{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:F6D7RO3DNUWQTYV6EG6APWYBRB","short_pith_number":"pith:F6D7RO3D","canonical_record":{"source":{"id":"2503.12874","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-17T07:08:47Z","cross_cats_sorted":[],"title_canon_sha256":"d0d467ab30a6e9e71ed6bc5864f46599974014c675ddff4fd71f1e7f78e6b632","abstract_canon_sha256":"ccd7d40d424cff24328dc8881dbc9cd778d1929af7164a291b54fc8c0d227cc3"},"schema_version":"1.0"},"canonical_sha256":"2f87f8bb636d2d09e2be21bc07db01887ae4bbe938817bf721f2fa7b7763bf5f","source":{"kind":"arxiv","id":"2503.12874","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.12874","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"arxiv_version","alias_value":"2503.12874v2","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.12874","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"pith_short_12","alias_value":"F6D7RO3DNUWQ","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"F6D7RO3DNUWQTYV6","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"F6D7RO3D","created_at":"2026-07-05T10:33:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:F6D7RO3DNUWQTYV6EG6APWYBRB","target":"record","payload":{"canonical_record":{"source":{"id":"2503.12874","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-17T07:08:47Z","cross_cats_sorted":[],"title_canon_sha256":"d0d467ab30a6e9e71ed6bc5864f46599974014c675ddff4fd71f1e7f78e6b632","abstract_canon_sha256":"ccd7d40d424cff24328dc8881dbc9cd778d1929af7164a291b54fc8c0d227cc3"},"schema_version":"1.0"},"canonical_sha256":"2f87f8bb636d2d09e2be21bc07db01887ae4bbe938817bf721f2fa7b7763bf5f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:33:10.096351Z","signature_b64":"YfCLxsyZGE4GUff0fRRrrfvCE70Y5LwRJaqU/hoBGEmX2pY4qwS4nwVIT8Cz8gHO9S78hxltgSAqnMBMOLzIDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2f87f8bb636d2d09e2be21bc07db01887ae4bbe938817bf721f2fa7b7763bf5f","last_reissued_at":"2026-07-05T10:33:10.095756Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:33:10.095756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.12874","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:33:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zwmS9vKfBpuhScyVVgXPzDLsJ0RXruSRygF307EcUn1380tHsC3FwoPO7hvBWhVYIDsk8OHlz/iBrFAzCu0iDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T02:12:03.819308Z"},"content_sha256":"1c46e99bbd4531a11bcd35d4644038665994f497bf2e753ae1bb3728b2eaf066","schema_version":"1.0","event_id":"sha256:1c46e99bbd4531a11bcd35d4644038665994f497bf2e753ae1bb3728b2eaf066"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:F6D7RO3DNUWQTYV6EG6APWYBRB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evolution-based Region Adversarial Prompt Learning for Robustness Enhancement in Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Ke Ma, Sensen Gao, Simeng Qin, Wei Dong, Xiaochun Cao, Xiaojun Jia, Xinfeng Li, Yang Liu, Yihao Huang","submitted_at":"2025-03-17T07:08:47Z","abstract_excerpt":"Large pre-trained vision-language models (VLMs), such as CLIP, demonstrate impressive generalization but remain highly vulnerable to adversarial examples (AEs). Previous work has explored robust text prompts through adversarial training, achieving some improvement in both robustness and generalization. However, they primarily rely on singlegradient direction perturbations (e.g., PGD) to generate AEs, which lack diversity, resulting in limited improvement in adversarial robustness. To address these limitations, we propose an evolution-based region adversarial prompt tuning method called ER-APT,"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.12874","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.12874/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:33:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LID4K40PDujxOa0u1X/iO37JXdBY8uL/fua2bbUw6APqQJSM6w03FoovTA5HDG9Mm7DFPsBfpjcIQjxdVyulAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T02:12:03.819874Z"},"content_sha256":"f007f12c274b85f7afaeaf6bef9659e498f5fdcf7f01b293ae5b83c058ad9820","schema_version":"1.0","event_id":"sha256:f007f12c274b85f7afaeaf6bef9659e498f5fdcf7f01b293ae5b83c058ad9820"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F6D7RO3DNUWQTYV6EG6APWYBRB/bundle.json","state_url":"https://pith.science/pith/F6D7RO3DNUWQTYV6EG6APWYBRB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F6D7RO3DNUWQTYV6EG6APWYBRB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T02:12:03Z","links":{"resolver":"https://pith.science/pith/F6D7RO3DNUWQTYV6EG6APWYBRB","bundle":"https://pith.science/pith/F6D7RO3DNUWQTYV6EG6APWYBRB/bundle.json","state":"https://pith.science/pith/F6D7RO3DNUWQTYV6EG6APWYBRB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F6D7RO3DNUWQTYV6EG6APWYBRB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:F6D7RO3DNUWQTYV6EG6APWYBRB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ccd7d40d424cff24328dc8881dbc9cd778d1929af7164a291b54fc8c0d227cc3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-17T07:08:47Z","title_canon_sha256":"d0d467ab30a6e9e71ed6bc5864f46599974014c675ddff4fd71f1e7f78e6b632"},"schema_version":"1.0","source":{"id":"2503.12874","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.12874","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"arxiv_version","alias_value":"2503.12874v2","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.12874","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"pith_short_12","alias_value":"F6D7RO3DNUWQ","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"F6D7RO3DNUWQTYV6","created_at":"2026-07-05T10:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"F6D7RO3D","created_at":"2026-07-05T10:33:10Z"}],"graph_snapshots":[{"event_id":"sha256:f007f12c274b85f7afaeaf6bef9659e498f5fdcf7f01b293ae5b83c058ad9820","target":"graph","created_at":"2026-07-05T10:33:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.12874/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large pre-trained vision-language models (VLMs), such as CLIP, demonstrate impressive generalization but remain highly vulnerable to adversarial examples (AEs). Previous work has explored robust text prompts through adversarial training, achieving some improvement in both robustness and generalization. However, they primarily rely on singlegradient direction perturbations (e.g., PGD) to generate AEs, which lack diversity, resulting in limited improvement in adversarial robustness. To address these limitations, we propose an evolution-based region adversarial prompt tuning method called ER-APT,","authors_text":"Ke Ma, Sensen Gao, Simeng Qin, Wei Dong, Xiaochun Cao, Xiaojun Jia, Xinfeng Li, Yang Liu, Yihao Huang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-17T07:08:47Z","title":"Evolution-based Region Adversarial Prompt Learning for Robustness Enhancement in Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.12874","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1c46e99bbd4531a11bcd35d4644038665994f497bf2e753ae1bb3728b2eaf066","target":"record","created_at":"2026-07-05T10:33:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ccd7d40d424cff24328dc8881dbc9cd778d1929af7164a291b54fc8c0d227cc3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-17T07:08:47Z","title_canon_sha256":"d0d467ab30a6e9e71ed6bc5864f46599974014c675ddff4fd71f1e7f78e6b632"},"schema_version":"1.0","source":{"id":"2503.12874","kind":"arxiv","version":2}},"canonical_sha256":"2f87f8bb636d2d09e2be21bc07db01887ae4bbe938817bf721f2fa7b7763bf5f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2f87f8bb636d2d09e2be21bc07db01887ae4bbe938817bf721f2fa7b7763bf5f","first_computed_at":"2026-07-05T10:33:10.095756Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:33:10.095756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YfCLxsyZGE4GUff0fRRrrfvCE70Y5LwRJaqU/hoBGEmX2pY4qwS4nwVIT8Cz8gHO9S78hxltgSAqnMBMOLzIDw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:33:10.096351Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.12874","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1c46e99bbd4531a11bcd35d4644038665994f497bf2e753ae1bb3728b2eaf066","sha256:f007f12c274b85f7afaeaf6bef9659e498f5fdcf7f01b293ae5b83c058ad9820"],"state_sha256":"93f7b0a0708336d301bb49cfedfee28551aa61a660449fb84be86e420de6c812"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S5ut/L4sVZwuVFmLqEldEGkCcf4sIYJ1Wn4nCoPyKiwRm3LIDnnXZUmZT8HS30KYHf0LTKPsFdR4fqrBB/9IAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T02:12:03.824080Z","bundle_sha256":"eba6907e78f8b08f4963f4eb63bbdf5f9326c1081e70006ec074c825d9d74421"}}