{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:GW37JKEOONKLRZWQM5VFREPADB","short_pith_number":"pith:GW37JKEO","canonical_record":{"source":{"id":"2608.10933","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-11T14:01:24Z","cross_cats_sorted":[],"title_canon_sha256":"7283165d2708d98f5144c8518c27ffdaadda8243a9fad221ddfd8df2f37f671b","abstract_canon_sha256":"1d6d56f9b07053179ec65959cab214ec40208daaa71572067b87d9c0e5c7f86a"},"schema_version":"1.0"},"canonical_sha256":"35b7f4a88e7354b8e6d0676a5891e01861f8bdd129c01905c64a0170968731e5","source":{"kind":"arxiv","id":"2608.10933","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.10933","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"arxiv_version","alias_value":"2608.10933v1","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.10933","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"pith_short_12","alias_value":"GW37JKEOONKL","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"pith_short_16","alias_value":"GW37JKEOONKLRZWQ","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"pith_short_8","alias_value":"GW37JKEO","created_at":"2026-08-12T01:23:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:GW37JKEOONKLRZWQM5VFREPADB","target":"record","payload":{"canonical_record":{"source":{"id":"2608.10933","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-11T14:01:24Z","cross_cats_sorted":[],"title_canon_sha256":"7283165d2708d98f5144c8518c27ffdaadda8243a9fad221ddfd8df2f37f671b","abstract_canon_sha256":"1d6d56f9b07053179ec65959cab214ec40208daaa71572067b87d9c0e5c7f86a"},"schema_version":"1.0"},"canonical_sha256":"35b7f4a88e7354b8e6d0676a5891e01861f8bdd129c01905c64a0170968731e5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-12T01:23:51.020946Z","signature_b64":"NR3qD2yRMirD+XRn9KEA5UFep4e9nyMZuY+mkrkMtKPeRIG+SrlZYQFcaCE+p174gMiSFHogoomXt6DezYVUDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"35b7f4a88e7354b8e6d0676a5891e01861f8bdd129c01905c64a0170968731e5","last_reissued_at":"2026-08-12T01:23:51.019304Z","signature_status":"signed_v1","first_computed_at":"2026-08-12T01:23:51.019304Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.10933","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-12T01:23:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fAKAGQeF5Vv8ZxYY6eFmut6dV/z8YkZ5Oo+/nuM6CxOXAhThto29QdgPqjDOtA51USOGUhOcjktJ2Wbf9zQqDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T13:28:50.787931Z"},"content_sha256":"d13df27c538594afe6b41c95f2bb6518848f6ddf8a64ebef2354462a993d3a1c","schema_version":"1.0","event_id":"sha256:d13df27c538594afe6b41c95f2bb6518848f6ddf8a64ebef2354462a993d3a1c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:GW37JKEOONKLRZWQM5VFREPADB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Dacheng Tao, Jiaxing Huang, Junfeng Fang, Rong-Cheng Tu, Siyuan Liang, Yupeng Qiu","submitted_at":"2026-08-11T14:01:24Z","abstract_excerpt":"Text-to-Video (T2V) generative models are vulnerable to jailbreak attacks in real-world deployment, leading them to produce harmful or inappropriate content. Existing defense approaches mainly rely on input filtering or reconstruction, which not only incur high computational latency but also tend to distort semantics. To address these issues, we experimentally and systematically analyze the differences between clean and jailbreak samples in the cross-attention feature space, revealing for the first time a cumulative separation effect and a progressively increasing trend of linear separability "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.10933","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.10933/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-12T01:23:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/UD6KMimj+iyoL8V0NDHpzUoGykKe1su7YzjOI2HNuC115TeJ98y6ovuaB5j1pu0tMM+jFST5PKHIO8QA5MvDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T13:28:50.788430Z"},"content_sha256":"70296cff5a252a91c5240aabbbae6de92cad1d12c4d239989d3a3c9cce3197d2","schema_version":"1.0","event_id":"sha256:70296cff5a252a91c5240aabbbae6de92cad1d12c4d239989d3a3c9cce3197d2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GW37JKEOONKLRZWQM5VFREPADB/bundle.json","state_url":"https://pith.science/pith/GW37JKEOONKLRZWQM5VFREPADB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GW37JKEOONKLRZWQM5VFREPADB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T13:28:50Z","links":{"resolver":"https://pith.science/pith/GW37JKEOONKLRZWQM5VFREPADB","bundle":"https://pith.science/pith/GW37JKEOONKLRZWQM5VFREPADB/bundle.json","state":"https://pith.science/pith/GW37JKEOONKLRZWQM5VFREPADB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GW37JKEOONKLRZWQM5VFREPADB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:GW37JKEOONKLRZWQM5VFREPADB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1d6d56f9b07053179ec65959cab214ec40208daaa71572067b87d9c0e5c7f86a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-11T14:01:24Z","title_canon_sha256":"7283165d2708d98f5144c8518c27ffdaadda8243a9fad221ddfd8df2f37f671b"},"schema_version":"1.0","source":{"id":"2608.10933","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.10933","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"arxiv_version","alias_value":"2608.10933v1","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.10933","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"pith_short_12","alias_value":"GW37JKEOONKL","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"pith_short_16","alias_value":"GW37JKEOONKLRZWQ","created_at":"2026-08-12T01:23:51Z"},{"alias_kind":"pith_short_8","alias_value":"GW37JKEO","created_at":"2026-08-12T01:23:51Z"}],"graph_snapshots":[{"event_id":"sha256:70296cff5a252a91c5240aabbbae6de92cad1d12c4d239989d3a3c9cce3197d2","target":"graph","created_at":"2026-08-12T01:23:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.10933/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Text-to-Video (T2V) generative models are vulnerable to jailbreak attacks in real-world deployment, leading them to produce harmful or inappropriate content. Existing defense approaches mainly rely on input filtering or reconstruction, which not only incur high computational latency but also tend to distort semantics. To address these issues, we experimentally and systematically analyze the differences between clean and jailbreak samples in the cross-attention feature space, revealing for the first time a cumulative separation effect and a progressively increasing trend of linear separability ","authors_text":"Dacheng Tao, Jiaxing Huang, Junfeng Fang, Rong-Cheng Tu, Siyuan Liang, Yupeng Qiu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-11T14:01:24Z","title":"SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.10933","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d13df27c538594afe6b41c95f2bb6518848f6ddf8a64ebef2354462a993d3a1c","target":"record","created_at":"2026-08-12T01:23:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1d6d56f9b07053179ec65959cab214ec40208daaa71572067b87d9c0e5c7f86a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-11T14:01:24Z","title_canon_sha256":"7283165d2708d98f5144c8518c27ffdaadda8243a9fad221ddfd8df2f37f671b"},"schema_version":"1.0","source":{"id":"2608.10933","kind":"arxiv","version":1}},"canonical_sha256":"35b7f4a88e7354b8e6d0676a5891e01861f8bdd129c01905c64a0170968731e5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"35b7f4a88e7354b8e6d0676a5891e01861f8bdd129c01905c64a0170968731e5","first_computed_at":"2026-08-12T01:23:51.019304Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-12T01:23:51.019304Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NR3qD2yRMirD+XRn9KEA5UFep4e9nyMZuY+mkrkMtKPeRIG+SrlZYQFcaCE+p174gMiSFHogoomXt6DezYVUDA==","signature_status":"signed_v1","signed_at":"2026-08-12T01:23:51.020946Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.10933","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d13df27c538594afe6b41c95f2bb6518848f6ddf8a64ebef2354462a993d3a1c","sha256:70296cff5a252a91c5240aabbbae6de92cad1d12c4d239989d3a3c9cce3197d2"],"state_sha256":"960284671ee59dd0f18c7fb4442422234a130d87195c8022b5acf3ba5546f37c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LnZiVlBw34nl88x7bK9Aabpeq4p99n64JkybeVq0RFWgW+goC4G12dxVu8BG63EyGeHkN0VaAuXflJaj84gQCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T13:28:50.793167Z","bundle_sha256":"716318ccd93cc292d1995d05c7343dca68fb7503e0245fbc0099d41b95d015dd"}}