{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BDTU7AU7S3W6VWZM64HUGR3DXS","short_pith_number":"pith:BDTU7AU7","canonical_record":{"source":{"id":"2506.05394","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T19:42:48Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"89b41f7fa5eaccd056bb3332182d29f77df970000b68f6271834635e64cb292e","abstract_canon_sha256":"f92c849889ea22667113be29bf9c379319c7d3a760e86a732089085b1ce29bbf"},"schema_version":"1.0"},"canonical_sha256":"08e74f829f96edeadb2cf70f434763bc9e1fec32e67d222343272daf00ea07f4","source":{"kind":"arxiv","id":"2506.05394","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.05394","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"arxiv_version","alias_value":"2506.05394v3","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.05394","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"pith_short_12","alias_value":"BDTU7AU7S3W6","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"pith_short_16","alias_value":"BDTU7AU7S3W6VWZM","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"pith_short_8","alias_value":"BDTU7AU7","created_at":"2026-07-05T12:10:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BDTU7AU7S3W6VWZM64HUGR3DXS","target":"record","payload":{"canonical_record":{"source":{"id":"2506.05394","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T19:42:48Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"89b41f7fa5eaccd056bb3332182d29f77df970000b68f6271834635e64cb292e","abstract_canon_sha256":"f92c849889ea22667113be29bf9c379319c7d3a760e86a732089085b1ce29bbf"},"schema_version":"1.0"},"canonical_sha256":"08e74f829f96edeadb2cf70f434763bc9e1fec32e67d222343272daf00ea07f4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:10:58.318350Z","signature_b64":"PVIifsfe3D79QYMIS6/3lRqPa+ggeVUH5xN6vfkrgOZ0c9G/2XGRdHaKr+Nu5C52QYfk9HAx2Rp2voPNmKPABQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"08e74f829f96edeadb2cf70f434763bc9e1fec32e67d222343272daf00ea07f4","last_reissued_at":"2026-07-05T12:10:58.317845Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:10:58.317845Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.05394","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:10:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"enPoUuVfL00c+jR0JGpj5N1gw3aGccUOzZfb9KRipEiKJ29CfKpnN8I7xfilORE4Xhxv0Pg6mLivuiciZEEdBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T18:57:48.965184Z"},"content_sha256":"5c709b5f3ad351fd6b3eb23805a668126e64b28e1b55798d1ce7eeb0540874d8","schema_version":"1.0","event_id":"sha256:5c709b5f3ad351fd6b3eb23805a668126e64b28e1b55798d1ce7eeb0540874d8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BDTU7AU7S3W6VWZM64HUGR3DXS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Federico Becattini, Hondamunige Prasanna Silva, Lorenzo Seidenari","submitted_at":"2025-06-03T19:42:48Z","abstract_excerpt":"Foundation models represent the most prominent and recent paradigm shift in artificial intelligence. Foundation models are large models, trained on broad data that deliver high accuracy in many downstream tasks, often without fine-tuning. For this reason, models such as CLIP , DINO or Vision Transfomers (ViT), are becoming the bedrock of many industrial AI-powered applications. However, the reliance on pre-trained foundation models also introduces significant security concerns, as these models are vulnerable to adversarial attacks. Such attacks involve deliberately crafted inputs designed to d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.05394","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.05394/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:10:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j+q6C4nOFZSGn4U9sECVmqi67NzTi6Eesg59xdB+MqFleeXtF2+bcSy/kJi4NXSq7ukRJHJSUnZMiVMEAxMpAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T18:57:48.965711Z"},"content_sha256":"6ff29bc8f8ec6be96e697ce6c0b4851763ad35232d06fa3ce9cddca9b57a932c","schema_version":"1.0","event_id":"sha256:6ff29bc8f8ec6be96e697ce6c0b4851763ad35232d06fa3ce9cddca9b57a932c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BDTU7AU7S3W6VWZM64HUGR3DXS/bundle.json","state_url":"https://pith.science/pith/BDTU7AU7S3W6VWZM64HUGR3DXS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BDTU7AU7S3W6VWZM64HUGR3DXS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T18:57:48Z","links":{"resolver":"https://pith.science/pith/BDTU7AU7S3W6VWZM64HUGR3DXS","bundle":"https://pith.science/pith/BDTU7AU7S3W6VWZM64HUGR3DXS/bundle.json","state":"https://pith.science/pith/BDTU7AU7S3W6VWZM64HUGR3DXS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BDTU7AU7S3W6VWZM64HUGR3DXS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BDTU7AU7S3W6VWZM64HUGR3DXS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f92c849889ea22667113be29bf9c379319c7d3a760e86a732089085b1ce29bbf","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T19:42:48Z","title_canon_sha256":"89b41f7fa5eaccd056bb3332182d29f77df970000b68f6271834635e64cb292e"},"schema_version":"1.0","source":{"id":"2506.05394","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.05394","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"arxiv_version","alias_value":"2506.05394v3","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.05394","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"pith_short_12","alias_value":"BDTU7AU7S3W6","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"pith_short_16","alias_value":"BDTU7AU7S3W6VWZM","created_at":"2026-07-05T12:10:58Z"},{"alias_kind":"pith_short_8","alias_value":"BDTU7AU7","created_at":"2026-07-05T12:10:58Z"}],"graph_snapshots":[{"event_id":"sha256:6ff29bc8f8ec6be96e697ce6c0b4851763ad35232d06fa3ce9cddca9b57a932c","target":"graph","created_at":"2026-07-05T12:10:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.05394/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Foundation models represent the most prominent and recent paradigm shift in artificial intelligence. Foundation models are large models, trained on broad data that deliver high accuracy in many downstream tasks, often without fine-tuning. For this reason, models such as CLIP , DINO or Vision Transfomers (ViT), are becoming the bedrock of many industrial AI-powered applications. However, the reliance on pre-trained foundation models also introduces significant security concerns, as these models are vulnerable to adversarial attacks. Such attacks involve deliberately crafted inputs designed to d","authors_text":"Federico Becattini, Hondamunige Prasanna Silva, Lorenzo Seidenari","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T19:42:48Z","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.05394","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5c709b5f3ad351fd6b3eb23805a668126e64b28e1b55798d1ce7eeb0540874d8","target":"record","created_at":"2026-07-05T12:10:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f92c849889ea22667113be29bf9c379319c7d3a760e86a732089085b1ce29bbf","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T19:42:48Z","title_canon_sha256":"89b41f7fa5eaccd056bb3332182d29f77df970000b68f6271834635e64cb292e"},"schema_version":"1.0","source":{"id":"2506.05394","kind":"arxiv","version":3}},"canonical_sha256":"08e74f829f96edeadb2cf70f434763bc9e1fec32e67d222343272daf00ea07f4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"08e74f829f96edeadb2cf70f434763bc9e1fec32e67d222343272daf00ea07f4","first_computed_at":"2026-07-05T12:10:58.317845Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:10:58.317845Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PVIifsfe3D79QYMIS6/3lRqPa+ggeVUH5xN6vfkrgOZ0c9G/2XGRdHaKr+Nu5C52QYfk9HAx2Rp2voPNmKPABQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:10:58.318350Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.05394","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5c709b5f3ad351fd6b3eb23805a668126e64b28e1b55798d1ce7eeb0540874d8","sha256:6ff29bc8f8ec6be96e697ce6c0b4851763ad35232d06fa3ce9cddca9b57a932c"],"state_sha256":"e60b8f95b1678bfa8432e1dd36521a6fb8a6865396bfbc8d3e56ac4967c25086"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x2T1CNRpiS7FwDAe2tf5fAXDSL8hsJKFmUKWVRLE9L/y2vwze+xKgrwJ8yn5AUbIizwDO6n38A3KH49CuKm2AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T18:57:48.969441Z","bundle_sha256":"29e7a9402e43f4ad4536e374d5dfda3382bb68f5492535ed2bf3ebc77f26c2df"}}