{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DZLFYG4LDGB2IFCLPZVG7PL2VE","short_pith_number":"pith:DZLFYG4L","canonical_record":{"source":{"id":"2506.01511","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-02T10:18:09Z","cross_cats_sorted":[],"title_canon_sha256":"28be7db7c42ad486dacd9b3148a1b33152dcca2d2630407ebfeaa3610f4656aa","abstract_canon_sha256":"137e1ac82633481489a6d406c85efd7844d3678a0583e99dcbde983baed84d11"},"schema_version":"1.0"},"canonical_sha256":"1e565c1b8b1983a4144b7e6a6fbd7aa9055a075b3147424f3aad89b63e02edea","source":{"kind":"arxiv","id":"2506.01511","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01511","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01511v1","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01511","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"pith_short_12","alias_value":"DZLFYG4LDGB2","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"pith_short_16","alias_value":"DZLFYG4LDGB2IFCL","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"pith_short_8","alias_value":"DZLFYG4L","created_at":"2026-07-05T11:14:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DZLFYG4LDGB2IFCLPZVG7PL2VE","target":"record","payload":{"canonical_record":{"source":{"id":"2506.01511","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-02T10:18:09Z","cross_cats_sorted":[],"title_canon_sha256":"28be7db7c42ad486dacd9b3148a1b33152dcca2d2630407ebfeaa3610f4656aa","abstract_canon_sha256":"137e1ac82633481489a6d406c85efd7844d3678a0583e99dcbde983baed84d11"},"schema_version":"1.0"},"canonical_sha256":"1e565c1b8b1983a4144b7e6a6fbd7aa9055a075b3147424f3aad89b63e02edea","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:14.816813Z","signature_b64":"hkz+uJSJ3cQ+p2KIkzETrSPGEF3Z+gaxMMi1HuIYNh9YVvjsIiQCxWWuhdl8/7OwMhXpTWTDox9pZO2lL673Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1e565c1b8b1983a4144b7e6a6fbd7aa9055a075b3147424f3aad89b63e02edea","last_reissued_at":"2026-07-05T11:14:14.816307Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:14.816307Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.01511","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A2AJz0xryx9Uw2HVGodOicpDFvR5rXN5aDjZaVqquU1dfL7Vixixp1fqxjE9iKYPjfCIWOYM6aKQgcXHgQxcCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T15:00:50.981755Z"},"content_sha256":"394390e42029a5fff37cbc406f624a07594311170ab2cbcbdb55ade6c1f5fea1","schema_version":"1.0","event_id":"sha256:394390e42029a5fff37cbc406f624a07594311170ab2cbcbdb55ade6c1f5fea1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DZLFYG4LDGB2IFCLPZVG7PL2VE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Enhancing Diffusion-based Unrestricted Adversarial Attacks via Adversary Preferences Alignment","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Bo Li, Haijing Guo, Hao Tang, Jinglun Li, Jiyuan Fu, Kaixun Jiang, Pinxue Guo, Wenqiang Zhang, Zhaoyu Chen","submitted_at":"2025-06-02T10:18:09Z","abstract_excerpt":"Preference alignment in diffusion models has primarily focused on benign human preferences (e.g., aesthetic). In this paper, we propose a novel perspective: framing unrestricted adversarial example generation as a problem of aligning with adversary preferences. Unlike benign alignment, adversarial alignment involves two inherently conflicting preferences: visual consistency and attack effectiveness, which often lead to unstable optimization and reward hacking (e.g., reducing visual quality to improve attack success). To address this, we propose APA (Adversary Preferences Alignment), a two-stag"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01511","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.01511/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jlG00g+wPc2SICUVh4PBbgdqt1O5u4H9LLB3m4esTfUGpdWpPNYsOgdBuwhORGl2+VQVU9sROzBTwZeelfRaBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T15:00:50.982250Z"},"content_sha256":"bd15cfcdcb2b531c697386b777fcd5d69b4595a46e6fbfe8fe53acfd06c624fb","schema_version":"1.0","event_id":"sha256:bd15cfcdcb2b531c697386b777fcd5d69b4595a46e6fbfe8fe53acfd06c624fb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DZLFYG4LDGB2IFCLPZVG7PL2VE/bundle.json","state_url":"https://pith.science/pith/DZLFYG4LDGB2IFCLPZVG7PL2VE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DZLFYG4LDGB2IFCLPZVG7PL2VE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T15:00:50Z","links":{"resolver":"https://pith.science/pith/DZLFYG4LDGB2IFCLPZVG7PL2VE","bundle":"https://pith.science/pith/DZLFYG4LDGB2IFCLPZVG7PL2VE/bundle.json","state":"https://pith.science/pith/DZLFYG4LDGB2IFCLPZVG7PL2VE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DZLFYG4LDGB2IFCLPZVG7PL2VE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DZLFYG4LDGB2IFCLPZVG7PL2VE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"137e1ac82633481489a6d406c85efd7844d3678a0583e99dcbde983baed84d11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-02T10:18:09Z","title_canon_sha256":"28be7db7c42ad486dacd9b3148a1b33152dcca2d2630407ebfeaa3610f4656aa"},"schema_version":"1.0","source":{"id":"2506.01511","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01511","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01511v1","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01511","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"pith_short_12","alias_value":"DZLFYG4LDGB2","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"pith_short_16","alias_value":"DZLFYG4LDGB2IFCL","created_at":"2026-07-05T11:14:14Z"},{"alias_kind":"pith_short_8","alias_value":"DZLFYG4L","created_at":"2026-07-05T11:14:14Z"}],"graph_snapshots":[{"event_id":"sha256:bd15cfcdcb2b531c697386b777fcd5d69b4595a46e6fbfe8fe53acfd06c624fb","target":"graph","created_at":"2026-07-05T11:14:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.01511/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Preference alignment in diffusion models has primarily focused on benign human preferences (e.g., aesthetic). In this paper, we propose a novel perspective: framing unrestricted adversarial example generation as a problem of aligning with adversary preferences. Unlike benign alignment, adversarial alignment involves two inherently conflicting preferences: visual consistency and attack effectiveness, which often lead to unstable optimization and reward hacking (e.g., reducing visual quality to improve attack success). To address this, we propose APA (Adversary Preferences Alignment), a two-stag","authors_text":"Bo Li, Haijing Guo, Hao Tang, Jinglun Li, Jiyuan Fu, Kaixun Jiang, Pinxue Guo, Wenqiang Zhang, Zhaoyu Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-02T10:18:09Z","title":"Enhancing Diffusion-based Unrestricted Adversarial Attacks via Adversary Preferences Alignment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01511","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:394390e42029a5fff37cbc406f624a07594311170ab2cbcbdb55ade6c1f5fea1","target":"record","created_at":"2026-07-05T11:14:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"137e1ac82633481489a6d406c85efd7844d3678a0583e99dcbde983baed84d11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-02T10:18:09Z","title_canon_sha256":"28be7db7c42ad486dacd9b3148a1b33152dcca2d2630407ebfeaa3610f4656aa"},"schema_version":"1.0","source":{"id":"2506.01511","kind":"arxiv","version":1}},"canonical_sha256":"1e565c1b8b1983a4144b7e6a6fbd7aa9055a075b3147424f3aad89b63e02edea","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1e565c1b8b1983a4144b7e6a6fbd7aa9055a075b3147424f3aad89b63e02edea","first_computed_at":"2026-07-05T11:14:14.816307Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:14.816307Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hkz+uJSJ3cQ+p2KIkzETrSPGEF3Z+gaxMMi1HuIYNh9YVvjsIiQCxWWuhdl8/7OwMhXpTWTDox9pZO2lL673Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:14.816813Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.01511","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:394390e42029a5fff37cbc406f624a07594311170ab2cbcbdb55ade6c1f5fea1","sha256:bd15cfcdcb2b531c697386b777fcd5d69b4595a46e6fbfe8fe53acfd06c624fb"],"state_sha256":"fe04ce3e4dcba4c5b4998abafbbfab76617dd0e3ff7aca8d776574a4f17b4648"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/ThpCIBtZneGsA8lEpej3zv5ZMKy033h73wd78ZKx1HfEVI/4qHBAUwAh+RSawuvtuPvkFcTlHVXHyqQWV1HCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T15:00:50.986866Z","bundle_sha256":"5578c31bcb499af0f02a3ac3c0696f7cda87fef11c3626591964f7728b4fa77b"}}