{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JJAVJQX63R4V2HHINIQAIA67AY","short_pith_number":"pith:JJAVJQX6","canonical_record":{"source":{"id":"2506.04879","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-05T10:51:58Z","cross_cats_sorted":[],"title_canon_sha256":"3514033eb805502338d1b628c4df231de5a540379f3deac6b09808cb5390d031","abstract_canon_sha256":"60e6d457343c83b16219e358e3de2776e66983d5d62ba9f5a581672345cc5f16"},"schema_version":"1.0"},"canonical_sha256":"4a4154c2fedc795d1ce86a200403df061062358997d48bf00547b36567f7627c","source":{"kind":"arxiv","id":"2506.04879","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.04879","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"arxiv_version","alias_value":"2506.04879v1","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.04879","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"pith_short_12","alias_value":"JJAVJQX63R4V","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"pith_short_16","alias_value":"JJAVJQX63R4V2HHI","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"pith_short_8","alias_value":"JJAVJQX6","created_at":"2026-07-05T11:16:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JJAVJQX63R4V2HHINIQAIA67AY","target":"record","payload":{"canonical_record":{"source":{"id":"2506.04879","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-05T10:51:58Z","cross_cats_sorted":[],"title_canon_sha256":"3514033eb805502338d1b628c4df231de5a540379f3deac6b09808cb5390d031","abstract_canon_sha256":"60e6d457343c83b16219e358e3de2776e66983d5d62ba9f5a581672345cc5f16"},"schema_version":"1.0"},"canonical_sha256":"4a4154c2fedc795d1ce86a200403df061062358997d48bf00547b36567f7627c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:16:38.446001Z","signature_b64":"f6XssQKRAy+IiKDvgf71uNCmogDd5RM6coUGITwfJOaxVjk1Pe5+zjCZDl2NrATOWrYbYm1V0NtUbpWnTeWlBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4a4154c2fedc795d1ce86a200403df061062358997d48bf00547b36567f7627c","last_reissued_at":"2026-07-05T11:16:38.445466Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:16:38.445466Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.04879","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4SExPy3/6yq67Ksh19WClmjXLFbp4tyHBrowoeSTF8yMUYfktfSHy10KdliNCSKqSNbY1S6a6hwlG3uYLr6rCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:42:44.372965Z"},"content_sha256":"72014fc70506b62d2ef073dc698cef3be343a3322bf3cc74e074af7b879f9bc2","schema_version":"1.0","event_id":"sha256:72014fc70506b62d2ef073dc698cef3be343a3322bf3cc74e074af7b879f9bc2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JJAVJQX63R4V2HHINIQAIA67AY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Invisible Backdoor Triggers in Image Editing Model via Deep Watermarking","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jun-Cheng Chen, Pin-Yen Chiu, Tzuhsuan Huang, Yu-Feng Chen","submitted_at":"2025-06-05T10:51:58Z","abstract_excerpt":"Diffusion models have achieved remarkable progress in both image generation and editing. However, recent studies have revealed their vulnerability to backdoor attacks, in which specific patterns embedded in the input can manipulate the model's behavior. Most existing research in this area has proposed attack frameworks focused on the image generation pipeline, leaving backdoor attacks in image editing relatively unexplored. Among the few studies targeting image editing, most utilize visible triggers, which are impractical because they introduce noticeable alterations to the input image before "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.04879","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.04879/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"to//lVJM8vpUPKQ1Foirv2cxFOUDA0ZnqrWcii4gjFgJJz/TnIJyPbmSAv5yTHX5OYTwEaIP8OOxK689bx0cDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:42:44.373531Z"},"content_sha256":"d5dd5bc6d99adcbbf53180ffba413a4d8443f5606f5809f77132bfaf8ff61ae5","schema_version":"1.0","event_id":"sha256:d5dd5bc6d99adcbbf53180ffba413a4d8443f5606f5809f77132bfaf8ff61ae5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JJAVJQX63R4V2HHINIQAIA67AY/bundle.json","state_url":"https://pith.science/pith/JJAVJQX63R4V2HHINIQAIA67AY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JJAVJQX63R4V2HHINIQAIA67AY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T17:42:44Z","links":{"resolver":"https://pith.science/pith/JJAVJQX63R4V2HHINIQAIA67AY","bundle":"https://pith.science/pith/JJAVJQX63R4V2HHINIQAIA67AY/bundle.json","state":"https://pith.science/pith/JJAVJQX63R4V2HHINIQAIA67AY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JJAVJQX63R4V2HHINIQAIA67AY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JJAVJQX63R4V2HHINIQAIA67AY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"60e6d457343c83b16219e358e3de2776e66983d5d62ba9f5a581672345cc5f16","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-05T10:51:58Z","title_canon_sha256":"3514033eb805502338d1b628c4df231de5a540379f3deac6b09808cb5390d031"},"schema_version":"1.0","source":{"id":"2506.04879","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.04879","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"arxiv_version","alias_value":"2506.04879v1","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.04879","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"pith_short_12","alias_value":"JJAVJQX63R4V","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"pith_short_16","alias_value":"JJAVJQX63R4V2HHI","created_at":"2026-07-05T11:16:38Z"},{"alias_kind":"pith_short_8","alias_value":"JJAVJQX6","created_at":"2026-07-05T11:16:38Z"}],"graph_snapshots":[{"event_id":"sha256:d5dd5bc6d99adcbbf53180ffba413a4d8443f5606f5809f77132bfaf8ff61ae5","target":"graph","created_at":"2026-07-05T11:16:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.04879/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models have achieved remarkable progress in both image generation and editing. However, recent studies have revealed their vulnerability to backdoor attacks, in which specific patterns embedded in the input can manipulate the model's behavior. Most existing research in this area has proposed attack frameworks focused on the image generation pipeline, leaving backdoor attacks in image editing relatively unexplored. Among the few studies targeting image editing, most utilize visible triggers, which are impractical because they introduce noticeable alterations to the input image before ","authors_text":"Jun-Cheng Chen, Pin-Yen Chiu, Tzuhsuan Huang, Yu-Feng Chen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-05T10:51:58Z","title":"Invisible Backdoor Triggers in Image Editing Model via Deep Watermarking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.04879","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:72014fc70506b62d2ef073dc698cef3be343a3322bf3cc74e074af7b879f9bc2","target":"record","created_at":"2026-07-05T11:16:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"60e6d457343c83b16219e358e3de2776e66983d5d62ba9f5a581672345cc5f16","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-05T10:51:58Z","title_canon_sha256":"3514033eb805502338d1b628c4df231de5a540379f3deac6b09808cb5390d031"},"schema_version":"1.0","source":{"id":"2506.04879","kind":"arxiv","version":1}},"canonical_sha256":"4a4154c2fedc795d1ce86a200403df061062358997d48bf00547b36567f7627c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4a4154c2fedc795d1ce86a200403df061062358997d48bf00547b36567f7627c","first_computed_at":"2026-07-05T11:16:38.445466Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:16:38.445466Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"f6XssQKRAy+IiKDvgf71uNCmogDd5RM6coUGITwfJOaxVjk1Pe5+zjCZDl2NrATOWrYbYm1V0NtUbpWnTeWlBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:16:38.446001Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.04879","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:72014fc70506b62d2ef073dc698cef3be343a3322bf3cc74e074af7b879f9bc2","sha256:d5dd5bc6d99adcbbf53180ffba413a4d8443f5606f5809f77132bfaf8ff61ae5"],"state_sha256":"14f6ac7dfe72b4c484f2602bbd78f35b07a85e3def1056c241ff2cd3226e9a19"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"reSEarHrVZqV/p+/3eOzy5gXGUusoMudwLolGVuAqBhkK1OqIoqRrHaru1FAAzmZqIQUvYSBeJO5yeVfFT6/Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T17:42:44.377054Z","bundle_sha256":"211116669166ce2ab1b9c64d6ac292a2a1a9917d7ad98a112647d032a922f03a"}}