{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JKYQVI2LOH5ZTLOZWUPLBWOAQD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2d8ad9ce878841fedf764c2103250f7b21bdeb99b149b98f01c50ea7ff94e1bb","cross_cats_sorted":["cs.RO"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-09-03T15:00:28Z","title_canon_sha256":"ef7866f6d358e99d1724b1b43bbc6b8d9524e773fb51d3aacc9b9a40d891d0b4"},"schema_version":"1.0","source":{"id":"2509.03383","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.03383","created_at":"2026-07-05T12:04:21Z"},{"alias_kind":"arxiv_version","alias_value":"2509.03383v1","created_at":"2026-07-05T12:04:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.03383","created_at":"2026-07-05T12:04:21Z"},{"alias_kind":"pith_short_12","alias_value":"JKYQVI2LOH5Z","created_at":"2026-07-05T12:04:21Z"},{"alias_kind":"pith_short_16","alias_value":"JKYQVI2LOH5ZTLOZ","created_at":"2026-07-05T12:04:21Z"},{"alias_kind":"pith_short_8","alias_value":"JKYQVI2L","created_at":"2026-07-05T12:04:21Z"}],"graph_snapshots":[{"event_id":"sha256:de1b4a0484f62d7d75678ed7055056c7c16064d37ea4bbf2d38c242c626703b3","target":"graph","created_at":"2026-07-05T12:04:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.03383/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The integration of vision-language-action (VLA) models into embodied AI (EAI) robots is rapidly advancing their ability to perform complex, long-horizon tasks in humancentric environments. However, EAI systems introduce critical security risks: a compromised VLA model can directly translate adversarial perturbations on sensory input into unsafe physical actions. Traditional safety definitions and methodologies from the machine learning community are no longer sufficient. EAI systems raise new questions, such as what constitutes safety, how to measure it, and how to design effective attack and ","authors_text":"Haobo Xu, Yapeng Tian, Yiming Gan, Yinhe Han, Yiyang Huang, Zishen Wan, Zixuan Wang","cross_cats":["cs.RO"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-09-03T15:00:28Z","title":"ANNIE: Be Careful of Your Robots"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.03383","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0aaf7be4aa7597cc61d06942df73e8aac58d9cfe08b8331be2bbf427b250b491","target":"record","created_at":"2026-07-05T12:04:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2d8ad9ce878841fedf764c2103250f7b21bdeb99b149b98f01c50ea7ff94e1bb","cross_cats_sorted":["cs.RO"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-09-03T15:00:28Z","title_canon_sha256":"ef7866f6d358e99d1724b1b43bbc6b8d9524e773fb51d3aacc9b9a40d891d0b4"},"schema_version":"1.0","source":{"id":"2509.03383","kind":"arxiv","version":1}},"canonical_sha256":"4ab10aa34b71fb99add9b51eb0d9c080d5d2581fcabca23bc34e5ef9c1152528","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4ab10aa34b71fb99add9b51eb0d9c080d5d2581fcabca23bc34e5ef9c1152528","first_computed_at":"2026-07-05T12:04:21.662217Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:04:21.662217Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JM8ZH77gWzWnnk1yH6RzLoEpWLW9mXeJ6g5AQ68Uz7P07YzbFhwzH8FqYNniswmgrN39PHh4Yh1MLjJUUtdTAw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:04:21.662745Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.03383","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0aaf7be4aa7597cc61d06942df73e8aac58d9cfe08b8331be2bbf427b250b491","sha256:de1b4a0484f62d7d75678ed7055056c7c16064d37ea4bbf2d38c242c626703b3"],"state_sha256":"c643ee921c86ddf84a1e436e7dd057d8b87c056ac445b3a1feb0f6f597c71317"}