{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DMVOX375I5QIGEAC6VLJJOFA6R","short_pith_number":"pith:DMVOX375","canonical_record":{"source":{"id":"2403.02580","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-03-05T01:32:29Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0a2d8159bafe1e28bf72c2f9afb74c9bd1943c4111ae0a4329c242662fec9ccb","abstract_canon_sha256":"36419609d7778b3e516b941e22e262f545f456e4ca153dca55e9c4a981745ce2"},"schema_version":"1.0"},"canonical_sha256":"1b2aebeffd4760831002f55694b8a0f4429a248656842dcbf87b79e694d4b9dc","source":{"kind":"arxiv","id":"2403.02580","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.02580","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"arxiv_version","alias_value":"2403.02580v1","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.02580","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"pith_short_12","alias_value":"DMVOX375I5QI","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"pith_short_16","alias_value":"DMVOX375I5QIGEAC","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"pith_short_8","alias_value":"DMVOX375","created_at":"2026-07-05T07:52:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DMVOX375I5QIGEAC6VLJJOFA6R","target":"record","payload":{"canonical_record":{"source":{"id":"2403.02580","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-03-05T01:32:29Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0a2d8159bafe1e28bf72c2f9afb74c9bd1943c4111ae0a4329c242662fec9ccb","abstract_canon_sha256":"36419609d7778b3e516b941e22e262f545f456e4ca153dca55e9c4a981745ce2"},"schema_version":"1.0"},"canonical_sha256":"1b2aebeffd4760831002f55694b8a0f4429a248656842dcbf87b79e694d4b9dc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:52:19.316182Z","signature_b64":"Tmp7nfj9SsPAxRXXXdzyZLqu1sZW1w2HhUcSQpV3lVoUnc+whsTBr2/Q0tVmoTVH60Ea52Q2iWsU6NYfXzlPAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1b2aebeffd4760831002f55694b8a0f4429a248656842dcbf87b79e694d4b9dc","last_reissued_at":"2026-07-05T07:52:19.315712Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:52:19.315712Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.02580","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:52:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O/DnRUj8D77CnRuqJNUOOw4s8j8k7UrTgmwSdibKatHt3vWObs0fRFlLAiFpNANkILHA6FqZNkrUv4OxpTXVDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:37:18.052138Z"},"content_sha256":"311f60201330a98eba4577c902fdb21bdcff02bda2d10b85404b0f40f90b029d","schema_version":"1.0","event_id":"sha256:311f60201330a98eba4577c902fdb21bdcff02bda2d10b85404b0f40f90b029d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DMVOX375I5QIGEAC6VLJJOFA6R","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"What do we learn from inverting CLIP models?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Atoosa Chegini, Hamid Kazemi, Jonas Geiping, Soheil Feizi, Tom Goldstein","submitted_at":"2024-03-05T01:32:29Z","abstract_excerpt":"We employ an inversion-based approach to examine CLIP models. Our examination reveals that inverting CLIP models results in the generation of images that exhibit semantic alignment with the specified target prompts. We leverage these inverted images to gain insights into various aspects of CLIP models, such as their ability to blend concepts and inclusion of gender biases. We notably observe instances of NSFW (Not Safe For Work) images during model inversion. This phenomenon occurs even for semantically innocuous prompts, like \"a beautiful landscape,\" as well as for prompts involving the names"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.02580","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.02580/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:52:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qw5ZVSizVazPGUmuwrEnHAa4/22zA8oC2hzDTawdxoUs9ymhOoapmsssS1uYwqPs6wtAMeR1CYcfZ87bDHnBDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:37:18.052537Z"},"content_sha256":"5134809a6776b200eb44fed1a43446c9510c9d574e0f10bffa9a17a613a51057","schema_version":"1.0","event_id":"sha256:5134809a6776b200eb44fed1a43446c9510c9d574e0f10bffa9a17a613a51057"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DMVOX375I5QIGEAC6VLJJOFA6R/bundle.json","state_url":"https://pith.science/pith/DMVOX375I5QIGEAC6VLJJOFA6R/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DMVOX375I5QIGEAC6VLJJOFA6R/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:37:18Z","links":{"resolver":"https://pith.science/pith/DMVOX375I5QIGEAC6VLJJOFA6R","bundle":"https://pith.science/pith/DMVOX375I5QIGEAC6VLJJOFA6R/bundle.json","state":"https://pith.science/pith/DMVOX375I5QIGEAC6VLJJOFA6R/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DMVOX375I5QIGEAC6VLJJOFA6R/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DMVOX375I5QIGEAC6VLJJOFA6R","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36419609d7778b3e516b941e22e262f545f456e4ca153dca55e9c4a981745ce2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-03-05T01:32:29Z","title_canon_sha256":"0a2d8159bafe1e28bf72c2f9afb74c9bd1943c4111ae0a4329c242662fec9ccb"},"schema_version":"1.0","source":{"id":"2403.02580","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.02580","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"arxiv_version","alias_value":"2403.02580v1","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.02580","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"pith_short_12","alias_value":"DMVOX375I5QI","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"pith_short_16","alias_value":"DMVOX375I5QIGEAC","created_at":"2026-07-05T07:52:19Z"},{"alias_kind":"pith_short_8","alias_value":"DMVOX375","created_at":"2026-07-05T07:52:19Z"}],"graph_snapshots":[{"event_id":"sha256:5134809a6776b200eb44fed1a43446c9510c9d574e0f10bffa9a17a613a51057","target":"graph","created_at":"2026-07-05T07:52:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.02580/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We employ an inversion-based approach to examine CLIP models. Our examination reveals that inverting CLIP models results in the generation of images that exhibit semantic alignment with the specified target prompts. We leverage these inverted images to gain insights into various aspects of CLIP models, such as their ability to blend concepts and inclusion of gender biases. We notably observe instances of NSFW (Not Safe For Work) images during model inversion. This phenomenon occurs even for semantically innocuous prompts, like \"a beautiful landscape,\" as well as for prompts involving the names","authors_text":"Atoosa Chegini, Hamid Kazemi, Jonas Geiping, Soheil Feizi, Tom Goldstein","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-03-05T01:32:29Z","title":"What do we learn from inverting CLIP models?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.02580","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:311f60201330a98eba4577c902fdb21bdcff02bda2d10b85404b0f40f90b029d","target":"record","created_at":"2026-07-05T07:52:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36419609d7778b3e516b941e22e262f545f456e4ca153dca55e9c4a981745ce2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-03-05T01:32:29Z","title_canon_sha256":"0a2d8159bafe1e28bf72c2f9afb74c9bd1943c4111ae0a4329c242662fec9ccb"},"schema_version":"1.0","source":{"id":"2403.02580","kind":"arxiv","version":1}},"canonical_sha256":"1b2aebeffd4760831002f55694b8a0f4429a248656842dcbf87b79e694d4b9dc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1b2aebeffd4760831002f55694b8a0f4429a248656842dcbf87b79e694d4b9dc","first_computed_at":"2026-07-05T07:52:19.315712Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:52:19.315712Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Tmp7nfj9SsPAxRXXXdzyZLqu1sZW1w2HhUcSQpV3lVoUnc+whsTBr2/Q0tVmoTVH60Ea52Q2iWsU6NYfXzlPAA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:52:19.316182Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.02580","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:311f60201330a98eba4577c902fdb21bdcff02bda2d10b85404b0f40f90b029d","sha256:5134809a6776b200eb44fed1a43446c9510c9d574e0f10bffa9a17a613a51057"],"state_sha256":"2a0c582d1fbbf514b0486409738a082eb09fb181dab1cc87717f1c23e117487d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N8BZQoL1FUTBj0k9Z4+ynfT2cUCJQehqCE9wyWMOAsCoEdF3NwTabnNyHXiSNlo333xairPbpTmKOM/Vef/5AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:37:18.055784Z","bundle_sha256":"4d6fe78306c9547781c8d5b08b52dd220efd099fbe0eb529f854548835868810"}}