{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:MN3AQONROT6WCQ4TCWKUNI5IFF","short_pith_number":"pith:MN3AQONR","canonical_record":{"source":{"id":"2506.16407","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-19T15:38:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"692e8c91932012ad08661d018a6ae56d8a193327c04ce25f10e8276668d974cb","abstract_canon_sha256":"fb156b7b26f59fdba26c80b7443c06ff9d68ba906bc665a5e7625eb12b443426"},"schema_version":"1.0"},"canonical_sha256":"63760839b174fd614393159546a3a82946645e933fad1ac6a22318c45a3c4159","source":{"kind":"arxiv","id":"2506.16407","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.16407","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"arxiv_version","alias_value":"2506.16407v1","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.16407","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"pith_short_12","alias_value":"MN3AQONROT6W","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"pith_short_16","alias_value":"MN3AQONROT6WCQ4T","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"pith_short_8","alias_value":"MN3AQONR","created_at":"2026-07-05T11:24:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:MN3AQONROT6WCQ4TCWKUNI5IFF","target":"record","payload":{"canonical_record":{"source":{"id":"2506.16407","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-19T15:38:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"692e8c91932012ad08661d018a6ae56d8a193327c04ce25f10e8276668d974cb","abstract_canon_sha256":"fb156b7b26f59fdba26c80b7443c06ff9d68ba906bc665a5e7625eb12b443426"},"schema_version":"1.0"},"canonical_sha256":"63760839b174fd614393159546a3a82946645e933fad1ac6a22318c45a3c4159","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:24:36.039713Z","signature_b64":"A94BrMA+JAB0bmH11IuChPQcjusFdhrNFWnU03byvtpPXL6pUfDE9nwPZXrsy/5xE6zTJptALaimmdbdBjFqAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"63760839b174fd614393159546a3a82946645e933fad1ac6a22318c45a3c4159","last_reissued_at":"2026-07-05T11:24:36.039195Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:24:36.039195Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.16407","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:24:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UT+YhyUpP8byd8UAyytsAVEJs/gFYNAPoqm7HKFZyG8BTvHJdh9utloViZ1b16w8aqj3J9/y8a+VoFtfFOTCCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T00:32:34.023280Z"},"content_sha256":"91c8d62a99eb6d8dc32a169fdb03c234948229569b224a241af004daaeeca27b","schema_version":"1.0","event_id":"sha256:91c8d62a99eb6d8dc32a169fdb03c234948229569b224a241af004daaeeca27b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:MN3AQONROT6WCQ4TCWKUNI5IFF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robustness Evaluation of OCR-based Visual Document Understanding under Multi-Modal Adversarial Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Dong Nguyen Tien, Dung D. Le","submitted_at":"2025-06-19T15:38:31Z","abstract_excerpt":"Visual Document Understanding (VDU) systems have achieved strong performance in information extraction by integrating textual, layout, and visual signals. However, their robustness under realistic adversarial perturbations remains insufficiently explored. We introduce the first unified framework for generating and evaluating multi-modal adversarial attacks on OCR-based VDU models. Our method covers six gradient-based layout attack scenarios, incorporating manipulations of OCR bounding boxes, pixels, and texts across both word and line granularities, with constraints on layout perturbation budg"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.16407","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.16407/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:24:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Tu/jPWr0crOQZ6KMOhDIcNOROSxiUSqLlpBUId88QAv1mthe12mX3H/G5ZznfvwNhFeaCoH+vEl5oDSbGRF2CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T00:32:34.023890Z"},"content_sha256":"68af5e76008d5c0629fb0aa33eb86fcfea7de427eced419cdf49e25e171ac0b9","schema_version":"1.0","event_id":"sha256:68af5e76008d5c0629fb0aa33eb86fcfea7de427eced419cdf49e25e171ac0b9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MN3AQONROT6WCQ4TCWKUNI5IFF/bundle.json","state_url":"https://pith.science/pith/MN3AQONROT6WCQ4TCWKUNI5IFF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MN3AQONROT6WCQ4TCWKUNI5IFF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T00:32:34Z","links":{"resolver":"https://pith.science/pith/MN3AQONROT6WCQ4TCWKUNI5IFF","bundle":"https://pith.science/pith/MN3AQONROT6WCQ4TCWKUNI5IFF/bundle.json","state":"https://pith.science/pith/MN3AQONROT6WCQ4TCWKUNI5IFF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MN3AQONROT6WCQ4TCWKUNI5IFF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:MN3AQONROT6WCQ4TCWKUNI5IFF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fb156b7b26f59fdba26c80b7443c06ff9d68ba906bc665a5e7625eb12b443426","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-19T15:38:31Z","title_canon_sha256":"692e8c91932012ad08661d018a6ae56d8a193327c04ce25f10e8276668d974cb"},"schema_version":"1.0","source":{"id":"2506.16407","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.16407","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"arxiv_version","alias_value":"2506.16407v1","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.16407","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"pith_short_12","alias_value":"MN3AQONROT6W","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"pith_short_16","alias_value":"MN3AQONROT6WCQ4T","created_at":"2026-07-05T11:24:36Z"},{"alias_kind":"pith_short_8","alias_value":"MN3AQONR","created_at":"2026-07-05T11:24:36Z"}],"graph_snapshots":[{"event_id":"sha256:68af5e76008d5c0629fb0aa33eb86fcfea7de427eced419cdf49e25e171ac0b9","target":"graph","created_at":"2026-07-05T11:24:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.16407/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Visual Document Understanding (VDU) systems have achieved strong performance in information extraction by integrating textual, layout, and visual signals. However, their robustness under realistic adversarial perturbations remains insufficiently explored. We introduce the first unified framework for generating and evaluating multi-modal adversarial attacks on OCR-based VDU models. Our method covers six gradient-based layout attack scenarios, incorporating manipulations of OCR bounding boxes, pixels, and texts across both word and line granularities, with constraints on layout perturbation budg","authors_text":"Dong Nguyen Tien, Dung D. Le","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-19T15:38:31Z","title":"Robustness Evaluation of OCR-based Visual Document Understanding under Multi-Modal Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.16407","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:91c8d62a99eb6d8dc32a169fdb03c234948229569b224a241af004daaeeca27b","target":"record","created_at":"2026-07-05T11:24:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fb156b7b26f59fdba26c80b7443c06ff9d68ba906bc665a5e7625eb12b443426","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-19T15:38:31Z","title_canon_sha256":"692e8c91932012ad08661d018a6ae56d8a193327c04ce25f10e8276668d974cb"},"schema_version":"1.0","source":{"id":"2506.16407","kind":"arxiv","version":1}},"canonical_sha256":"63760839b174fd614393159546a3a82946645e933fad1ac6a22318c45a3c4159","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"63760839b174fd614393159546a3a82946645e933fad1ac6a22318c45a3c4159","first_computed_at":"2026-07-05T11:24:36.039195Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:24:36.039195Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A94BrMA+JAB0bmH11IuChPQcjusFdhrNFWnU03byvtpPXL6pUfDE9nwPZXrsy/5xE6zTJptALaimmdbdBjFqAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:24:36.039713Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.16407","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:91c8d62a99eb6d8dc32a169fdb03c234948229569b224a241af004daaeeca27b","sha256:68af5e76008d5c0629fb0aa33eb86fcfea7de427eced419cdf49e25e171ac0b9"],"state_sha256":"77d85102e357263927bf1aa6b36103e24100be7d1750c132d08df55ed2e32272"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l8slCSmSqx9r54knxHIz71nsQ8I1kAoMMXKfwlU5av7frZVMIdv9U35c+bZZGiGuFgB/kZ0PP3vp60ASw9wVCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T00:32:34.027882Z","bundle_sha256":"f4ec7c0e38096d59a9886a40f22d9fe9f3cacc743b1cb138088649b656a4d5e5"}}