{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:MKSAW43KJEMIW7UFV4RJLMBXRV","short_pith_number":"pith:MKSAW43K","canonical_record":{"source":{"id":"2607.07375","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T13:06:20Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ece4d949fa0cea626b14f00168f11b26a69d2398a1b00302aff953798959feb4","abstract_canon_sha256":"c407d1422204252f63039a5a3d2ff0f2feb51e2a779e7d70c8a1bb2549897db9"},"schema_version":"1.0"},"canonical_sha256":"62a40b736a49188b7e85af2295b0378d76f553a5d8fc937685434088847422fc","source":{"kind":"arxiv","id":"2607.07375","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07375","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07375v1","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07375","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"MKSAW43KJEMI","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"MKSAW43KJEMIW7UF","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"MKSAW43K","created_at":"2026-07-09T01:20:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:MKSAW43KJEMIW7UFV4RJLMBXRV","target":"record","payload":{"canonical_record":{"source":{"id":"2607.07375","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T13:06:20Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ece4d949fa0cea626b14f00168f11b26a69d2398a1b00302aff953798959feb4","abstract_canon_sha256":"c407d1422204252f63039a5a3d2ff0f2feb51e2a779e7d70c8a1bb2549897db9"},"schema_version":"1.0"},"canonical_sha256":"62a40b736a49188b7e85af2295b0378d76f553a5d8fc937685434088847422fc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-09T01:20:23.013359Z","signature_b64":"OshC2JhQwUPH2VM8J32UiU20Jxhn6hdA1mbMsJkNlYw1DhsiEc/n31cLGGGhhJuZgG0sxakrynEnPXZZxqbBAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"62a40b736a49188b7e85af2295b0378d76f553a5d8fc937685434088847422fc","last_reissued_at":"2026-07-09T01:20:23.012310Z","signature_status":"signed_v1","first_computed_at":"2026-07-09T01:20:23.012310Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.07375","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RmwFy08J9DnzIZAM8gxmbpWegeKyON2wARL+2+8AZBx85xBOgGSkCIwb7EJTAUp7wMpoGY7MwCRKIZVdKnShAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T11:40:39.319463Z"},"content_sha256":"785034955236229ec35d7edf4dee560b3557fc95e4d2896efb08b78c70245a80","schema_version":"1.0","event_id":"sha256:785034955236229ec35d7edf4dee560b3557fc95e4d2896efb08b78c70245a80"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:MKSAW43KJEMIW7UFV4RJLMBXRV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Chethan Krishnamurthy Ramanaik, Eirini Ntoutsi, Michael Hecht, Tobias Callies","submitted_at":"2026-07-08T13:06:20Z","abstract_excerpt":"Adversarial vulnerability in deep neural networks (DNNs) has been studied from the perspectives of decision-boundary geometry, feature robustness, input-output Jacobians, and the instability of inverse problems. Here, we focus on the spectral structure of intermediate linear transformations that propagate information through modern DNNs, an unexplored mechanism of adversarial vulnerability. Specifically, we investigate transformer-based vision-language models, whose linear layers admit interpretable spectral decompositions and whose widespread adoption makes understanding their robustness incr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07375","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07375/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yJLUs7TNhkwEpS/u6QPQSPdGZq6rbcZeMbQKCUrCOVTqcR0dPbPaFKr66JkfA7hK1W9DPtTjZGkc3zy6WJFFCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T11:40:39.320197Z"},"content_sha256":"d18614dc79844c51aa4cea9b756ea62491663546caded800ec4c8702eb3c2ba7","schema_version":"1.0","event_id":"sha256:d18614dc79844c51aa4cea9b756ea62491663546caded800ec4c8702eb3c2ba7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MKSAW43KJEMIW7UFV4RJLMBXRV/bundle.json","state_url":"https://pith.science/pith/MKSAW43KJEMIW7UFV4RJLMBXRV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MKSAW43KJEMIW7UFV4RJLMBXRV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T11:40:39Z","links":{"resolver":"https://pith.science/pith/MKSAW43KJEMIW7UFV4RJLMBXRV","bundle":"https://pith.science/pith/MKSAW43KJEMIW7UFV4RJLMBXRV/bundle.json","state":"https://pith.science/pith/MKSAW43KJEMIW7UFV4RJLMBXRV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MKSAW43KJEMIW7UFV4RJLMBXRV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:MKSAW43KJEMIW7UFV4RJLMBXRV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c407d1422204252f63039a5a3d2ff0f2feb51e2a779e7d70c8a1bb2549897db9","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T13:06:20Z","title_canon_sha256":"ece4d949fa0cea626b14f00168f11b26a69d2398a1b00302aff953798959feb4"},"schema_version":"1.0","source":{"id":"2607.07375","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07375","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07375v1","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07375","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"MKSAW43KJEMI","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"MKSAW43KJEMIW7UF","created_at":"2026-07-09T01:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"MKSAW43K","created_at":"2026-07-09T01:20:23Z"}],"graph_snapshots":[{"event_id":"sha256:d18614dc79844c51aa4cea9b756ea62491663546caded800ec4c8702eb3c2ba7","target":"graph","created_at":"2026-07-09T01:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.07375/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial vulnerability in deep neural networks (DNNs) has been studied from the perspectives of decision-boundary geometry, feature robustness, input-output Jacobians, and the instability of inverse problems. Here, we focus on the spectral structure of intermediate linear transformations that propagate information through modern DNNs, an unexplored mechanism of adversarial vulnerability. Specifically, we investigate transformer-based vision-language models, whose linear layers admit interpretable spectral decompositions and whose widespread adoption makes understanding their robustness incr","authors_text":"Chethan Krishnamurthy Ramanaik, Eirini Ntoutsi, Michael Hecht, Tobias Callies","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T13:06:20Z","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07375","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:785034955236229ec35d7edf4dee560b3557fc95e4d2896efb08b78c70245a80","target":"record","created_at":"2026-07-09T01:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c407d1422204252f63039a5a3d2ff0f2feb51e2a779e7d70c8a1bb2549897db9","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T13:06:20Z","title_canon_sha256":"ece4d949fa0cea626b14f00168f11b26a69d2398a1b00302aff953798959feb4"},"schema_version":"1.0","source":{"id":"2607.07375","kind":"arxiv","version":1}},"canonical_sha256":"62a40b736a49188b7e85af2295b0378d76f553a5d8fc937685434088847422fc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"62a40b736a49188b7e85af2295b0378d76f553a5d8fc937685434088847422fc","first_computed_at":"2026-07-09T01:20:23.012310Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-09T01:20:23.012310Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OshC2JhQwUPH2VM8J32UiU20Jxhn6hdA1mbMsJkNlYw1DhsiEc/n31cLGGGhhJuZgG0sxakrynEnPXZZxqbBAw==","signature_status":"signed_v1","signed_at":"2026-07-09T01:20:23.013359Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.07375","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:785034955236229ec35d7edf4dee560b3557fc95e4d2896efb08b78c70245a80","sha256:d18614dc79844c51aa4cea9b756ea62491663546caded800ec4c8702eb3c2ba7"],"state_sha256":"507703f3489e66d8ffa7f23235f0ec897e03f2b10a9183e25ddf25f8fb7f4bd9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KPQqR8y1MM1QhxStO8I4VJJzb3ok4YNO0vNwOqkcat9k9/VaAhCEPm0DY773jeyzW9s6bCw3R5wh56UA/f3sBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T11:40:39.333418Z","bundle_sha256":"18ac06ea0ac8050c984eb9823ce832dc0c83def083891778f210fa0512fe7180"}}