{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LULA7QCB3UICUCDRVVQSQP2UVD","short_pith_number":"pith:LULA7QCB","canonical_record":{"source":{"id":"2509.00373","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-30T06:00:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a328aba3b234f21c8ace1941cf10950b685de1db5e35cb36e08afad68db88adf","abstract_canon_sha256":"1191cffe28603c4bab6b69e3b915f3e2211762ced7a9ec7e8dc1850cc0ea30c9"},"schema_version":"1.0"},"canonical_sha256":"5d160fc041dd102a0871ad61283f54a8ff42da614d5632c518e09bcecc3688be","source":{"kind":"arxiv","id":"2509.00373","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.00373","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"arxiv_version","alias_value":"2509.00373v1","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.00373","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"pith_short_12","alias_value":"LULA7QCB3UIC","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"pith_short_16","alias_value":"LULA7QCB3UICUCDR","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"pith_short_8","alias_value":"LULA7QCB","created_at":"2026-07-05T12:02:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LULA7QCB3UICUCDRVVQSQP2UVD","target":"record","payload":{"canonical_record":{"source":{"id":"2509.00373","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-30T06:00:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a328aba3b234f21c8ace1941cf10950b685de1db5e35cb36e08afad68db88adf","abstract_canon_sha256":"1191cffe28603c4bab6b69e3b915f3e2211762ced7a9ec7e8dc1850cc0ea30c9"},"schema_version":"1.0"},"canonical_sha256":"5d160fc041dd102a0871ad61283f54a8ff42da614d5632c518e09bcecc3688be","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:02:14.911303Z","signature_b64":"LyOIh1zJNJi5cXKXXk2pKG8zTKtgVy89O9CL3+K1D6tO99dLcEy7YR4rT+I1od9mpovPooKfio/ThQqTwQalCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5d160fc041dd102a0871ad61283f54a8ff42da614d5632c518e09bcecc3688be","last_reissued_at":"2026-07-05T12:02:14.910816Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:02:14.910816Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.00373","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QEFPIZYDTQM+NSFr4A+3U3X6BK0ZCg7tU6wynT4pb1I31iNcHDf5RWNVRojKO66JmbWGZ95jURHUSTom9EQ6BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:58:29.013999Z"},"content_sha256":"94c03b479eef893f053643f0aaa1f4d3b53bf90c0c64c2e063c5f900ac20c71f","schema_version":"1.0","event_id":"sha256:94c03b479eef893f053643f0aaa1f4d3b53bf90c0c64c2e063c5f900ac20c71f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LULA7QCB3UICUCDRVVQSQP2UVD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Gaojie Jin, Jianhong Wang, Sihao Wu, Wei Huang, Xiaowei Huang","submitted_at":"2025-08-30T06:00:53Z","abstract_excerpt":"Vision Language Models (VLMs) have demonstrated impressive capabilities in integrating visual and textual information for understanding and reasoning, but remain highly vulnerable to adversarial attacks. While activation steering has emerged as a promising defence, existing approaches often rely on task-specific contrastive prompts to extract harmful directions, which exhibit suboptimal performance and can degrade visual grounding performance. To address these limitations, we propose \\textit{Sequence-Level Preference Optimization} for VLM (\\textit{SPO-VLM}), a novel two-stage defense framework"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.00373","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.00373/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TGnpJhoYy7nFrkEdFj47pXYDUUymZboToWleawJRMRvg+YlwyO+KKK5HjulIdtU2omyoH9pMXDspcyqJFEYOAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:58:29.014508Z"},"content_sha256":"fdb7b8528f7003a162d5e062d000b6f4b1d636ad159366166da3a2ffb53f5263","schema_version":"1.0","event_id":"sha256:fdb7b8528f7003a162d5e062d000b6f4b1d636ad159366166da3a2ffb53f5263"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LULA7QCB3UICUCDRVVQSQP2UVD/bundle.json","state_url":"https://pith.science/pith/LULA7QCB3UICUCDRVVQSQP2UVD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LULA7QCB3UICUCDRVVQSQP2UVD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T07:58:29Z","links":{"resolver":"https://pith.science/pith/LULA7QCB3UICUCDRVVQSQP2UVD","bundle":"https://pith.science/pith/LULA7QCB3UICUCDRVVQSQP2UVD/bundle.json","state":"https://pith.science/pith/LULA7QCB3UICUCDRVVQSQP2UVD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LULA7QCB3UICUCDRVVQSQP2UVD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LULA7QCB3UICUCDRVVQSQP2UVD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1191cffe28603c4bab6b69e3b915f3e2211762ced7a9ec7e8dc1850cc0ea30c9","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-30T06:00:53Z","title_canon_sha256":"a328aba3b234f21c8ace1941cf10950b685de1db5e35cb36e08afad68db88adf"},"schema_version":"1.0","source":{"id":"2509.00373","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.00373","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"arxiv_version","alias_value":"2509.00373v1","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.00373","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"pith_short_12","alias_value":"LULA7QCB3UIC","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"pith_short_16","alias_value":"LULA7QCB3UICUCDR","created_at":"2026-07-05T12:02:14Z"},{"alias_kind":"pith_short_8","alias_value":"LULA7QCB","created_at":"2026-07-05T12:02:14Z"}],"graph_snapshots":[{"event_id":"sha256:fdb7b8528f7003a162d5e062d000b6f4b1d636ad159366166da3a2ffb53f5263","target":"graph","created_at":"2026-07-05T12:02:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.00373/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Language Models (VLMs) have demonstrated impressive capabilities in integrating visual and textual information for understanding and reasoning, but remain highly vulnerable to adversarial attacks. While activation steering has emerged as a promising defence, existing approaches often rely on task-specific contrastive prompts to extract harmful directions, which exhibit suboptimal performance and can degrade visual grounding performance. To address these limitations, we propose \\textit{Sequence-Level Preference Optimization} for VLM (\\textit{SPO-VLM}), a novel two-stage defense framework","authors_text":"Gaojie Jin, Jianhong Wang, Sihao Wu, Wei Huang, Xiaowei Huang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-30T06:00:53Z","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.00373","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:94c03b479eef893f053643f0aaa1f4d3b53bf90c0c64c2e063c5f900ac20c71f","target":"record","created_at":"2026-07-05T12:02:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1191cffe28603c4bab6b69e3b915f3e2211762ced7a9ec7e8dc1850cc0ea30c9","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-30T06:00:53Z","title_canon_sha256":"a328aba3b234f21c8ace1941cf10950b685de1db5e35cb36e08afad68db88adf"},"schema_version":"1.0","source":{"id":"2509.00373","kind":"arxiv","version":1}},"canonical_sha256":"5d160fc041dd102a0871ad61283f54a8ff42da614d5632c518e09bcecc3688be","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5d160fc041dd102a0871ad61283f54a8ff42da614d5632c518e09bcecc3688be","first_computed_at":"2026-07-05T12:02:14.910816Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:02:14.910816Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LyOIh1zJNJi5cXKXXk2pKG8zTKtgVy89O9CL3+K1D6tO99dLcEy7YR4rT+I1od9mpovPooKfio/ThQqTwQalCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:02:14.911303Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.00373","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:94c03b479eef893f053643f0aaa1f4d3b53bf90c0c64c2e063c5f900ac20c71f","sha256:fdb7b8528f7003a162d5e062d000b6f4b1d636ad159366166da3a2ffb53f5263"],"state_sha256":"ef9977798974cd21c3e4d99bff461ee49fa230afb0e1f23a774fe2b9f57098c0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SPI8Yd7TVvnAT7XfszcHos06XcPqL0/kRQsuRmdnTI9GAazapidyTQZolXhYEBuAX/7LfF7uiElmBaRFc8aNBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T07:58:29.020129Z","bundle_sha256":"13a1f978101d9c9f790c1577211cd7172d75597d95adaafb4619cbd9cbdeb690"}}