{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:BZR6X5V5TOCLLMNCYBJ3PWFTHD","short_pith_number":"pith:BZR6X5V5","schema_version":"1.0","canonical_sha256":"0e63ebf6bd9b84b5b1a2c053b7d8b338d7febbfbe958a443c53f79ad8186e277","source":{"kind":"arxiv","id":"2607.00361","version":1},"attestation_state":"computed","paper":{"title":"ReShift: Aha-Moment-Driven Reasoning-Level Backdoor Attacks on Vision-Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Qinjian Zhao, Sumon Biswas, Zhihao Dou, Zhiqiang Gao","submitted_at":"2026-07-01T02:59:59Z","abstract_excerpt":"Vision--Language Models (VLMs) are increasingly deployed in safety-critical applications, yet remain vulnerable to backdoor attacks. Existing methods primarily manipulate final outputs, often producing reasoning traces that are inconsistent or easily detectable. In this paper, we propose ReShift, the novel aha-moment-driven reasoning-level backdoor framework that explicitly redirects the internal chain-of-thought (CoT) trajectory while preserving surface-level coherence. ReShift introduces a Poisoned Reasoning-Aware Data Construction (PRDC) pipeline and a Supervised--Reinforcement Joint Optimi"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2607.00361","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-01T02:59:59Z","cross_cats_sorted":[],"title_canon_sha256":"01d127f4600e0c239366996b15db1c4ed4f804c261bd011f6b3e1fed4b929e4c","abstract_canon_sha256":"e6a9f56ae8ca44a1f2ed762a1aa25261079f9f769145e725002d556e579cfa38"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-02T01:17:41.157733Z","signature_b64":"H8WyFv5E0K2+ZDv+YC8WTWnuXudwLkz5zeJa0GRMLWuXVCrzGEmZDiIG8mey92FsW9YdbwEXzGVFSHI7GTFjBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0e63ebf6bd9b84b5b1a2c053b7d8b338d7febbfbe958a443c53f79ad8186e277","last_reissued_at":"2026-07-02T01:17:41.157250Z","signature_status":"signed_v1","first_computed_at":"2026-07-02T01:17:41.157250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"ReShift: Aha-Moment-Driven Reasoning-Level Backdoor Attacks on Vision-Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Qinjian Zhao, Sumon Biswas, Zhihao Dou, Zhiqiang Gao","submitted_at":"2026-07-01T02:59:59Z","abstract_excerpt":"Vision--Language Models (VLMs) are increasingly deployed in safety-critical applications, yet remain vulnerable to backdoor attacks. Existing methods primarily manipulate final outputs, often producing reasoning traces that are inconsistent or easily detectable. In this paper, we propose ReShift, the novel aha-moment-driven reasoning-level backdoor framework that explicitly redirects the internal chain-of-thought (CoT) trajectory while preserving surface-level coherence. ReShift introduces a Poisoned Reasoning-Aware Data Construction (PRDC) pipeline and a Supervised--Reinforcement Joint Optimi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.00361","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.00361/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2607.00361","created_at":"2026-07-02T01:17:41.157324+00:00"},{"alias_kind":"arxiv_version","alias_value":"2607.00361v1","created_at":"2026-07-02T01:17:41.157324+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.00361","created_at":"2026-07-02T01:17:41.157324+00:00"},{"alias_kind":"pith_short_12","alias_value":"BZR6X5V5TOCL","created_at":"2026-07-02T01:17:41.157324+00:00"},{"alias_kind":"pith_short_16","alias_value":"BZR6X5V5TOCLLMNC","created_at":"2026-07-02T01:17:41.157324+00:00"},{"alias_kind":"pith_short_8","alias_value":"BZR6X5V5","created_at":"2026-07-02T01:17:41.157324+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD","json":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD.json","graph_json":"https://pith.science/api/pith-number/BZR6X5V5TOCLLMNCYBJ3PWFTHD/graph.json","events_json":"https://pith.science/api/pith-number/BZR6X5V5TOCLLMNCYBJ3PWFTHD/events.json","paper":"https://pith.science/paper/BZR6X5V5"},"agent_actions":{"view_html":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD","download_json":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD.json","view_paper":"https://pith.science/paper/BZR6X5V5","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2607.00361&json=true","fetch_graph":"https://pith.science/api/pith-number/BZR6X5V5TOCLLMNCYBJ3PWFTHD/graph.json","fetch_events":"https://pith.science/api/pith-number/BZR6X5V5TOCLLMNCYBJ3PWFTHD/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD/action/timestamp_anchor","attest_storage":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD/action/storage_attestation","attest_author":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD/action/author_attestation","sign_citation":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD/action/citation_signature","submit_replication":"https://pith.science/pith/BZR6X5V5TOCLLMNCYBJ3PWFTHD/action/replication_record"}},"created_at":"2026-07-02T01:17:41.157324+00:00","updated_at":"2026-07-02T01:17:41.157324+00:00"}