{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:JLV66I2AMSNLA3AGZW2OLC6C3G","short_pith_number":"pith:JLV66I2A","canonical_record":{"source":{"id":"2607.14737","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-16T09:02:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"824027302a9e35b7baa077ac4f48d77ade95b4243663de38e57d19e68035e8fe","abstract_canon_sha256":"9b29f7443b40945bbb6f16e93c06faf4fc05c7b9c0a44d1a15cf4b26e80d0d14"},"schema_version":"1.0"},"canonical_sha256":"4aebef2340649ab06c06cdb4e58bc2d9985e697442d5bfe2f97349e3ada1f15b","source":{"kind":"arxiv","id":"2607.14737","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.14737","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"arxiv_version","alias_value":"2607.14737v1","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.14737","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"pith_short_12","alias_value":"JLV66I2AMSNL","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"pith_short_16","alias_value":"JLV66I2AMSNLA3AG","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"pith_short_8","alias_value":"JLV66I2A","created_at":"2026-07-17T01:21:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:JLV66I2AMSNLA3AGZW2OLC6C3G","target":"record","payload":{"canonical_record":{"source":{"id":"2607.14737","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-16T09:02:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"824027302a9e35b7baa077ac4f48d77ade95b4243663de38e57d19e68035e8fe","abstract_canon_sha256":"9b29f7443b40945bbb6f16e93c06faf4fc05c7b9c0a44d1a15cf4b26e80d0d14"},"schema_version":"1.0"},"canonical_sha256":"4aebef2340649ab06c06cdb4e58bc2d9985e697442d5bfe2f97349e3ada1f15b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-17T01:21:28.471995Z","signature_b64":"TEHPH5MLUutM5fmQFLGRnRoj/sLKiSxHlz4xvNMnxGNhTVz5XIUj94ag4vwiOfJeQ+z0ZJSd8Wd1an/EVg1XBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4aebef2340649ab06c06cdb4e58bc2d9985e697442d5bfe2f97349e3ada1f15b","last_reissued_at":"2026-07-17T01:21:28.471180Z","signature_status":"signed_v1","first_computed_at":"2026-07-17T01:21:28.471180Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.14737","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-17T01:21:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L3aSLr3IVqzYQn3Tk2qhWebjV9eSxMEoyqLc+s8j1ldAGCoMxkUqjcQ1nCFrF32jgwmMexQqpkHNsCXrRaTwBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:43:46.491326Z"},"content_sha256":"f82740b4342b49610690729acb962936dda20f39197fd95d422c3a4370723c07","schema_version":"1.0","event_id":"sha256:f82740b4342b49610690729acb962936dda20f39197fd95d422c3a4370723c07"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:JLV66I2AMSNLA3AGZW2OLC6C3G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"GeoDetect: Geometric Adversarial Detection for VLPs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Afsaneh Hasanebrahimi, Christopher Leckie, Hanxun Huang, James Bailey, Sarah Erfani","submitted_at":"2026-07-16T09:02:38Z","abstract_excerpt":"Vision-language pre-trained models (VLPs) are widely used in real-world applications. However, they remain vulnerable to adversarial attacks. Although adversarial detection methods have demonstrated success in single-modality settings (either vision or language), their effectiveness and reliability in multimodal models such as VLPs remain largely unexplored. In this work, we study the geometry of VLP embedding spaces and observe structured anisotropy that differs from unimodal vision models. Our theoretical analysis shows that under this anisotropic structure, adversarial attacks increase the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.14737","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.14737/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-17T01:21:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dVwovwO6J47pXVfAioin+vrSGnvb7+PYcNFGqTo/neGpndRLjgKNw57cI+x34Jzp1V5PLkB8XIIDF/2E7fkLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:43:46.491903Z"},"content_sha256":"1816c0416b1237ed83e483afbbdc6beb3582f767a3d60a83c9581578609ca16c","schema_version":"1.0","event_id":"sha256:1816c0416b1237ed83e483afbbdc6beb3582f767a3d60a83c9581578609ca16c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JLV66I2AMSNLA3AGZW2OLC6C3G/bundle.json","state_url":"https://pith.science/pith/JLV66I2AMSNLA3AGZW2OLC6C3G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JLV66I2AMSNLA3AGZW2OLC6C3G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T05:43:46Z","links":{"resolver":"https://pith.science/pith/JLV66I2AMSNLA3AGZW2OLC6C3G","bundle":"https://pith.science/pith/JLV66I2AMSNLA3AGZW2OLC6C3G/bundle.json","state":"https://pith.science/pith/JLV66I2AMSNLA3AGZW2OLC6C3G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JLV66I2AMSNLA3AGZW2OLC6C3G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:JLV66I2AMSNLA3AGZW2OLC6C3G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9b29f7443b40945bbb6f16e93c06faf4fc05c7b9c0a44d1a15cf4b26e80d0d14","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-16T09:02:38Z","title_canon_sha256":"824027302a9e35b7baa077ac4f48d77ade95b4243663de38e57d19e68035e8fe"},"schema_version":"1.0","source":{"id":"2607.14737","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.14737","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"arxiv_version","alias_value":"2607.14737v1","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.14737","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"pith_short_12","alias_value":"JLV66I2AMSNL","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"pith_short_16","alias_value":"JLV66I2AMSNLA3AG","created_at":"2026-07-17T01:21:28Z"},{"alias_kind":"pith_short_8","alias_value":"JLV66I2A","created_at":"2026-07-17T01:21:28Z"}],"graph_snapshots":[{"event_id":"sha256:1816c0416b1237ed83e483afbbdc6beb3582f767a3d60a83c9581578609ca16c","target":"graph","created_at":"2026-07-17T01:21:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.14737/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-language pre-trained models (VLPs) are widely used in real-world applications. However, they remain vulnerable to adversarial attacks. Although adversarial detection methods have demonstrated success in single-modality settings (either vision or language), their effectiveness and reliability in multimodal models such as VLPs remain largely unexplored. In this work, we study the geometry of VLP embedding spaces and observe structured anisotropy that differs from unimodal vision models. Our theoretical analysis shows that under this anisotropic structure, adversarial attacks increase the ","authors_text":"Afsaneh Hasanebrahimi, Christopher Leckie, Hanxun Huang, James Bailey, Sarah Erfani","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-16T09:02:38Z","title":"GeoDetect: Geometric Adversarial Detection for VLPs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.14737","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f82740b4342b49610690729acb962936dda20f39197fd95d422c3a4370723c07","target":"record","created_at":"2026-07-17T01:21:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9b29f7443b40945bbb6f16e93c06faf4fc05c7b9c0a44d1a15cf4b26e80d0d14","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-16T09:02:38Z","title_canon_sha256":"824027302a9e35b7baa077ac4f48d77ade95b4243663de38e57d19e68035e8fe"},"schema_version":"1.0","source":{"id":"2607.14737","kind":"arxiv","version":1}},"canonical_sha256":"4aebef2340649ab06c06cdb4e58bc2d9985e697442d5bfe2f97349e3ada1f15b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4aebef2340649ab06c06cdb4e58bc2d9985e697442d5bfe2f97349e3ada1f15b","first_computed_at":"2026-07-17T01:21:28.471180Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-17T01:21:28.471180Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TEHPH5MLUutM5fmQFLGRnRoj/sLKiSxHlz4xvNMnxGNhTVz5XIUj94ag4vwiOfJeQ+z0ZJSd8Wd1an/EVg1XBg==","signature_status":"signed_v1","signed_at":"2026-07-17T01:21:28.471995Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.14737","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f82740b4342b49610690729acb962936dda20f39197fd95d422c3a4370723c07","sha256:1816c0416b1237ed83e483afbbdc6beb3582f767a3d60a83c9581578609ca16c"],"state_sha256":"acbf1d87088ddda1c11f260eb2c7ec70fcd089cd33be7a9160616675bffd3e66"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bT1SZbHY4xlkDJF9TAN8+b1YTLfuQgqM9Veh7g+4abjJpjVF3dN4EseizkfTk6zxiquqRaTKwtrmWqiP5385BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T05:43:46.497090Z","bundle_sha256":"217aaaca8a7d0a0ad744e67c9a16cd305f0be0ff16196c5720b365d2a0b734e3"}}