{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:PHB7EHB3ZIQSGYAA4DTXAU2NRF","short_pith_number":"pith:PHB7EHB3","canonical_record":{"source":{"id":"2607.24897","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:41:36Z","cross_cats_sorted":[],"title_canon_sha256":"33485c08aa8a1b5dc7cff78af9612fab59f38b6dfafe861065fdbdbb21c28669","abstract_canon_sha256":"ad10bce1d81129016fcf54d572e0b73951e6dab5000f8cff8d0f4951eccf6e51"},"schema_version":"1.0"},"canonical_sha256":"79c3f21c3bca21236000e0e770534d897476b11575e5128ecd6c0cc93eada229","source":{"kind":"arxiv","id":"2607.24897","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.24897","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"arxiv_version","alias_value":"2607.24897v1","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.24897","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_12","alias_value":"PHB7EHB3ZIQS","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_16","alias_value":"PHB7EHB3ZIQSGYAA","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_8","alias_value":"PHB7EHB3","created_at":"2026-07-29T00:24:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:PHB7EHB3ZIQSGYAA4DTXAU2NRF","target":"record","payload":{"canonical_record":{"source":{"id":"2607.24897","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:41:36Z","cross_cats_sorted":[],"title_canon_sha256":"33485c08aa8a1b5dc7cff78af9612fab59f38b6dfafe861065fdbdbb21c28669","abstract_canon_sha256":"ad10bce1d81129016fcf54d572e0b73951e6dab5000f8cff8d0f4951eccf6e51"},"schema_version":"1.0"},"canonical_sha256":"79c3f21c3bca21236000e0e770534d897476b11575e5128ecd6c0cc93eada229","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-29T00:24:50.466217Z","signature_b64":"ZNZvPHUQlrInYHy/rbBN11g5MC5KpqlHIMpKlpOtHdCQH8w3iR8y+XaCgVns5xcazflwnx84GBr71cHPrVALDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"79c3f21c3bca21236000e0e770534d897476b11575e5128ecd6c0cc93eada229","last_reissued_at":"2026-07-29T00:24:50.465349Z","signature_status":"signed_v1","first_computed_at":"2026-07-29T00:24:50.465349Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.24897","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-29T00:24:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dcatcc8pR7wCF9tyEs9S4LdQLQl2Us1DsHOjkpWgG577RZIlie2UwWYEFzaJ1xezUAKucdT4EXKnfftWOKLxAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T23:39:19.138775Z"},"content_sha256":"65599ea53380d6585dc3129cce37de65da03bfeeb54620f32a5c610109cd7992","schema_version":"1.0","event_id":"sha256:65599ea53380d6585dc3129cce37de65da03bfeeb54620f32a5c610109cd7992"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:PHB7EHB3ZIQSGYAA4DTXAU2NRF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hangtao Zhang, Li Zeng, Meng Xie, Pengpeng Qiao, Xianlong Wang, Zhetao Li, Ziqi Zhou","submitted_at":"2026-07-27T16:41:36Z","abstract_excerpt":"Recent commercial image-generation models can generate high-quality images with readable text (e.g., posters, infographics, and manuals), attracting considerable attention. Yet we first show that this same capability also introduces a previously unreported safety vulnerability: these systems may refuse to generate harmful text directly, yet permit the same content when rendered as text within generated images, i.e., safety alignment does not reliably transfer from textual outputs to text embedded in images. In this paper, unlike existing visual jailbreaks against image-generation models, which"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.24897","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.24897/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-29T00:24:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"40nniyD6NpQjFlkUPvsujTCJeugaXJz/BzxLyV0BgcfxgVr52vLlYvkDsDgUUfqSIyWPJAEzGn2XqqnNM0rWCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T23:39:19.139293Z"},"content_sha256":"2cb7a1e91509a41d1ba04d441f2703ab894665aa2630805bbd0e8bf4487a1f78","schema_version":"1.0","event_id":"sha256:2cb7a1e91509a41d1ba04d441f2703ab894665aa2630805bbd0e8bf4487a1f78"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PHB7EHB3ZIQSGYAA4DTXAU2NRF/bundle.json","state_url":"https://pith.science/pith/PHB7EHB3ZIQSGYAA4DTXAU2NRF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PHB7EHB3ZIQSGYAA4DTXAU2NRF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T23:39:19Z","links":{"resolver":"https://pith.science/pith/PHB7EHB3ZIQSGYAA4DTXAU2NRF","bundle":"https://pith.science/pith/PHB7EHB3ZIQSGYAA4DTXAU2NRF/bundle.json","state":"https://pith.science/pith/PHB7EHB3ZIQSGYAA4DTXAU2NRF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PHB7EHB3ZIQSGYAA4DTXAU2NRF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:PHB7EHB3ZIQSGYAA4DTXAU2NRF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad10bce1d81129016fcf54d572e0b73951e6dab5000f8cff8d0f4951eccf6e51","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:41:36Z","title_canon_sha256":"33485c08aa8a1b5dc7cff78af9612fab59f38b6dfafe861065fdbdbb21c28669"},"schema_version":"1.0","source":{"id":"2607.24897","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.24897","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"arxiv_version","alias_value":"2607.24897v1","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.24897","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_12","alias_value":"PHB7EHB3ZIQS","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_16","alias_value":"PHB7EHB3ZIQSGYAA","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_8","alias_value":"PHB7EHB3","created_at":"2026-07-29T00:24:50Z"}],"graph_snapshots":[{"event_id":"sha256:2cb7a1e91509a41d1ba04d441f2703ab894665aa2630805bbd0e8bf4487a1f78","target":"graph","created_at":"2026-07-29T00:24:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.24897/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent commercial image-generation models can generate high-quality images with readable text (e.g., posters, infographics, and manuals), attracting considerable attention. Yet we first show that this same capability also introduces a previously unreported safety vulnerability: these systems may refuse to generate harmful text directly, yet permit the same content when rendered as text within generated images, i.e., safety alignment does not reliably transfer from textual outputs to text embedded in images. In this paper, unlike existing visual jailbreaks against image-generation models, which","authors_text":"Hangtao Zhang, Li Zeng, Meng Xie, Pengpeng Qiao, Xianlong Wang, Zhetao Li, Ziqi Zhou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.24897","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:65599ea53380d6585dc3129cce37de65da03bfeeb54620f32a5c610109cd7992","target":"record","created_at":"2026-07-29T00:24:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad10bce1d81129016fcf54d572e0b73951e6dab5000f8cff8d0f4951eccf6e51","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T16:41:36Z","title_canon_sha256":"33485c08aa8a1b5dc7cff78af9612fab59f38b6dfafe861065fdbdbb21c28669"},"schema_version":"1.0","source":{"id":"2607.24897","kind":"arxiv","version":1}},"canonical_sha256":"79c3f21c3bca21236000e0e770534d897476b11575e5128ecd6c0cc93eada229","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"79c3f21c3bca21236000e0e770534d897476b11575e5128ecd6c0cc93eada229","first_computed_at":"2026-07-29T00:24:50.465349Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-29T00:24:50.465349Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZNZvPHUQlrInYHy/rbBN11g5MC5KpqlHIMpKlpOtHdCQH8w3iR8y+XaCgVns5xcazflwnx84GBr71cHPrVALDg==","signature_status":"signed_v1","signed_at":"2026-07-29T00:24:50.466217Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.24897","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:65599ea53380d6585dc3129cce37de65da03bfeeb54620f32a5c610109cd7992","sha256:2cb7a1e91509a41d1ba04d441f2703ab894665aa2630805bbd0e8bf4487a1f78"],"state_sha256":"cd3541399bbac9c39099def11e0e3db5183053d9f6f146522c699d77a7b69836"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XjqsRJt4TSiQz74iyx+m4CJsLs2xHqVnrjTwwvvlmyXu3i9gn4tz7sCOdXg5eCjZPxe6ZUq/agR2FRXMn/1eBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T23:39:19.142882Z","bundle_sha256":"21af5e9faf197dad13b9b280925a411d43d7528ae1ee3c6ae25d65894ce48b1d"}}