{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BRTEM26PVDAM2NHKLLNKLIFDZZ","short_pith_number":"pith:BRTEM26P","canonical_record":{"source":{"id":"2508.08521","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T23:25:16Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"44440337330d9297d9e35cf2e80c15772c09a8ecf3cf7f0f8458f3ddb87c7d69","abstract_canon_sha256":"d77a8885be3de22f3cb99d2178a94377477fda936362d3936360198d944203d1"},"schema_version":"1.0"},"canonical_sha256":"0c66466bcfa8c0cd34ea5adaa5a0a3ce684ed5de8237192dc0152363d85b8246","source":{"kind":"arxiv","id":"2508.08521","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.08521","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"arxiv_version","alias_value":"2508.08521v1","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.08521","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"pith_short_12","alias_value":"BRTEM26PVDAM","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"pith_short_16","alias_value":"BRTEM26PVDAM2NHK","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"pith_short_8","alias_value":"BRTEM26P","created_at":"2026-07-05T11:52:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BRTEM26PVDAM2NHKLLNKLIFDZZ","target":"record","payload":{"canonical_record":{"source":{"id":"2508.08521","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T23:25:16Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"44440337330d9297d9e35cf2e80c15772c09a8ecf3cf7f0f8458f3ddb87c7d69","abstract_canon_sha256":"d77a8885be3de22f3cb99d2178a94377477fda936362d3936360198d944203d1"},"schema_version":"1.0"},"canonical_sha256":"0c66466bcfa8c0cd34ea5adaa5a0a3ce684ed5de8237192dc0152363d85b8246","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:52:29.928174Z","signature_b64":"agMW7HcumKkm4k3oBGsYEuZlpJfNLIU8FoJp+Z1xn8TQ1QTtKBskFmwy2JY/rnpxtNr4sDrg46iaaIUgGXW+Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0c66466bcfa8c0cd34ea5adaa5a0a3ce684ed5de8237192dc0152363d85b8246","last_reissued_at":"2026-07-05T11:52:29.927789Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:52:29.927789Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.08521","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:52:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m7EwY1VNsnZg0vlvDLCZvEuqvLSnnPPoAWc8qTsKWgvcFMCRKzcMVaPvZLfAVxFwvT1gDrF6h3twJuKPG0NYBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T07:12:12.250967Z"},"content_sha256":"b113322310552423b9a555e5f8c6f96776f12fd6a1309df3e29b44b47160c310","schema_version":"1.0","event_id":"sha256:b113322310552423b9a555e5f8c6f96776f12fd6a1309df3e29b44b47160c310"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BRTEM26PVDAM2NHKLLNKLIFDZZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VISOR: Visual Input-based Steering for Output Redirection in Vision-Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Mansi Phute (Georgia Tech), Ravikumar Balakrishnan (HiddenLayer)","submitted_at":"2025-08-11T23:25:16Z","abstract_excerpt":"Vision Language Models (VLMs) are increasingly being used in a broad range of applications, bringing their security and behavioral control to the forefront. While existing approaches for behavioral control or output redirection, like system prompting in VLMs, are easily detectable and often ineffective, activation-based steering vectors require invasive runtime access to model internals--incompatible with API-based services and closed-source deployments. We introduce VISOR (Visual Input-based Steering for Output Redirection), a novel method that achieves sophisticated behavioral control throug"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.08521","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.08521/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:52:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LXMD40/518qc7LA3gYrkbsXBGe7X6B//cjPkKlXO5C828Cobl3wffOpxUKdWGYR+qJyEUJU9ta+RjF6fSj94Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T07:12:12.251700Z"},"content_sha256":"ad555e54c716148f7e503c0a63383a4418fdd76b40037f79ec48eab92086d550","schema_version":"1.0","event_id":"sha256:ad555e54c716148f7e503c0a63383a4418fdd76b40037f79ec48eab92086d550"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BRTEM26PVDAM2NHKLLNKLIFDZZ/bundle.json","state_url":"https://pith.science/pith/BRTEM26PVDAM2NHKLLNKLIFDZZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BRTEM26PVDAM2NHKLLNKLIFDZZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T07:12:12Z","links":{"resolver":"https://pith.science/pith/BRTEM26PVDAM2NHKLLNKLIFDZZ","bundle":"https://pith.science/pith/BRTEM26PVDAM2NHKLLNKLIFDZZ/bundle.json","state":"https://pith.science/pith/BRTEM26PVDAM2NHKLLNKLIFDZZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BRTEM26PVDAM2NHKLLNKLIFDZZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BRTEM26PVDAM2NHKLLNKLIFDZZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d77a8885be3de22f3cb99d2178a94377477fda936362d3936360198d944203d1","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T23:25:16Z","title_canon_sha256":"44440337330d9297d9e35cf2e80c15772c09a8ecf3cf7f0f8458f3ddb87c7d69"},"schema_version":"1.0","source":{"id":"2508.08521","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.08521","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"arxiv_version","alias_value":"2508.08521v1","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.08521","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"pith_short_12","alias_value":"BRTEM26PVDAM","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"pith_short_16","alias_value":"BRTEM26PVDAM2NHK","created_at":"2026-07-05T11:52:29Z"},{"alias_kind":"pith_short_8","alias_value":"BRTEM26P","created_at":"2026-07-05T11:52:29Z"}],"graph_snapshots":[{"event_id":"sha256:ad555e54c716148f7e503c0a63383a4418fdd76b40037f79ec48eab92086d550","target":"graph","created_at":"2026-07-05T11:52:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.08521/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Language Models (VLMs) are increasingly being used in a broad range of applications, bringing their security and behavioral control to the forefront. While existing approaches for behavioral control or output redirection, like system prompting in VLMs, are easily detectable and often ineffective, activation-based steering vectors require invasive runtime access to model internals--incompatible with API-based services and closed-source deployments. We introduce VISOR (Visual Input-based Steering for Output Redirection), a novel method that achieves sophisticated behavioral control throug","authors_text":"Mansi Phute (Georgia Tech), Ravikumar Balakrishnan (HiddenLayer)","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T23:25:16Z","title":"VISOR: Visual Input-based Steering for Output Redirection in Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.08521","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b113322310552423b9a555e5f8c6f96776f12fd6a1309df3e29b44b47160c310","target":"record","created_at":"2026-07-05T11:52:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d77a8885be3de22f3cb99d2178a94377477fda936362d3936360198d944203d1","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T23:25:16Z","title_canon_sha256":"44440337330d9297d9e35cf2e80c15772c09a8ecf3cf7f0f8458f3ddb87c7d69"},"schema_version":"1.0","source":{"id":"2508.08521","kind":"arxiv","version":1}},"canonical_sha256":"0c66466bcfa8c0cd34ea5adaa5a0a3ce684ed5de8237192dc0152363d85b8246","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0c66466bcfa8c0cd34ea5adaa5a0a3ce684ed5de8237192dc0152363d85b8246","first_computed_at":"2026-07-05T11:52:29.927789Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:52:29.927789Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"agMW7HcumKkm4k3oBGsYEuZlpJfNLIU8FoJp+Z1xn8TQ1QTtKBskFmwy2JY/rnpxtNr4sDrg46iaaIUgGXW+Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:52:29.928174Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.08521","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b113322310552423b9a555e5f8c6f96776f12fd6a1309df3e29b44b47160c310","sha256:ad555e54c716148f7e503c0a63383a4418fdd76b40037f79ec48eab92086d550"],"state_sha256":"4a3fb91c4f2d4b4a96a2c1cb79b2b95f556c2836b0af4240d0461cda815a8123"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zNfuc7/FmOz4kIldc2J6ss90QKJpy/QyFjHpu1LhO0C0FLHaWzUe7ynpOF1z5GzZi2RHRWGJ1nmC1otgiQG9Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T07:12:12.256228Z","bundle_sha256":"9fb266e6a4ffbead4be57e5c63ffee1f4ce2a7183c8b6fa32f2bc7b399012116"}}