{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:EGN6R3233SNGJ26MTI2IDVGBJH","short_pith_number":"pith:EGN6R323","canonical_record":{"source":{"id":"2505.19425","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-26T02:32:22Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"0c3a4458af0d891a11e93adb7bffa7cbed70c4c89e6d54c6560b91a3e5d3192f","abstract_canon_sha256":"be462e501e8abac3d09101af5d614b4b44de8d15ed2018e7f03453f3ee66eab2"},"schema_version":"1.0"},"canonical_sha256":"219be8ef5bdc9a64ebcc9a3481d4c149cfaca594204a8878791c3a5efc6b21e0","source":{"kind":"arxiv","id":"2505.19425","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19425","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19425v1","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19425","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"pith_short_12","alias_value":"EGN6R3233SNG","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"pith_short_16","alias_value":"EGN6R3233SNGJ26M","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"pith_short_8","alias_value":"EGN6R323","created_at":"2026-07-05T11:09:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:EGN6R3233SNGJ26MTI2IDVGBJH","target":"record","payload":{"canonical_record":{"source":{"id":"2505.19425","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-26T02:32:22Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"0c3a4458af0d891a11e93adb7bffa7cbed70c4c89e6d54c6560b91a3e5d3192f","abstract_canon_sha256":"be462e501e8abac3d09101af5d614b4b44de8d15ed2018e7f03453f3ee66eab2"},"schema_version":"1.0"},"canonical_sha256":"219be8ef5bdc9a64ebcc9a3481d4c149cfaca594204a8878791c3a5efc6b21e0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:30.052468Z","signature_b64":"+WTyA+K9wMKag9x7jC1TgOQ/3VtdSVwKtsRO/mtxQdNaeuosFJG9+JEVJXkRgBclMov9iS9WZxmDBmPGv39YAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"219be8ef5bdc9a64ebcc9a3481d4c149cfaca594204a8878791c3a5efc6b21e0","last_reissued_at":"2026-07-05T11:09:30.051887Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:30.051887Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.19425","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S0hkNQTz2gCU8mf/VrhpW0zlPK8HLhusd5Oe1/KIZnZ274oL0j7gXLLhD1J8qoU3DVgRUnf1zChUC1ANqp3yDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T02:04:29.342550Z"},"content_sha256":"b833ddd2633248a5ab45d3b75b15c9f34f086a433ad8d208e0a6f6612dd93252","schema_version":"1.0","event_id":"sha256:b833ddd2633248a5ab45d3b75b15c9f34f086a433ad8d208e0a6f6612dd93252"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:EGN6R3233SNGJ26MTI2IDVGBJH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Structure Disruption: Subverting Malicious Diffusion-Based Inpainting via Self-Attention Query Perturbation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Haiwei Wu, Jianqing Li, Jinyu Tian, Yuhao He","submitted_at":"2025-05-26T02:32:22Z","abstract_excerpt":"The rapid advancement of diffusion models has enhanced their image inpainting and editing capabilities but also introduced significant societal risks. Adversaries can exploit user images from social media to generate misleading or harmful content. While adversarial perturbations can disrupt inpainting, global perturbation-based methods fail in mask-guided editing tasks due to spatial constraints. To address these challenges, we propose Structure Disruption Attack (SDA), a powerful protection framework for safeguarding sensitive image regions against inpainting-based editing. Building upon the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19425","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.19425/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9eLnkKE0sBVRw2cN591JQtm+Y7ALRXacPSyXT4hCGjWTrTdPEtIUVNREC24Kjk+eUwUvGp6rWyqZjWX6LPU7CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T02:04:29.343472Z"},"content_sha256":"47bc9138e57c798403821cdbfb1da970a69b7bf0a1baedde64ce705952f4c242","schema_version":"1.0","event_id":"sha256:47bc9138e57c798403821cdbfb1da970a69b7bf0a1baedde64ce705952f4c242"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EGN6R3233SNGJ26MTI2IDVGBJH/bundle.json","state_url":"https://pith.science/pith/EGN6R3233SNGJ26MTI2IDVGBJH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EGN6R3233SNGJ26MTI2IDVGBJH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T02:04:29Z","links":{"resolver":"https://pith.science/pith/EGN6R3233SNGJ26MTI2IDVGBJH","bundle":"https://pith.science/pith/EGN6R3233SNGJ26MTI2IDVGBJH/bundle.json","state":"https://pith.science/pith/EGN6R3233SNGJ26MTI2IDVGBJH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EGN6R3233SNGJ26MTI2IDVGBJH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:EGN6R3233SNGJ26MTI2IDVGBJH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"be462e501e8abac3d09101af5d614b4b44de8d15ed2018e7f03453f3ee66eab2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-26T02:32:22Z","title_canon_sha256":"0c3a4458af0d891a11e93adb7bffa7cbed70c4c89e6d54c6560b91a3e5d3192f"},"schema_version":"1.0","source":{"id":"2505.19425","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19425","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19425v1","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19425","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"pith_short_12","alias_value":"EGN6R3233SNG","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"pith_short_16","alias_value":"EGN6R3233SNGJ26M","created_at":"2026-07-05T11:09:30Z"},{"alias_kind":"pith_short_8","alias_value":"EGN6R323","created_at":"2026-07-05T11:09:30Z"}],"graph_snapshots":[{"event_id":"sha256:47bc9138e57c798403821cdbfb1da970a69b7bf0a1baedde64ce705952f4c242","target":"graph","created_at":"2026-07-05T11:09:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.19425/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid advancement of diffusion models has enhanced their image inpainting and editing capabilities but also introduced significant societal risks. Adversaries can exploit user images from social media to generate misleading or harmful content. While adversarial perturbations can disrupt inpainting, global perturbation-based methods fail in mask-guided editing tasks due to spatial constraints. To address these challenges, we propose Structure Disruption Attack (SDA), a powerful protection framework for safeguarding sensitive image regions against inpainting-based editing. Building upon the ","authors_text":"Haiwei Wu, Jianqing Li, Jinyu Tian, Yuhao He","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-26T02:32:22Z","title":"Structure Disruption: Subverting Malicious Diffusion-Based Inpainting via Self-Attention Query Perturbation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19425","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b833ddd2633248a5ab45d3b75b15c9f34f086a433ad8d208e0a6f6612dd93252","target":"record","created_at":"2026-07-05T11:09:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"be462e501e8abac3d09101af5d614b4b44de8d15ed2018e7f03453f3ee66eab2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-26T02:32:22Z","title_canon_sha256":"0c3a4458af0d891a11e93adb7bffa7cbed70c4c89e6d54c6560b91a3e5d3192f"},"schema_version":"1.0","source":{"id":"2505.19425","kind":"arxiv","version":1}},"canonical_sha256":"219be8ef5bdc9a64ebcc9a3481d4c149cfaca594204a8878791c3a5efc6b21e0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"219be8ef5bdc9a64ebcc9a3481d4c149cfaca594204a8878791c3a5efc6b21e0","first_computed_at":"2026-07-05T11:09:30.051887Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:30.051887Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+WTyA+K9wMKag9x7jC1TgOQ/3VtdSVwKtsRO/mtxQdNaeuosFJG9+JEVJXkRgBclMov9iS9WZxmDBmPGv39YAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:30.052468Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.19425","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b833ddd2633248a5ab45d3b75b15c9f34f086a433ad8d208e0a6f6612dd93252","sha256:47bc9138e57c798403821cdbfb1da970a69b7bf0a1baedde64ce705952f4c242"],"state_sha256":"325a4d91881f8e134f4e25f3b0a38cfa3d2dc6bd70a82e9c4138ea0c56360206"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2l1jEXeR+318VTv6tSbgMBU52xsI0iQogeAnURo9u6jytf1m8OFP4am16i/AW2e2YPHVTxa82vNNp0q9b4OZDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T02:04:29.350020Z","bundle_sha256":"8929dad1c23fc154922b55ec8eff8fb686a048d709aaa1ae1d7c49ee9fb16afc"}}