{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:NZVFCYKL7TKPQCY4HM7ZKQV3PO","short_pith_number":"pith:NZVFCYKL","canonical_record":{"source":{"id":"2505.23313","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T10:17:17Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"65618d62d538b2d29da0372f0d1946470c741513e2090b9ff06dbae3ee15db7f","abstract_canon_sha256":"bc2aff02289ed7c1a860176116346e5a8ad68957e182eef8109eedbf99b3d72e"},"schema_version":"1.0"},"canonical_sha256":"6e6a51614bfcd4f80b1c3b3f9542bb7ba8fed37d807606180e2dd3c7d84367bd","source":{"kind":"arxiv","id":"2505.23313","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23313","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23313v1","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23313","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"pith_short_12","alias_value":"NZVFCYKL7TKP","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"pith_short_16","alias_value":"NZVFCYKL7TKPQCY4","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"pith_short_8","alias_value":"NZVFCYKL","created_at":"2026-07-05T11:11:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:NZVFCYKL7TKPQCY4HM7ZKQV3PO","target":"record","payload":{"canonical_record":{"source":{"id":"2505.23313","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T10:17:17Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"65618d62d538b2d29da0372f0d1946470c741513e2090b9ff06dbae3ee15db7f","abstract_canon_sha256":"bc2aff02289ed7c1a860176116346e5a8ad68957e182eef8109eedbf99b3d72e"},"schema_version":"1.0"},"canonical_sha256":"6e6a51614bfcd4f80b1c3b3f9542bb7ba8fed37d807606180e2dd3c7d84367bd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:11:59.371328Z","signature_b64":"FMLJt6K9EHP7I3cFb1IORLevecywqNQ+/c3WYcrfcNXUMVIARFuTxtcNjHiafBWiPT1HK5nvKvhZ8RJEW/JMCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6e6a51614bfcd4f80b1c3b3f9542bb7ba8fed37d807606180e2dd3c7d84367bd","last_reissued_at":"2026-07-05T11:11:59.370826Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:11:59.370826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.23313","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O0ftdZ1Sq2dIvZO1Xbkt9YNowX2bloKA6Cu7IO77ECVlQEx0vSHN89O71kxjv5wwLhLebXJ7iRqu6/C0L1VqBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:19:05.019681Z"},"content_sha256":"1efdd2e581a04e0641fa22aff568382d6687473340bcfa63348af354a36335ac","schema_version":"1.0","event_id":"sha256:1efdd2e581a04e0641fa22aff568382d6687473340bcfa63348af354a36335ac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:NZVFCYKL7TKPQCY4HM7ZKQV3PO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CV","authors_text":"Chenglong Li, Jin Tang, Ruichong Gao, Weizhe Kong, Xiao Wang, Xing Yang, Yaowei Wang, Yu Zhang","submitted_at":"2025-05-29T10:17:17Z","abstract_excerpt":"Pedestrian Attribute Recognition (PAR) is an indispensable task in human-centered research and has made great progress in recent years with the development of deep neural networks. However, the potential vulnerability and anti-interference ability have still not been fully explored. To bridge this gap, this paper proposes the first adversarial attack and defense framework for pedestrian attribute recognition. Specifically, we exploit both global- and patch-level attacks on the pedestrian images, based on the pre-trained CLIP-based PAR framework. It first divides the input pedestrian image into"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23313","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.23313/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4/nqysktJ3rWIGVsg1GwjAm+o5vqtqCKVCg2vYWLNQckJzOGAWhZ3qfg/pzLZ6kzlZtxpoXWYJQBStZQh1vuDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:19:05.020282Z"},"content_sha256":"cb663269972458c54df92f5b7d84c2a2d21702bb59f4a3728b10d35cbb05c3bf","schema_version":"1.0","event_id":"sha256:cb663269972458c54df92f5b7d84c2a2d21702bb59f4a3728b10d35cbb05c3bf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NZVFCYKL7TKPQCY4HM7ZKQV3PO/bundle.json","state_url":"https://pith.science/pith/NZVFCYKL7TKPQCY4HM7ZKQV3PO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NZVFCYKL7TKPQCY4HM7ZKQV3PO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T09:19:05Z","links":{"resolver":"https://pith.science/pith/NZVFCYKL7TKPQCY4HM7ZKQV3PO","bundle":"https://pith.science/pith/NZVFCYKL7TKPQCY4HM7ZKQV3PO/bundle.json","state":"https://pith.science/pith/NZVFCYKL7TKPQCY4HM7ZKQV3PO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NZVFCYKL7TKPQCY4HM7ZKQV3PO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:NZVFCYKL7TKPQCY4HM7ZKQV3PO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bc2aff02289ed7c1a860176116346e5a8ad68957e182eef8109eedbf99b3d72e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T10:17:17Z","title_canon_sha256":"65618d62d538b2d29da0372f0d1946470c741513e2090b9ff06dbae3ee15db7f"},"schema_version":"1.0","source":{"id":"2505.23313","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23313","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23313v1","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23313","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"pith_short_12","alias_value":"NZVFCYKL7TKP","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"pith_short_16","alias_value":"NZVFCYKL7TKPQCY4","created_at":"2026-07-05T11:11:59Z"},{"alias_kind":"pith_short_8","alias_value":"NZVFCYKL","created_at":"2026-07-05T11:11:59Z"}],"graph_snapshots":[{"event_id":"sha256:cb663269972458c54df92f5b7d84c2a2d21702bb59f4a3728b10d35cbb05c3bf","target":"graph","created_at":"2026-07-05T11:11:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.23313/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Pedestrian Attribute Recognition (PAR) is an indispensable task in human-centered research and has made great progress in recent years with the development of deep neural networks. However, the potential vulnerability and anti-interference ability have still not been fully explored. To bridge this gap, this paper proposes the first adversarial attack and defense framework for pedestrian attribute recognition. Specifically, we exploit both global- and patch-level attacks on the pedestrian images, based on the pre-trained CLIP-based PAR framework. It first divides the input pedestrian image into","authors_text":"Chenglong Li, Jin Tang, Ruichong Gao, Weizhe Kong, Xiao Wang, Xing Yang, Yaowei Wang, Yu Zhang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23313","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1efdd2e581a04e0641fa22aff568382d6687473340bcfa63348af354a36335ac","target":"record","created_at":"2026-07-05T11:11:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bc2aff02289ed7c1a860176116346e5a8ad68957e182eef8109eedbf99b3d72e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T10:17:17Z","title_canon_sha256":"65618d62d538b2d29da0372f0d1946470c741513e2090b9ff06dbae3ee15db7f"},"schema_version":"1.0","source":{"id":"2505.23313","kind":"arxiv","version":1}},"canonical_sha256":"6e6a51614bfcd4f80b1c3b3f9542bb7ba8fed37d807606180e2dd3c7d84367bd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6e6a51614bfcd4f80b1c3b3f9542bb7ba8fed37d807606180e2dd3c7d84367bd","first_computed_at":"2026-07-05T11:11:59.370826Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:11:59.370826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FMLJt6K9EHP7I3cFb1IORLevecywqNQ+/c3WYcrfcNXUMVIARFuTxtcNjHiafBWiPT1HK5nvKvhZ8RJEW/JMCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:11:59.371328Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.23313","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1efdd2e581a04e0641fa22aff568382d6687473340bcfa63348af354a36335ac","sha256:cb663269972458c54df92f5b7d84c2a2d21702bb59f4a3728b10d35cbb05c3bf"],"state_sha256":"0846ae9f9384a196d0f08a4c6d0e5ea54ff340283db5c413b58adca5a769b5e4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bRJP2z83yBDw2UhG8UcDZNAfYngVIZYKLDmp6t+8GPB2vny39VI/rX7SAMi+JrhWWo/vC5+FG8Cq92c+P0MJAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T09:19:05.024294Z","bundle_sha256":"218a3516e55b1576eab6f3913de4c2b0228dc67dc07fbf4ff4affd2ad34327be"}}