{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JD453YG5BIUFWQMQAJF7DYL342","short_pith_number":"pith:JD453YG5","canonical_record":{"source":{"id":"2505.19598","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T07:08:38Z","cross_cats_sorted":[],"title_canon_sha256":"3290778d3dd37f38f0759d6ae77de90889b1f315a4175600989704f48cda0915","abstract_canon_sha256":"f0b9254dd3d93acae2293f2b013f6e8402ccc37451e35e92ac777254b373395c"},"schema_version":"1.0"},"canonical_sha256":"48f9dde0dd0a285b4190024bf1e17be6b6144552c2bf40925683b9fb1117ef6a","source":{"kind":"arxiv","id":"2505.19598","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19598","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19598v2","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19598","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"pith_short_12","alias_value":"JD453YG5BIUF","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"pith_short_16","alias_value":"JD453YG5BIUFWQMQ","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"pith_short_8","alias_value":"JD453YG5","created_at":"2026-07-05T11:34:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JD453YG5BIUFWQMQAJF7DYL342","target":"record","payload":{"canonical_record":{"source":{"id":"2505.19598","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T07:08:38Z","cross_cats_sorted":[],"title_canon_sha256":"3290778d3dd37f38f0759d6ae77de90889b1f315a4175600989704f48cda0915","abstract_canon_sha256":"f0b9254dd3d93acae2293f2b013f6e8402ccc37451e35e92ac777254b373395c"},"schema_version":"1.0"},"canonical_sha256":"48f9dde0dd0a285b4190024bf1e17be6b6144552c2bf40925683b9fb1117ef6a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:51.529334Z","signature_b64":"FFfQe2thvqzBMSAsipgXHJevTWrCYOUTyoFKyrbdH1DCC9FRraPXSoCTkgqAEszzXnA6uTYvEFuMALVrWAlkCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"48f9dde0dd0a285b4190024bf1e17be6b6144552c2bf40925683b9fb1117ef6a","last_reissued_at":"2026-07-05T11:34:51.528588Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:51.528588Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.19598","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4ds0FMw/39DIhkM0/9fmxWNGmSUl59dkJDOONEUpyqPhp7fHohfPVcQElO7TAZro8X6+8L6t71AhwTkPeDelCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:25:11.563797Z"},"content_sha256":"178e366bc990b9758d47a33e8fdd626d4692a16c20a2c9bc4d06fc5826e910c9","schema_version":"1.0","event_id":"sha256:178e366bc990b9758d47a33e8fdd626d4692a16c20a2c9bc4d06fc5826e910c9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JD453YG5BIUFWQMQAJF7DYL342","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evaluating Robustness of Large Audio Language Models to Audio Injection: An Empirical Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Guanyu Hou, Jiaming He, Ji Guo, Rui Zhang, Wenbo Jiang, Yinhang Zhou, Yitong Qiao","submitted_at":"2025-05-26T07:08:38Z","abstract_excerpt":"Large Audio-Language Models (LALMs) are increasingly deployed in real-world applications, yet their robustness against malicious audio injection attacks remains underexplored. This study systematically evaluates five leading LALMs across four attack scenarios: Audio Interference Attack, Instruction Following Attack, Context Injection Attack, and Judgment Hijacking Attack. Using metrics like Defense Success Rate, Context Robustness Score, and Judgment Robustness Index, their vulnerabilities and resilience were quantitatively assessed. Experimental results reveal significant performance disparit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19598","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.19598/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c7i6+SQtHr8y6cpThjrEVp5vz/tl5SdVlnA0CQfy1zPzFpKLw/tZeaZ7Q4bjVFJwZfPc7wDXDAZn8/6pqZdaCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:25:11.564290Z"},"content_sha256":"90575dc78b17b3c4a96b310d55fd7eff966720bf54d6d50cca442eba8757d030","schema_version":"1.0","event_id":"sha256:90575dc78b17b3c4a96b310d55fd7eff966720bf54d6d50cca442eba8757d030"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JD453YG5BIUFWQMQAJF7DYL342/bundle.json","state_url":"https://pith.science/pith/JD453YG5BIUFWQMQAJF7DYL342/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JD453YG5BIUFWQMQAJF7DYL342/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T17:25:11Z","links":{"resolver":"https://pith.science/pith/JD453YG5BIUFWQMQAJF7DYL342","bundle":"https://pith.science/pith/JD453YG5BIUFWQMQAJF7DYL342/bundle.json","state":"https://pith.science/pith/JD453YG5BIUFWQMQAJF7DYL342/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JD453YG5BIUFWQMQAJF7DYL342/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JD453YG5BIUFWQMQAJF7DYL342","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f0b9254dd3d93acae2293f2b013f6e8402ccc37451e35e92ac777254b373395c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T07:08:38Z","title_canon_sha256":"3290778d3dd37f38f0759d6ae77de90889b1f315a4175600989704f48cda0915"},"schema_version":"1.0","source":{"id":"2505.19598","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19598","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19598v2","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19598","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"pith_short_12","alias_value":"JD453YG5BIUF","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"pith_short_16","alias_value":"JD453YG5BIUFWQMQ","created_at":"2026-07-05T11:34:51Z"},{"alias_kind":"pith_short_8","alias_value":"JD453YG5","created_at":"2026-07-05T11:34:51Z"}],"graph_snapshots":[{"event_id":"sha256:90575dc78b17b3c4a96b310d55fd7eff966720bf54d6d50cca442eba8757d030","target":"graph","created_at":"2026-07-05T11:34:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.19598/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Audio-Language Models (LALMs) are increasingly deployed in real-world applications, yet their robustness against malicious audio injection attacks remains underexplored. This study systematically evaluates five leading LALMs across four attack scenarios: Audio Interference Attack, Instruction Following Attack, Context Injection Attack, and Judgment Hijacking Attack. Using metrics like Defense Success Rate, Context Robustness Score, and Judgment Robustness Index, their vulnerabilities and resilience were quantitatively assessed. Experimental results reveal significant performance disparit","authors_text":"Guanyu Hou, Jiaming He, Ji Guo, Rui Zhang, Wenbo Jiang, Yinhang Zhou, Yitong Qiao","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T07:08:38Z","title":"Evaluating Robustness of Large Audio Language Models to Audio Injection: An Empirical Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19598","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:178e366bc990b9758d47a33e8fdd626d4692a16c20a2c9bc4d06fc5826e910c9","target":"record","created_at":"2026-07-05T11:34:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f0b9254dd3d93acae2293f2b013f6e8402ccc37451e35e92ac777254b373395c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T07:08:38Z","title_canon_sha256":"3290778d3dd37f38f0759d6ae77de90889b1f315a4175600989704f48cda0915"},"schema_version":"1.0","source":{"id":"2505.19598","kind":"arxiv","version":2}},"canonical_sha256":"48f9dde0dd0a285b4190024bf1e17be6b6144552c2bf40925683b9fb1117ef6a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"48f9dde0dd0a285b4190024bf1e17be6b6144552c2bf40925683b9fb1117ef6a","first_computed_at":"2026-07-05T11:34:51.528588Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:34:51.528588Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FFfQe2thvqzBMSAsipgXHJevTWrCYOUTyoFKyrbdH1DCC9FRraPXSoCTkgqAEszzXnA6uTYvEFuMALVrWAlkCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:34:51.529334Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.19598","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:178e366bc990b9758d47a33e8fdd626d4692a16c20a2c9bc4d06fc5826e910c9","sha256:90575dc78b17b3c4a96b310d55fd7eff966720bf54d6d50cca442eba8757d030"],"state_sha256":"0a363ea7f804825b3103d159b60eee150412354a1ce31fdfd01b8cfe58208bda"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hx4/LE8XGvhjE7A7Fr2uZx2Jock8RQBgYl3yQtVDkk8nKPQExwOlcIC+ydA0gpchV2CZKjEm1NpXqypOZUaGBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T17:25:11.568203Z","bundle_sha256":"23cd25078c9addbc794a423fc2f9db2a0d898ec6e766947048c59189e267a7d7"}}