCT4S3LKUY3CXHGTF5C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7D4762HGCT4S3LKUY3CXHGTF5C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T19:30:51Z","links":{"resolver":"https://pith.science/pith/7D4762HGCT4S3LKUY3CXHGTF5C","bundle":"https://pith.science/pith/7D4762HGCT4S3LKUY3CXHGTF5C/bundle.json","state":"https://pith.science/pith/7D4762HGCT4S3LKUY3CXHGTF5C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7D4762HGCT4S3LKUY3CXHGTF5C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7D4762HGCT4S3LKUY3CXHGTF5C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c705c8927db6ca5ae9df203152e3a846ba5bc63433ea4c3a3015ee4f29e3f8a3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-06-27T02:31:03Z","title_canon_sha256":"6d285bf7893624604005651516d3d1029b7b27e8d5e60eec0a2a18f963469002"},"schema_version":"1.0","source":{"id":"2406.18844","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.18844","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"arxiv_version","alias_value":"2406.18844v4","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.18844","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"pith_short_12","alias_value":"7D4762HGCT4S","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"pith_short_16","alias_value":"7D4762HGCT4S3LKU","created_at":"2026-07-05T09:49:07Z"},{"alias_kind":"pith_short_8","alias_value":"7D4762HG","created_at":"2026-07-05T09:49:07Z"}],"graph_snapshots":[{"event_id":"sha256:5f0144680b4ceb48e6407fed2540f805917bad17bcefe345454f93b4e653fe69","target":"graph","created_at":"2026-07-05T09:49:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.18844/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Instruction tuning enhances large vision-language models (LVLMs) but increases their vulnerability to backdoor attacks due to their open design. Unlike prior studies in static settings, this paper explores backdoor attacks in LVLM instruction tuning across mismatched training and testing domains. We introduce a new evaluation dimension, backdoor domain generalization, to assess attack robustness under visual and text domain shifts. Our findings reveal two insights: (1) backdoor generalizability improves when distinctive trigger patterns are independent of specific data domains or model archite","authors_text":"Aishan Liu, Chao Du, Dacheng Tao, Jiawei Liang, Mingli Zhu, Siyuan Liang, Tianyu Pang, Xiaochun Cao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.18844","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:25359e9390c5e46679aa29bf7abd4b00b946137540eaa625546131851a75be22","target":"record","created_at":"2026-07-05T09:49:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c705c8927db6ca5ae9df203152e3a846ba5bc63433ea4c3a3015ee4f29e3f8a3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-06-27T02:31:03Z","title_canon_sha256":"6d285bf7893624604005651516d3d1029b7b27e8d5e60eec0a2a18f963469002"},"schema_version":"1.0","source":{"id":"2406.18844","kind":"arxiv","version":4}},"canonical_sha256":"f8f9ff68e614f92dad54c6c5739a65e8aa002e34200d3225665ded0e85d10a13","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f8f9ff68e614f92dad54c6c5739a65e8aa002e34200d3225665ded0e85d10a13","first_computed_at":"2026-07-05T09:49:07.224512Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:49:07.224512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nO80FL0C3SEWIW8n6jomiNSCTt7jvKIyKGNMbJiZD6xkcHSf4+zo5hdU9nOHoIwd+Rt4Yq6OVEoKpAx3BKVQBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:49:07.225003Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.18844","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:25359e9390c5e46679aa29bf7abd4b00b946137540eaa625546131851a75be22","sha256:5f0144680b4ceb48e6407fed2540f805917bad17bcefe345454f93b4e653fe69"],"state_sha256":"99dc1e29e138ec83cb4ad4d0bb7b7506493855f901d8977d3c507bae9c4826c7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0ZvBVz5FQZXVpH0EDo48t1R+hgWJP2ZGWhP8o0TrRRPT4GFF8vmcK5UPNiXBf04hnBbkEHXveMNQa+Vq4+JTAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T19:30:51.813445Z","bundle_sha256":"ff7f5ca0d753ae32fe46b2984dd0132b0ffb410a9f7f3dd1277f95a3a0a6c4df"}}