{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:KIRMQ3MIW456ST6K2EZLVYVPQB","short_pith_number":"pith:KIRMQ3MI","canonical_record":{"source":{"id":"2607.16442","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-17T18:44:02Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"a2d1b7dca10de364e2f6390aa310d88afb9a5386e9a0fc446512fd208ce41324","abstract_canon_sha256":"9c00064429b0fb58e5f757eb43349dd9ee0cd595a604f0649a72d146eeb421a9"},"schema_version":"1.0"},"canonical_sha256":"5222c86d88b73be94fcad132bae2af805ffc1ee215442e77efb03b9bbe32ea38","source":{"kind":"arxiv","id":"2607.16442","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.16442","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"arxiv_version","alias_value":"2607.16442v1","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.16442","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"pith_short_12","alias_value":"KIRMQ3MIW456","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"pith_short_16","alias_value":"KIRMQ3MIW456ST6K","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"pith_short_8","alias_value":"KIRMQ3MI","created_at":"2026-07-21T00:20:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:KIRMQ3MIW456ST6K2EZLVYVPQB","target":"record","payload":{"canonical_record":{"source":{"id":"2607.16442","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-17T18:44:02Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"a2d1b7dca10de364e2f6390aa310d88afb9a5386e9a0fc446512fd208ce41324","abstract_canon_sha256":"9c00064429b0fb58e5f757eb43349dd9ee0cd595a604f0649a72d146eeb421a9"},"schema_version":"1.0"},"canonical_sha256":"5222c86d88b73be94fcad132bae2af805ffc1ee215442e77efb03b9bbe32ea38","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-21T00:20:18.868328Z","signature_b64":"x9KUczjI6xcFW1dy/xL0tGRK47F22ntKA/EK8SIX809FMCkCSG32ozQiz3TotYSE2BUD9QwvLEpd1ejTM9icAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5222c86d88b73be94fcad132bae2af805ffc1ee215442e77efb03b9bbe32ea38","last_reissued_at":"2026-07-21T00:20:18.867484Z","signature_status":"signed_v1","first_computed_at":"2026-07-21T00:20:18.867484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.16442","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T00:20:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"31nijeB6HE3eSwnZAEJNgBJRmvMkCaLFOa0NsRZ4FmVrMY0619YCnMVUXw2i4iwL8+dce16qfEtgE+2z0C4xAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:01:53.171208Z"},"content_sha256":"76d45f936ff282e5d38e02a142ebd9ed09295d7cafda94d0188576de9aff4a51","schema_version":"1.0","event_id":"sha256:76d45f936ff282e5d38e02a142ebd9ed09295d7cafda94d0188576de9aff4a51"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:KIRMQ3MIW456ST6K2EZLVYVPQB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"One Modality to Forget Them All: Enhancing Cross-Modal Unlearning in Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.CV","authors_text":"Guangjing Wang, Ning Wang, Sudharshan Balaji, Yili Ren, Yimin Chen","submitted_at":"2026-07-17T18:44:02Z","abstract_excerpt":"Machine unlearning is widely used to remove hazardous knowledge from large language models. Modern Vision-Language Models (VLMs), however, process both text and visual inputs, raising a fundamental security question: does unlearning in one modality transfer to the other? We present the first systematic, bidirectional study of cross-modal unlearning transfer across three VLM architectures: LLaVA-1.5 (MLP projection), InstructBLIP (Q-Former), and IDEFICS (gated cross-attention). We find that unlearning transfers across modalities, but the transfer is asymmetric and incomplete. In some cases, tex"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.16442","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.16442/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T00:20:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BpazEnFI6AnZJ0O3iKMdfIqVYu0547f3cn20ZOSgl2uvWAO2WzJsW1sxpQkvPj2qq5BrZbagSDORAnwuCA4tDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:01:53.171846Z"},"content_sha256":"bb70bbf8e2a0c2cdc3019ee2249d9db193b53c5c207e58f01ec8d7629435f35f","schema_version":"1.0","event_id":"sha256:bb70bbf8e2a0c2cdc3019ee2249d9db193b53c5c207e58f01ec8d7629435f35f"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:KIRMQ3MIW456ST6K2EZLVYVPQB","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2025.naacl-long.207) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Zheyuan Liu, Guangyao Dou, Mengzhao Jia, Zhaoxuan Tan, Qingkai Zeng, Yongle Yuan, and Meng Jiang. 2025. Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench. InProceedings of the 2025 Conference of the Nations of the Amer","arxiv_id":"2607.16442","detector":"doi_compliance","evidence":{"ref_index":30,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/2","reconstructed_doi":"10.18653/v1/2025.naacl-long.207"},"severity":"advisory","ref_index":30,"audited_at":"2026-08-01T21:09:09.787157Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2025.naacl-long.207","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"5634f4408bb20b5ffddf87a7172717e2ee7daece1150f5cb64ef6ed9cdf8e52f","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":16633,"payload_sha256":"4ce487d89e4c18645e28bd5c82a1f71f69bea163f258ed0bf9128918cc78f30a","signature_b64":"8Opel9RX89VjXlQiNR8IkFpHDA4aYl/7su5qDui4pHvK2FoJucJE5XORJoFB29EUaxMLAH/j+wfQU2dSH4iWBA==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T21:13:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PnzL7fRKEFqY5U9nqgRIn+8uNX81nm9kDcGbGSKAtbRKuEklesB9YTIST7DT6qb2i3id+iqB+RiS6xl+mBnnCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:01:53.176607Z"},"content_sha256":"490ebcf71ce4d06b0dcdc27323097d76d102b7e9822aa82bb42ee40e78e791bf","schema_version":"1.0","event_id":"sha256:490ebcf71ce4d06b0dcdc27323097d76d102b7e9822aa82bb42ee40e78e791bf"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:KIRMQ3MIW456ST6K2EZLVYVPQB","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2025.findings-acl.1058) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Alexey Dontsov, Dmitrii Korzh, Alexey Zhavoronkin, Boris Mikheev, Denis Bobkov, Aibek Alanov, Oleg Rogov, Ivan Oseledets, and Elena Tutubalina. 2025. CLEAR: Character Unlearning in Textual and Visual Modalities. InFindings of the Associatio","arxiv_id":"2607.16442","detector":"doi_compliance","evidence":{"ref_index":11,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v1/","reconstructed_doi":"10.18653/v1/2025.findings-acl.1058"},"severity":"advisory","ref_index":11,"audited_at":"2026-08-01T21:09:09.787157Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2025.findings-acl.1058","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"e5deaffcbe1fcf9a7ac7b5dc6e80e6d7cdf6417be359845d0fa29e63c23a861c","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":16632,"payload_sha256":"a14cf720d830367364d6d7c376aeef220f40f768ba4547878dd3ad398683ba4e","signature_b64":"brB01N+bo2xvLkfebpaXaNDDtfbJFNVa8779vvyosuNp/ISPSwyGYbbTdjYr1EEEJ1YpMCH0/ORdjxTu0D7PBg==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T21:13:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wBX+tZ8RXOm2nVWYXHtXfJypNQUoPXchGciPI86jcPXaGArl8tXDrhb+M6cnWHl98uVVhYN2Q3Qo/a4Wmc1dDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:01:53.177069Z"},"content_sha256":"84694e3b37ce893dd5a9370aaadd382c4153eb7eb18e4cf696c86305bb303077","schema_version":"1.0","event_id":"sha256:84694e3b37ce893dd5a9370aaadd382c4153eb7eb18e4cf696c86305bb303077"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KIRMQ3MIW456ST6K2EZLVYVPQB/bundle.json","state_url":"https://pith.science/pith/KIRMQ3MIW456ST6K2EZLVYVPQB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KIRMQ3MIW456ST6K2EZLVYVPQB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T04:01:53Z","links":{"resolver":"https://pith.science/pith/KIRMQ3MIW456ST6K2EZLVYVPQB","bundle":"https://pith.science/pith/KIRMQ3MIW456ST6K2EZLVYVPQB/bundle.json","state":"https://pith.science/pith/KIRMQ3MIW456ST6K2EZLVYVPQB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KIRMQ3MIW456ST6K2EZLVYVPQB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:KIRMQ3MIW456ST6K2EZLVYVPQB","merge_version":"pith-open-graph-merge-v1","event_count":4,"valid_event_count":4,"invalid_event_count":0,"equivocation_count":1,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9c00064429b0fb58e5f757eb43349dd9ee0cd595a604f0649a72d146eeb421a9","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-17T18:44:02Z","title_canon_sha256":"a2d1b7dca10de364e2f6390aa310d88afb9a5386e9a0fc446512fd208ce41324"},"schema_version":"1.0","source":{"id":"2607.16442","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.16442","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"arxiv_version","alias_value":"2607.16442v1","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.16442","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"pith_short_12","alias_value":"KIRMQ3MIW456","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"pith_short_16","alias_value":"KIRMQ3MIW456ST6K","created_at":"2026-07-21T00:20:18Z"},{"alias_kind":"pith_short_8","alias_value":"KIRMQ3MI","created_at":"2026-07-21T00:20:18Z"}],"graph_snapshots":[{"event_id":"sha256:bb70bbf8e2a0c2cdc3019ee2249d9db193b53c5c207e58f01ec8d7629435f35f","target":"graph","created_at":"2026-07-21T00:20:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.16442/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine unlearning is widely used to remove hazardous knowledge from large language models. Modern Vision-Language Models (VLMs), however, process both text and visual inputs, raising a fundamental security question: does unlearning in one modality transfer to the other? We present the first systematic, bidirectional study of cross-modal unlearning transfer across three VLM architectures: LLaVA-1.5 (MLP projection), InstructBLIP (Q-Former), and IDEFICS (gated cross-attention). We find that unlearning transfers across modalities, but the transfer is asymmetric and incomplete. In some cases, tex","authors_text":"Guangjing Wang, Ning Wang, Sudharshan Balaji, Yili Ren, Yimin Chen","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-17T18:44:02Z","title":"One Modality to Forget Them All: Enhancing Cross-Modal Unlearning in Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.16442","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:76d45f936ff282e5d38e02a142ebd9ed09295d7cafda94d0188576de9aff4a51","target":"record","created_at":"2026-07-21T00:20:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9c00064429b0fb58e5f757eb43349dd9ee0cd595a604f0649a72d146eeb421a9","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-07-17T18:44:02Z","title_canon_sha256":"a2d1b7dca10de364e2f6390aa310d88afb9a5386e9a0fc446512fd208ce41324"},"schema_version":"1.0","source":{"id":"2607.16442","kind":"arxiv","version":1}},"canonical_sha256":"5222c86d88b73be94fcad132bae2af805ffc1ee215442e77efb03b9bbe32ea38","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5222c86d88b73be94fcad132bae2af805ffc1ee215442e77efb03b9bbe32ea38","first_computed_at":"2026-07-21T00:20:18.867484Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-21T00:20:18.867484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"x9KUczjI6xcFW1dy/xL0tGRK47F22ntKA/EK8SIX809FMCkCSG32ozQiz3TotYSE2BUD9QwvLEpd1ejTM9icAA==","signature_status":"signed_v1","signed_at":"2026-07-21T00:20:18.868328Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.16442","source_kind":"arxiv","source_version":1}}},"equivocations":[{"signer_id":"pith.science","event_type":"integrity_finding","target":"integrity","event_ids":["sha256:490ebcf71ce4d06b0dcdc27323097d76d102b7e9822aa82bb42ee40e78e791bf","sha256:84694e3b37ce893dd5a9370aaadd382c4153eb7eb18e4cf696c86305bb303077"]}],"invalid_events":[],"applied_event_ids":["sha256:76d45f936ff282e5d38e02a142ebd9ed09295d7cafda94d0188576de9aff4a51","sha256:bb70bbf8e2a0c2cdc3019ee2249d9db193b53c5c207e58f01ec8d7629435f35f"],"state_sha256":"064dcce39390b16111f983fb693a43b578143ec8697ddf9a77b160d584c60fbf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KSm5oglkclxGetitZL/f8Rkl5vM5WD5H9T4UJoWRa3G97L9IhP6ORKEZIq2IP+WoO03vH9rnu5ZG/N8G+tucDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T04:01:53.179814Z","bundle_sha256":"136794866381250d4b9149783d4ccf20b2ae53c5550a098e55a851869f97179d"}}