{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:PAIUGJU2M7KGTJJKD5PJUNTRFY","short_pith_number":"pith:PAIUGJU2","canonical_record":{"source":{"id":"2607.19683","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T02:33:56Z","cross_cats_sorted":[],"title_canon_sha256":"633531877d74c264cf52e9c933ffe4e712fe738e38771562a5a08a575ab28a99","abstract_canon_sha256":"e6910f205ab8c41617fc65553231272db3867ed88e5045e2390ab1d426885b7a"},"schema_version":"1.0"},"canonical_sha256":"781143269a67d469a52a1f5e9a36712e087602c2a00fe5fcc34720f77c94fa20","source":{"kind":"arxiv","id":"2607.19683","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.19683","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"arxiv_version","alias_value":"2607.19683v1","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.19683","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"pith_short_12","alias_value":"PAIUGJU2M7KG","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"pith_short_16","alias_value":"PAIUGJU2M7KGTJJK","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"pith_short_8","alias_value":"PAIUGJU2","created_at":"2026-07-23T00:24:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:PAIUGJU2M7KGTJJKD5PJUNTRFY","target":"record","payload":{"canonical_record":{"source":{"id":"2607.19683","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T02:33:56Z","cross_cats_sorted":[],"title_canon_sha256":"633531877d74c264cf52e9c933ffe4e712fe738e38771562a5a08a575ab28a99","abstract_canon_sha256":"e6910f205ab8c41617fc65553231272db3867ed88e5045e2390ab1d426885b7a"},"schema_version":"1.0"},"canonical_sha256":"781143269a67d469a52a1f5e9a36712e087602c2a00fe5fcc34720f77c94fa20","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-23T00:24:03.607602Z","signature_b64":"iAj+QegpVK/KCCq4sOx1SSzi+yhc62vHLUrks2BXwHqJ6imOKUrayldesdaIk1gJGbv5J/l3J0rb44gvbMcnAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"781143269a67d469a52a1f5e9a36712e087602c2a00fe5fcc34720f77c94fa20","last_reissued_at":"2026-07-23T00:24:03.606702Z","signature_status":"signed_v1","first_computed_at":"2026-07-23T00:24:03.606702Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.19683","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-23T00:24:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fSQjAUO4rYqgDx1gPCzzbAN8GAAFJLGfPlLED2BZCuw9s6Jm7RlC9i96jzCxMtvKbpNsWbPA92Ae5P5eTE1jCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T07:45:51.631279Z"},"content_sha256":"fb630ce90b1bb107ebe29aadf80a872600f6abd96556dd46db3f7e31ddf10e93","schema_version":"1.0","event_id":"sha256:fb630ce90b1bb107ebe29aadf80a872600f6abd96556dd46db3f7e31ddf10e93"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:PAIUGJU2M7KGTJJKD5PJUNTRFY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hangtao Zhang, Li Zeng, Meng Xie, Xianlong Wang, Yanchun Li, Zeyu Ye, Zhetao Li","submitted_at":"2026-07-22T02:33:56Z","abstract_excerpt":"Vision-Language Models (VLMs) are known to be vulnerable to adversarial attacks, where subtle perturbations to images or texts induce erroneous outputs. However, most text-based attacks are adapted from language-model-centric methods, in which the visual input is fixed during optimization, resulting in adversarial prompts that are tied to specific images and thus limiting their attack effectiveness. To this end, we first introduce a new research perspective: cross-image transferability for adversarial prompts. We then propose GhostPrompt, an adversarial prompt that is optimized once and reused"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.19683","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.19683/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-23T00:24:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9gxKrdIlEHeWatrQoPTkmBCpf4up7f+P845i5FHen0r41f+D7h5sqLRaGLatQqwdW2TKGMLGICyJcRdHud5UAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T07:45:51.632302Z"},"content_sha256":"2f09501ff08e96d15c77171fbd1a24789d953db15c3dde23cb209306b1abfb64","schema_version":"1.0","event_id":"sha256:2f09501ff08e96d15c77171fbd1a24789d953db15c3dde23cb209306b1abfb64"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PAIUGJU2M7KGTJJKD5PJUNTRFY/bundle.json","state_url":"https://pith.science/pith/PAIUGJU2M7KGTJJKD5PJUNTRFY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PAIUGJU2M7KGTJJKD5PJUNTRFY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T07:45:51Z","links":{"resolver":"https://pith.science/pith/PAIUGJU2M7KGTJJKD5PJUNTRFY","bundle":"https://pith.science/pith/PAIUGJU2M7KGTJJKD5PJUNTRFY/bundle.json","state":"https://pith.science/pith/PAIUGJU2M7KGTJJKD5PJUNTRFY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PAIUGJU2M7KGTJJKD5PJUNTRFY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:PAIUGJU2M7KGTJJKD5PJUNTRFY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e6910f205ab8c41617fc65553231272db3867ed88e5045e2390ab1d426885b7a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T02:33:56Z","title_canon_sha256":"633531877d74c264cf52e9c933ffe4e712fe738e38771562a5a08a575ab28a99"},"schema_version":"1.0","source":{"id":"2607.19683","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.19683","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"arxiv_version","alias_value":"2607.19683v1","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.19683","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"pith_short_12","alias_value":"PAIUGJU2M7KG","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"pith_short_16","alias_value":"PAIUGJU2M7KGTJJK","created_at":"2026-07-23T00:24:03Z"},{"alias_kind":"pith_short_8","alias_value":"PAIUGJU2","created_at":"2026-07-23T00:24:03Z"}],"graph_snapshots":[{"event_id":"sha256:2f09501ff08e96d15c77171fbd1a24789d953db15c3dde23cb209306b1abfb64","target":"graph","created_at":"2026-07-23T00:24:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.19683/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Language Models (VLMs) are known to be vulnerable to adversarial attacks, where subtle perturbations to images or texts induce erroneous outputs. However, most text-based attacks are adapted from language-model-centric methods, in which the visual input is fixed during optimization, resulting in adversarial prompts that are tied to specific images and thus limiting their attack effectiveness. To this end, we first introduce a new research perspective: cross-image transferability for adversarial prompts. We then propose GhostPrompt, an adversarial prompt that is optimized once and reused","authors_text":"Hangtao Zhang, Li Zeng, Meng Xie, Xianlong Wang, Yanchun Li, Zeyu Ye, Zhetao Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.19683","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fb630ce90b1bb107ebe29aadf80a872600f6abd96556dd46db3f7e31ddf10e93","target":"record","created_at":"2026-07-23T00:24:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e6910f205ab8c41617fc65553231272db3867ed88e5045e2390ab1d426885b7a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-22T02:33:56Z","title_canon_sha256":"633531877d74c264cf52e9c933ffe4e712fe738e38771562a5a08a575ab28a99"},"schema_version":"1.0","source":{"id":"2607.19683","kind":"arxiv","version":1}},"canonical_sha256":"781143269a67d469a52a1f5e9a36712e087602c2a00fe5fcc34720f77c94fa20","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"781143269a67d469a52a1f5e9a36712e087602c2a00fe5fcc34720f77c94fa20","first_computed_at":"2026-07-23T00:24:03.606702Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-23T00:24:03.606702Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iAj+QegpVK/KCCq4sOx1SSzi+yhc62vHLUrks2BXwHqJ6imOKUrayldesdaIk1gJGbv5J/l3J0rb44gvbMcnAQ==","signature_status":"signed_v1","signed_at":"2026-07-23T00:24:03.607602Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.19683","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fb630ce90b1bb107ebe29aadf80a872600f6abd96556dd46db3f7e31ddf10e93","sha256:2f09501ff08e96d15c77171fbd1a24789d953db15c3dde23cb209306b1abfb64"],"state_sha256":"dcf7ad851912fca6feaf2801fb000d43bcff09b37ad9185822cdb7377312ac62"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NfjNMu+Qq+dKN5EpT56I2BYfYpvhTI9lN4kQho4FQDmjAr0C3ru7+uQ12p9m2xPqwlvhrIX2lcXada2jPG5jDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T07:45:51.639522Z","bundle_sha256":"1baddeb4e50b52387bb65cb055660a4344b2340cd3e447c5535cd31f55e9f895"}}