{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:PCTQ4F66ANAJWSUKXR6IT2B4BF","short_pith_number":"pith:PCTQ4F66","canonical_record":{"source":{"id":"2306.13103","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T00:43:35Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"81e8a55c4c5af33df62115f41ccac1049065301867e757fdf6230d55b8d6293d","abstract_canon_sha256":"59b29491e0f6b1a2a485b81b5d919ba98d547783d8b4848140f9cb8a97e5a1f4"},"schema_version":"1.0"},"canonical_sha256":"78a70e17de03409b4a8abc7c89e83c096699fdb0ab125f65670017f1f754e6a7","source":{"kind":"arxiv","id":"2306.13103","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.13103","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"arxiv_version","alias_value":"2306.13103v1","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.13103","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_12","alias_value":"PCTQ4F66ANAJ","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_16","alias_value":"PCTQ4F66ANAJWSUK","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_8","alias_value":"PCTQ4F66","created_at":"2026-07-05T06:24:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:PCTQ4F66ANAJWSUKXR6IT2B4BF","target":"record","payload":{"canonical_record":{"source":{"id":"2306.13103","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T00:43:35Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"81e8a55c4c5af33df62115f41ccac1049065301867e757fdf6230d55b8d6293d","abstract_canon_sha256":"59b29491e0f6b1a2a485b81b5d919ba98d547783d8b4848140f9cb8a97e5a1f4"},"schema_version":"1.0"},"canonical_sha256":"78a70e17de03409b4a8abc7c89e83c096699fdb0ab125f65670017f1f754e6a7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:24:01.602004Z","signature_b64":"ur3xSuQoqjKmJMu/p/y/CX1gPphuueVCy8ScX1a/tVc4F4/LK420+YEZ800pZnschkDeEQZw48BtkT86rOkNAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"78a70e17de03409b4a8abc7c89e83c096699fdb0ab125f65670017f1f754e6a7","last_reissued_at":"2026-07-05T06:24:01.601459Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:24:01.601459Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.13103","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:24:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vG/JMKsYRAKCzPtDM3wCupdUa/1usB+9/qzyZe8dg0gPlg9zYze6LKaSyGEFqjxt30lV6kvmQz1kLaGg4u6MDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:17:10.456162Z"},"content_sha256":"1ed459ef89cd8d844890a428c022aa6edc03b7fb14833b0ddeb96a95cc772bd6","schema_version":"1.0","event_id":"sha256:1ed459ef89cd8d844890a428c022aa6edc03b7fb14833b0ddeb96a95cc772bd6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:PCTQ4F66ANAJWSUKXR6IT2B4BF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Hao Zhang, Hongcheng Gao, Yinpeng Dong, Zhijie Deng","submitted_at":"2023-06-16T00:43:35Z","abstract_excerpt":"Text-to-image (T2I) diffusion models (DMs) have shown promise in generating high-quality images from textual descriptions. The real-world applications of these models require particular attention to their safety and fidelity, but this has not been sufficiently explored. One fundamental question is whether existing T2I DMs are robust against variations over input texts. To answer it, this work provides the first robustness evaluation of T2I DMs against real-world attacks. Unlike prior studies that focus on malicious attacks involving apocryphal alterations to the input texts, we consider an att"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.13103","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.13103/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:24:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WXFszpsfDJaW4uK2qq4yFvyAIb1gxSd4I9a4ewQ4hUpmxd01SR8L9pPH1Rterl951PxWbY96eeLqwz4PCoZpCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:17:10.456757Z"},"content_sha256":"590633e17cc4c93e419a86d4eff8100e27bfc355826d95312c91228ed180ee86","schema_version":"1.0","event_id":"sha256:590633e17cc4c93e419a86d4eff8100e27bfc355826d95312c91228ed180ee86"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PCTQ4F66ANAJWSUKXR6IT2B4BF/bundle.json","state_url":"https://pith.science/pith/PCTQ4F66ANAJWSUKXR6IT2B4BF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PCTQ4F66ANAJWSUKXR6IT2B4BF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T00:17:10Z","links":{"resolver":"https://pith.science/pith/PCTQ4F66ANAJWSUKXR6IT2B4BF","bundle":"https://pith.science/pith/PCTQ4F66ANAJWSUKXR6IT2B4BF/bundle.json","state":"https://pith.science/pith/PCTQ4F66ANAJWSUKXR6IT2B4BF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PCTQ4F66ANAJWSUKXR6IT2B4BF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:PCTQ4F66ANAJWSUKXR6IT2B4BF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"59b29491e0f6b1a2a485b81b5d919ba98d547783d8b4848140f9cb8a97e5a1f4","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T00:43:35Z","title_canon_sha256":"81e8a55c4c5af33df62115f41ccac1049065301867e757fdf6230d55b8d6293d"},"schema_version":"1.0","source":{"id":"2306.13103","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.13103","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"arxiv_version","alias_value":"2306.13103v1","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.13103","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_12","alias_value":"PCTQ4F66ANAJ","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_16","alias_value":"PCTQ4F66ANAJWSUK","created_at":"2026-07-05T06:24:01Z"},{"alias_kind":"pith_short_8","alias_value":"PCTQ4F66","created_at":"2026-07-05T06:24:01Z"}],"graph_snapshots":[{"event_id":"sha256:590633e17cc4c93e419a86d4eff8100e27bfc355826d95312c91228ed180ee86","target":"graph","created_at":"2026-07-05T06:24:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.13103/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Text-to-image (T2I) diffusion models (DMs) have shown promise in generating high-quality images from textual descriptions. The real-world applications of these models require particular attention to their safety and fidelity, but this has not been sufficiently explored. One fundamental question is whether existing T2I DMs are robust against variations over input texts. To answer it, this work provides the first robustness evaluation of T2I DMs against real-world attacks. Unlike prior studies that focus on malicious attacks involving apocryphal alterations to the input texts, we consider an att","authors_text":"Hao Zhang, Hongcheng Gao, Yinpeng Dong, Zhijie Deng","cross_cats":["cs.AI","cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T00:43:35Z","title":"Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.13103","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1ed459ef89cd8d844890a428c022aa6edc03b7fb14833b0ddeb96a95cc772bd6","target":"record","created_at":"2026-07-05T06:24:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"59b29491e0f6b1a2a485b81b5d919ba98d547783d8b4848140f9cb8a97e5a1f4","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T00:43:35Z","title_canon_sha256":"81e8a55c4c5af33df62115f41ccac1049065301867e757fdf6230d55b8d6293d"},"schema_version":"1.0","source":{"id":"2306.13103","kind":"arxiv","version":1}},"canonical_sha256":"78a70e17de03409b4a8abc7c89e83c096699fdb0ab125f65670017f1f754e6a7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"78a70e17de03409b4a8abc7c89e83c096699fdb0ab125f65670017f1f754e6a7","first_computed_at":"2026-07-05T06:24:01.601459Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:24:01.601459Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ur3xSuQoqjKmJMu/p/y/CX1gPphuueVCy8ScX1a/tVc4F4/LK420+YEZ800pZnschkDeEQZw48BtkT86rOkNAw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:24:01.602004Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.13103","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1ed459ef89cd8d844890a428c022aa6edc03b7fb14833b0ddeb96a95cc772bd6","sha256:590633e17cc4c93e419a86d4eff8100e27bfc355826d95312c91228ed180ee86"],"state_sha256":"f47ae662a0bbbce1a04b7d1ccab1cae14a4b8db40a32870ddfcaea4d1762ff9a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YFwuHnEqlnbFCrr7VpP23PnIUei4bxOi0uaOR7S7VN+12h/hxXZSMlhYYoT4cAAf3SKC9WUmuHKiQdZs1SdQDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T00:17:10.462012Z","bundle_sha256":"00a21569676bd8f963c67c7717b022863a5b32e424c4e2d43a626d68812566c6"}}