{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:PBCXBK5V3IO7I3TCEP4RAKFKEW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"26e18c0b206e60b68349d8eb95ca124f2a5f18c21a20e7edb7f59dc7996f710a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-09T11:19:30Z","title_canon_sha256":"f67e2b506da9e39cc82546ae8fa86ea4d5f6969ba057d5b491c997b430565b68"},"schema_version":"1.0","source":{"id":"2608.08641","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.08641","created_at":"2026-08-11T01:23:15Z"},{"alias_kind":"arxiv_version","alias_value":"2608.08641v1","created_at":"2026-08-11T01:23:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.08641","created_at":"2026-08-11T01:23:15Z"},{"alias_kind":"pith_short_12","alias_value":"PBCXBK5V3IO7","created_at":"2026-08-11T01:23:15Z"},{"alias_kind":"pith_short_16","alias_value":"PBCXBK5V3IO7I3TC","created_at":"2026-08-11T01:23:15Z"},{"alias_kind":"pith_short_8","alias_value":"PBCXBK5V","created_at":"2026-08-11T01:23:15Z"}],"graph_snapshots":[{"event_id":"sha256:49242827bf058498a483b254b800a8dfe1ace22bf0136d4b2884f076b65fc7b5","target":"graph","created_at":"2026-08-11T01:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.08641/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A black-box guardrail is evaluated as though the safety number it earns were its own. It is not. A defended pipeline holds two components that can refuse (the guardrail, and the target model out of its own alignment), and every reported metric is a sum over both. We show that the guardrail's actual share of the safety credited to it runs from none of it to essentially all of it, decided by two variables no evaluation records: which channel carries the payload, and what text the harness places in the defense's internal read.\n  The split is recoverable at no extra cost, because a guard block rep","authors_text":"Haowen Xu, Haoyu Zhang, Mohammad Zandsalimy, Shanu Sushmita, Shibo Zheng, Xiao Luo, Yi Feng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-09T11:19:30Z","title":"Whose Refusal Is It? The Unmeasured Contribution of Black-Box Multimodal Guardrails"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.08641","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c08a71847ba46294e974736e3789fc3f68207ef281ab679b678c958a8d3a97d8","target":"record","created_at":"2026-08-11T01:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"26e18c0b206e60b68349d8eb95ca124f2a5f18c21a20e7edb7f59dc7996f710a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-09T11:19:30Z","title_canon_sha256":"f67e2b506da9e39cc82546ae8fa86ea4d5f6969ba057d5b491c997b430565b68"},"schema_version":"1.0","source":{"id":"2608.08641","kind":"arxiv","version":1}},"canonical_sha256":"784570abb5da1df46e6223f91028aa2596cb6d38d793270a8dfcd6e073c7ebd5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"784570abb5da1df46e6223f91028aa2596cb6d38d793270a8dfcd6e073c7ebd5","first_computed_at":"2026-08-11T01:23:15.368770Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-11T01:23:15.368770Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Lu9CmIuoloZxZE67yOZbMqFVozZa5PBCvU/mRBsheGhquyyTabybpFxyXPRZqjeaG4TBpeg66etT/5WgmSc6AQ==","signature_status":"signed_v1","signed_at":"2026-08-11T01:23:15.371323Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.08641","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c08a71847ba46294e974736e3789fc3f68207ef281ab679b678c958a8d3a97d8","sha256:49242827bf058498a483b254b800a8dfe1ace22bf0136d4b2884f076b65fc7b5"],"state_sha256":"910167332e98879f08e8c4af583f5b8e64cae6400c67ec34608c2921af12c62b"}