{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NV2UZRHEEZRJDHBFYIIIK2DKKU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"85ec4da0fb094989863e1796c95e1695bab538bba78e3922abb382388bee8f9b","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2023-12-07T11:23:29Z","title_canon_sha256":"08aaaecd617c0d52c190bc845db36873e4c151e82a1e6fcb8a9a68107365adf5"},"schema_version":"1.0","source":{"id":"2312.07553","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.07553","created_at":"2026-07-05T08:18:03Z"},{"alias_kind":"arxiv_version","alias_value":"2312.07553v2","created_at":"2026-07-05T08:18:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.07553","created_at":"2026-07-05T08:18:03Z"},{"alias_kind":"pith_short_12","alias_value":"NV2UZRHEEZRJ","created_at":"2026-07-05T08:18:03Z"},{"alias_kind":"pith_short_16","alias_value":"NV2UZRHEEZRJDHBF","created_at":"2026-07-05T08:18:03Z"},{"alias_kind":"pith_short_8","alias_value":"NV2UZRHE","created_at":"2026-07-05T08:18:03Z"}],"graph_snapshots":[{"event_id":"sha256:ab639cb7d04c8f44d37199483956191a353f341999924aaa5f97b7155e79fe04","target":"graph","created_at":"2026-07-05T08:18:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.07553/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, Large Multi-modal Models (LMMs) have demonstrated their ability to understand the visual contents of images given the instructions regarding the images. Built upon the Large Language Models (LLMs), LMMs also inherit their abilities and characteristics such as in-context learning where a coherent sequence of images and texts are given as the input prompt. However, we identify a new limitation of off-the-shelf LMMs where a small fraction of incoherent images or text descriptions mislead LMMs to only generate biased output about the hijacked context, not the originally intended context.","authors_text":"Joonhyun Jeong","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2023-12-07T11:23:29Z","title":"Hijacking Context in Large Multi-modal Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.07553","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c623b1680d51365384cccbaa0f4c9ce19082fe7745eec84249f5e9227dd3232c","target":"record","created_at":"2026-07-05T08:18:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"85ec4da0fb094989863e1796c95e1695bab538bba78e3922abb382388bee8f9b","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2023-12-07T11:23:29Z","title_canon_sha256":"08aaaecd617c0d52c190bc845db36873e4c151e82a1e6fcb8a9a68107365adf5"},"schema_version":"1.0","source":{"id":"2312.07553","kind":"arxiv","version":2}},"canonical_sha256":"6d754cc4e42662919c25c21085686a550c50b97d4252ae87df8893c905d577ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6d754cc4e42662919c25c21085686a550c50b97d4252ae87df8893c905d577ab","first_computed_at":"2026-07-05T08:18:03.087781Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:18:03.087781Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KohaQvLwOKIZmwipeEMaS1FnoK/az4tpHF+112JRsCSFmzcoW1MWwxtrzDMHR2VCk139EmFJ8gdzigUTMjpQAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:18:03.088201Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.07553","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c623b1680d51365384cccbaa0f4c9ce19082fe7745eec84249f5e9227dd3232c","sha256:ab639cb7d04c8f44d37199483956191a353f341999924aaa5f97b7155e79fe04"],"state_sha256":"a2e3115d4de14d17437ea811ef3a364d45e7e137d7e562cf69193d881aef7f6f"}