{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:IHT6LXAL45EYLDXBSUJJYUDF4P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e2350fac1401b8fa6e9b0a60e52121c605d5aec1b5a73a2cf10e29ecd33d1868","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T12:30:50Z","title_canon_sha256":"0cd3e178a55dfc8e4901d211206a5b97798f13eaee37af8537f474ae64e8ece7"},"schema_version":"1.0","source":{"id":"2505.24519","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.24519","created_at":"2026-07-05T11:12:51Z"},{"alias_kind":"arxiv_version","alias_value":"2505.24519v1","created_at":"2026-07-05T11:12:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24519","created_at":"2026-07-05T11:12:51Z"},{"alias_kind":"pith_short_12","alias_value":"IHT6LXAL45EY","created_at":"2026-07-05T11:12:51Z"},{"alias_kind":"pith_short_16","alias_value":"IHT6LXAL45EYLDXB","created_at":"2026-07-05T11:12:51Z"},{"alias_kind":"pith_short_8","alias_value":"IHT6LXAL","created_at":"2026-07-05T11:12:51Z"}],"graph_snapshots":[{"event_id":"sha256:afb5d012814f19828797dc8e644def1ba110791485e66b9770947ee5a014ee19","target":"graph","created_at":"2026-07-05T11:12:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.24519/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We introduce AMIA, a lightweight, inference-only defense for Large Vision-Language Models (LVLMs) that (1) Automatically Masks a small set of text-irrelevant image patches to disrupt adversarial perturbations, and (2) conducts joint Intention Analysis to uncover and mitigate hidden harmful intents before response generation. Without any retraining, AMIA improves defense success rates across diverse LVLMs and jailbreak benchmarks from an average of 52.4% to 81.7%, preserves general utility with only a 2% average accuracy drop, and incurs only modest inference overhead. Ablation confirms both ma","authors_text":"Liang Ding, Yuchun Miao, Yuqi Zhang, Zuchao Li","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T12:30:50Z","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24519","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7290e007fc9bbcc8842b0b6e3031ba46ad1d5395b86b076cfc93bc2fb42f1835","target":"record","created_at":"2026-07-05T11:12:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e2350fac1401b8fa6e9b0a60e52121c605d5aec1b5a73a2cf10e29ecd33d1868","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T12:30:50Z","title_canon_sha256":"0cd3e178a55dfc8e4901d211206a5b97798f13eaee37af8537f474ae64e8ece7"},"schema_version":"1.0","source":{"id":"2505.24519","kind":"arxiv","version":1}},"canonical_sha256":"41e7e5dc0be749858ee195129c5065e3cc84eafa915cfe41a10d508ed44a0199","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"41e7e5dc0be749858ee195129c5065e3cc84eafa915cfe41a10d508ed44a0199","first_computed_at":"2026-07-05T11:12:51.619192Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:51.619192Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bDkZFRSHz9T/QHx90XDf/1EOHKFgAXu5q0V98OUJJPsSyOUeo3VUlZ0yF+7WxKTuvkpJKnz1BieaajcFMZvxDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:51.619670Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.24519","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7290e007fc9bbcc8842b0b6e3031ba46ad1d5395b86b076cfc93bc2fb42f1835","sha256:afb5d012814f19828797dc8e644def1ba110791485e66b9770947ee5a014ee19"],"state_sha256":"6ead29b767d52aab6b3ec728a5e3d999d7b5237ea3d20ed56601af2922beb803"}