{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DY6WY5IYPLIGKLYMC33P7R6BJI","short_pith_number":"pith:DY6WY5IY","canonical_record":{"source":{"id":"2510.02913","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-10-03T11:36:02Z","cross_cats_sorted":[],"title_canon_sha256":"541de818387cd8b9c0dbdfba44de7fca892f44085320bbf8225ada9ce406befb","abstract_canon_sha256":"1f261b1176330134b80394eab5aa47bca288a44459e5fc61a3970756d53dc84f"},"schema_version":"1.0"},"canonical_sha256":"1e3d6c75187ad0652f0c16f6ffc7c14a2d07d874619b5f74d5d5dde92f945c47","source":{"kind":"arxiv","id":"2510.02913","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.02913","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"arxiv_version","alias_value":"2510.02913v2","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.02913","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"pith_short_12","alias_value":"DY6WY5IYPLIG","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"pith_short_16","alias_value":"DY6WY5IYPLIGKLYM","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"pith_short_8","alias_value":"DY6WY5IY","created_at":"2026-07-28T01:22:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DY6WY5IYPLIGKLYMC33P7R6BJI","target":"record","payload":{"canonical_record":{"source":{"id":"2510.02913","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-10-03T11:36:02Z","cross_cats_sorted":[],"title_canon_sha256":"541de818387cd8b9c0dbdfba44de7fca892f44085320bbf8225ada9ce406befb","abstract_canon_sha256":"1f261b1176330134b80394eab5aa47bca288a44459e5fc61a3970756d53dc84f"},"schema_version":"1.0"},"canonical_sha256":"1e3d6c75187ad0652f0c16f6ffc7c14a2d07d874619b5f74d5d5dde92f945c47","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-28T01:22:23.356005Z","signature_b64":"6N1hJDrPLhgpgwhJKWbXjJS/JSmr9H66Qqn6+uACE3lMP4ALqCbaKoFCa40mPng8ZhI7qlJWIAttT2OUCEQTBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1e3d6c75187ad0652f0c16f6ffc7c14a2d07d874619b5f74d5d5dde92f945c47","last_reissued_at":"2026-07-28T01:22:23.354981Z","signature_status":"signed_v1","first_computed_at":"2026-07-28T01:22:23.354981Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2510.02913","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:22:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AAVoe3vsBhDPHkOxuU0J2HAvNPgQwFXmg0tX1ZXIyU6xk+P7dpNuBYKB6pohvgdWZs/GrWLyIwbzvA/biQUuCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T16:42:20.618569Z"},"content_sha256":"f1e9de395f3fc50e6d47043d2701719feb25b35b04feb1221da1b30100c61436","schema_version":"1.0","event_id":"sha256:f1e9de395f3fc50e6d47043d2701719feb25b35b04feb1221da1b30100c61436"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DY6WY5IYPLIGKLYMC33P7R6BJI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving Adversarial Robustness of Zero-Shot CLIP with Confidence-Aware Weighting","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Mostafa Tavassolipour, Nikoo Naghavian","submitted_at":"2025-10-03T11:36:02Z","abstract_excerpt":"Vision-language models such as CLIP demonstrate impressive zero-shot generalization but remain highly vulnerable to adversarial attacks. Prior adversarial methods treat all samples equally in the loss function, despite the fact that not all inputs contribute equally to adversarial vulnerability. Some samples retain high confidence even under large perturbations, while others are unstable and change predictions with minor noise. To address this, we propose Confidence-Aware Weighting (CAW) to enhance the zero-shot robustness of vision-language models. CAW introduces two key components: (1) a Con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.02913","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2510.02913/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-28T01:22:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nYAJIwClijNa0+dENmr+ajD2wnhxXFHnVCYixX0/HzB5J1bFjPT/mmNVrOcGV5KqJb/l31AetnX0KAnaeXwBDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T16:42:20.618978Z"},"content_sha256":"14ccd2f56796bed6e0108bbff6c82f9e02f22d17612a7c9e8db64eb031ef347d","schema_version":"1.0","event_id":"sha256:14ccd2f56796bed6e0108bbff6c82f9e02f22d17612a7c9e8db64eb031ef347d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DY6WY5IYPLIGKLYMC33P7R6BJI/bundle.json","state_url":"https://pith.science/pith/DY6WY5IYPLIGKLYMC33P7R6BJI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DY6WY5IYPLIGKLYMC33P7R6BJI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T16:42:20Z","links":{"resolver":"https://pith.science/pith/DY6WY5IYPLIGKLYMC33P7R6BJI","bundle":"https://pith.science/pith/DY6WY5IYPLIGKLYMC33P7R6BJI/bundle.json","state":"https://pith.science/pith/DY6WY5IYPLIGKLYMC33P7R6BJI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DY6WY5IYPLIGKLYMC33P7R6BJI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DY6WY5IYPLIGKLYMC33P7R6BJI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f261b1176330134b80394eab5aa47bca288a44459e5fc61a3970756d53dc84f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-10-03T11:36:02Z","title_canon_sha256":"541de818387cd8b9c0dbdfba44de7fca892f44085320bbf8225ada9ce406befb"},"schema_version":"1.0","source":{"id":"2510.02913","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.02913","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"arxiv_version","alias_value":"2510.02913v2","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.02913","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"pith_short_12","alias_value":"DY6WY5IYPLIG","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"pith_short_16","alias_value":"DY6WY5IYPLIGKLYM","created_at":"2026-07-28T01:22:23Z"},{"alias_kind":"pith_short_8","alias_value":"DY6WY5IY","created_at":"2026-07-28T01:22:23Z"}],"graph_snapshots":[{"event_id":"sha256:14ccd2f56796bed6e0108bbff6c82f9e02f22d17612a7c9e8db64eb031ef347d","target":"graph","created_at":"2026-07-28T01:22:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2510.02913/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-language models such as CLIP demonstrate impressive zero-shot generalization but remain highly vulnerable to adversarial attacks. Prior adversarial methods treat all samples equally in the loss function, despite the fact that not all inputs contribute equally to adversarial vulnerability. Some samples retain high confidence even under large perturbations, while others are unstable and change predictions with minor noise. To address this, we propose Confidence-Aware Weighting (CAW) to enhance the zero-shot robustness of vision-language models. CAW introduces two key components: (1) a Con","authors_text":"Mostafa Tavassolipour, Nikoo Naghavian","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-10-03T11:36:02Z","title":"Improving Adversarial Robustness of Zero-Shot CLIP with Confidence-Aware Weighting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.02913","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f1e9de395f3fc50e6d47043d2701719feb25b35b04feb1221da1b30100c61436","target":"record","created_at":"2026-07-28T01:22:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f261b1176330134b80394eab5aa47bca288a44459e5fc61a3970756d53dc84f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-10-03T11:36:02Z","title_canon_sha256":"541de818387cd8b9c0dbdfba44de7fca892f44085320bbf8225ada9ce406befb"},"schema_version":"1.0","source":{"id":"2510.02913","kind":"arxiv","version":2}},"canonical_sha256":"1e3d6c75187ad0652f0c16f6ffc7c14a2d07d874619b5f74d5d5dde92f945c47","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1e3d6c75187ad0652f0c16f6ffc7c14a2d07d874619b5f74d5d5dde92f945c47","first_computed_at":"2026-07-28T01:22:23.354981Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-28T01:22:23.354981Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6N1hJDrPLhgpgwhJKWbXjJS/JSmr9H66Qqn6+uACE3lMP4ALqCbaKoFCa40mPng8ZhI7qlJWIAttT2OUCEQTBw==","signature_status":"signed_v1","signed_at":"2026-07-28T01:22:23.356005Z","signed_message":"canonical_sha256_bytes"},"source_id":"2510.02913","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f1e9de395f3fc50e6d47043d2701719feb25b35b04feb1221da1b30100c61436","sha256:14ccd2f56796bed6e0108bbff6c82f9e02f22d17612a7c9e8db64eb031ef347d"],"state_sha256":"54d13fda082ccef55132b4c43b325723a3968714b1f35adb873dc4203cc09d06"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NCZgiGPHPLD559tRbUnl9oAhAyKUkHK0sUewgQCpvRB6H75+uQlnh6qyMseOkNXEPMDKO2fT0K7qzR4jhKarAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T16:42:20.655465Z","bundle_sha256":"6351d3b28a6cb6211112ef39007fbf3d77af160d2cd8388a8c48955d9258fa34"}}