{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:MSQGMAOMPU7F3KTNYBEYP36NSY","short_pith_number":"pith:MSQGMAOM","canonical_record":{"source":{"id":"2505.24141","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T02:23:46Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"fe46163884de97868b11e83aa34daf469d0dc63c311f551ac557fb260b4225da","abstract_canon_sha256":"850e3df64273c9f735679253caf900f0e753a9cac82353750c46a6d3db8a9d74"},"schema_version":"1.0"},"canonical_sha256":"64a06601cc7d3e5daa6dc04987efcd961a5a4849147638fa013013edf6af5b90","source":{"kind":"arxiv","id":"2505.24141","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.24141","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"arxiv_version","alias_value":"2505.24141v1","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24141","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"pith_short_12","alias_value":"MSQGMAOMPU7F","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"pith_short_16","alias_value":"MSQGMAOMPU7F3KTN","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"pith_short_8","alias_value":"MSQGMAOM","created_at":"2026-07-05T11:12:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:MSQGMAOMPU7F3KTNYBEYP36NSY","target":"record","payload":{"canonical_record":{"source":{"id":"2505.24141","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T02:23:46Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"fe46163884de97868b11e83aa34daf469d0dc63c311f551ac557fb260b4225da","abstract_canon_sha256":"850e3df64273c9f735679253caf900f0e753a9cac82353750c46a6d3db8a9d74"},"schema_version":"1.0"},"canonical_sha256":"64a06601cc7d3e5daa6dc04987efcd961a5a4849147638fa013013edf6af5b90","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:42.689326Z","signature_b64":"VeceMqmnbffH0czGFB0PiqYEEz5eXC9sbynh91p/XxR10LHlBye5oRg7J+28cIuQ8FFYn/jFz/+d95d3BOERCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"64a06601cc7d3e5daa6dc04987efcd961a5a4849147638fa013013edf6af5b90","last_reissued_at":"2026-07-05T11:12:42.688720Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:42.688720Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.24141","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GLMyO/uA6DvVJqqLVJow2R+xsy3+C+3MrzyWfes7vWLB317ogsYZ1deE7gdbD31ytPWBUKmZ/mhiG0Zoo4d3BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:59:16.444679Z"},"content_sha256":"b70660bed625aa7150141190c7dd3a8a8045dfb44202f7a9629975b813058b3b","schema_version":"1.0","event_id":"sha256:b70660bed625aa7150141190c7dd3a8a8045dfb44202f7a9629975b813058b3b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:MSQGMAOMPU7F3KTNYBEYP36NSY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Butterfly Effect in Pathology: Exploring Security in Pathology Foundation Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Chen Li, Di Zhang, Dong Wei, Jiashuai Liu, Xian Wu, Yefeng Zheng, Yingjia Shang, Yingkang Zhan, Yi Niu, Zeyu Gao","submitted_at":"2025-05-30T02:23:46Z","abstract_excerpt":"With the widespread adoption of pathology foundation models in both research and clinical decision support systems, exploring their security has become a critical concern. However, despite their growing impact, the vulnerability of these models to adversarial attacks remains largely unexplored. In this work, we present the first systematic investigation into the security of pathology foundation models for whole slide image~(WSI) analysis against adversarial attacks. Specifically, we introduce the principle of \\textit{local perturbation with global impact} and propose a label-free attack framew"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24141","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.24141/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6alVZjOqkC+Y8Vi5S4TnmeO9Rjtr7uFSAJCXcDDF1oB0bbHUbqyZ1efVx2mEDEDIw5l+FRzosxgqNJ7UP3+TBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:59:16.445174Z"},"content_sha256":"faf1f1e86004b63a59c8a0507d4cbdf2e949b48162955824697305d75420395d","schema_version":"1.0","event_id":"sha256:faf1f1e86004b63a59c8a0507d4cbdf2e949b48162955824697305d75420395d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MSQGMAOMPU7F3KTNYBEYP36NSY/bundle.json","state_url":"https://pith.science/pith/MSQGMAOMPU7F3KTNYBEYP36NSY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MSQGMAOMPU7F3KTNYBEYP36NSY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T13:59:16Z","links":{"resolver":"https://pith.science/pith/MSQGMAOMPU7F3KTNYBEYP36NSY","bundle":"https://pith.science/pith/MSQGMAOMPU7F3KTNYBEYP36NSY/bundle.json","state":"https://pith.science/pith/MSQGMAOMPU7F3KTNYBEYP36NSY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MSQGMAOMPU7F3KTNYBEYP36NSY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:MSQGMAOMPU7F3KTNYBEYP36NSY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"850e3df64273c9f735679253caf900f0e753a9cac82353750c46a6d3db8a9d74","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T02:23:46Z","title_canon_sha256":"fe46163884de97868b11e83aa34daf469d0dc63c311f551ac557fb260b4225da"},"schema_version":"1.0","source":{"id":"2505.24141","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.24141","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"arxiv_version","alias_value":"2505.24141v1","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24141","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"pith_short_12","alias_value":"MSQGMAOMPU7F","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"pith_short_16","alias_value":"MSQGMAOMPU7F3KTN","created_at":"2026-07-05T11:12:42Z"},{"alias_kind":"pith_short_8","alias_value":"MSQGMAOM","created_at":"2026-07-05T11:12:42Z"}],"graph_snapshots":[{"event_id":"sha256:faf1f1e86004b63a59c8a0507d4cbdf2e949b48162955824697305d75420395d","target":"graph","created_at":"2026-07-05T11:12:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.24141/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the widespread adoption of pathology foundation models in both research and clinical decision support systems, exploring their security has become a critical concern. However, despite their growing impact, the vulnerability of these models to adversarial attacks remains largely unexplored. In this work, we present the first systematic investigation into the security of pathology foundation models for whole slide image~(WSI) analysis against adversarial attacks. Specifically, we introduce the principle of \\textit{local perturbation with global impact} and propose a label-free attack framew","authors_text":"Chen Li, Di Zhang, Dong Wei, Jiashuai Liu, Xian Wu, Yefeng Zheng, Yingjia Shang, Yingkang Zhan, Yi Niu, Zeyu Gao","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T02:23:46Z","title":"The Butterfly Effect in Pathology: Exploring Security in Pathology Foundation Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24141","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b70660bed625aa7150141190c7dd3a8a8045dfb44202f7a9629975b813058b3b","target":"record","created_at":"2026-07-05T11:12:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"850e3df64273c9f735679253caf900f0e753a9cac82353750c46a6d3db8a9d74","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T02:23:46Z","title_canon_sha256":"fe46163884de97868b11e83aa34daf469d0dc63c311f551ac557fb260b4225da"},"schema_version":"1.0","source":{"id":"2505.24141","kind":"arxiv","version":1}},"canonical_sha256":"64a06601cc7d3e5daa6dc04987efcd961a5a4849147638fa013013edf6af5b90","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"64a06601cc7d3e5daa6dc04987efcd961a5a4849147638fa013013edf6af5b90","first_computed_at":"2026-07-05T11:12:42.688720Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:42.688720Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VeceMqmnbffH0czGFB0PiqYEEz5eXC9sbynh91p/XxR10LHlBye5oRg7J+28cIuQ8FFYn/jFz/+d95d3BOERCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:42.689326Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.24141","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b70660bed625aa7150141190c7dd3a8a8045dfb44202f7a9629975b813058b3b","sha256:faf1f1e86004b63a59c8a0507d4cbdf2e949b48162955824697305d75420395d"],"state_sha256":"886b46aef876314b50f41ec56d225c6301b7340bb0126a041440c0b77b2a078f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P7NkH+5nTLEj2mYRzuNlH8NEBQ57M+MwsQHCSYVDyecGGR6qUQT3SFNMg0SR0BAc6rTybWa1Uqp2Z+YP4QLuBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T13:59:16.450244Z","bundle_sha256":"24c1761ee83d04b151ee7cf64180c7c3d1d4e96572f8f9fb4b1851e0211c8342"}}