{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Q2URTDVRO5DYHBRRFECEZ3OAMS","short_pith_number":"pith:Q2URTDVR","canonical_record":{"source":{"id":"2405.19360","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-24T07:44:27Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"fe9be9868ec6834c9f07c403bf5d0b724978159e7f96732126584e41100a04e8","abstract_canon_sha256":"99db68cbcb3c015d171aa421445280912e1923979bb74756a15b782f05165048"},"schema_version":"1.0"},"canonical_sha256":"86a9198eb1774783863129044cedc064865dfb34409345b26778ed55e4e8bcbc","source":{"kind":"arxiv","id":"2405.19360","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.19360","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"arxiv_version","alias_value":"2405.19360v3","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.19360","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"pith_short_12","alias_value":"Q2URTDVRO5DY","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"pith_short_16","alias_value":"Q2URTDVRO5DYHBRR","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"pith_short_8","alias_value":"Q2URTDVR","created_at":"2026-07-05T09:19:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Q2URTDVRO5DYHBRRFECEZ3OAMS","target":"record","payload":{"canonical_record":{"source":{"id":"2405.19360","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-24T07:44:27Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"fe9be9868ec6834c9f07c403bf5d0b724978159e7f96732126584e41100a04e8","abstract_canon_sha256":"99db68cbcb3c015d171aa421445280912e1923979bb74756a15b782f05165048"},"schema_version":"1.0"},"canonical_sha256":"86a9198eb1774783863129044cedc064865dfb34409345b26778ed55e4e8bcbc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:19:09.905288Z","signature_b64":"3cfwxa730Zf+Ew6B6mQLZ4nlYHzeYPh7Hp0XlbiD3pAsqpm23LX9pwcr9qhfgRCIGx74TPgTROjsb1S+YeYLDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"86a9198eb1774783863129044cedc064865dfb34409345b26778ed55e4e8bcbc","last_reissued_at":"2026-07-05T09:19:09.904831Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:19:09.904831Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.19360","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VKyk68qjSECs9gAVJ7agTR8wcsuvvt8KnAHmydV3hvASPhZjIQdK2Ee3MgNPbGOVL+Lm8j8vpN0+ySel6U03AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:09:54.950411Z"},"content_sha256":"bee3546b3010884f1a08780e467d27b711debd87a6592333d3b0eec4bed67e18","schema_version":"1.0","event_id":"sha256:bee3546b3010884f1a08780e467d27b711debd87a6592333d3b0eec4bed67e18"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Q2URTDVRO5DYHBRRFECEZ3OAMS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Guanlin Li, Jie Zhang, Kangjie Chen, Shudong Zhang, Tianwei Zhang","submitted_at":"2024-05-24T07:44:27Z","abstract_excerpt":"Large-scale pre-trained generative models are taking the world by storm, due to their abilities in generating creative content. Meanwhile, safeguards for these generative models are developed, to protect users' rights and safety, most of which are designed for large language models. Existing methods primarily focus on jailbreak and adversarial attacks, which mainly evaluate the model's safety under malicious prompts. Recent work found that manually crafted safe prompts can unintentionally trigger unsafe generations. To further systematically evaluate the safety risks of text-to-image models, w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.19360","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.19360/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E5wgZVnHisbaUd/mJbDQuy4cwwrOL0dV4okmvQrPXyqllwrlOcSV6gzryfHFjm/v4QKZxv/tQs4JDZ6BKu68CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:09:54.950970Z"},"content_sha256":"ea2fe268a12634f405135ec3c44f3efad383cb9637dc9e9e294baa6dc0574f7a","schema_version":"1.0","event_id":"sha256:ea2fe268a12634f405135ec3c44f3efad383cb9637dc9e9e294baa6dc0574f7a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q2URTDVRO5DYHBRRFECEZ3OAMS/bundle.json","state_url":"https://pith.science/pith/Q2URTDVRO5DYHBRRFECEZ3OAMS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q2URTDVRO5DYHBRRFECEZ3OAMS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T20:09:54Z","links":{"resolver":"https://pith.science/pith/Q2URTDVRO5DYHBRRFECEZ3OAMS","bundle":"https://pith.science/pith/Q2URTDVRO5DYHBRRFECEZ3OAMS/bundle.json","state":"https://pith.science/pith/Q2URTDVRO5DYHBRRFECEZ3OAMS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q2URTDVRO5DYHBRRFECEZ3OAMS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Q2URTDVRO5DYHBRRFECEZ3OAMS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"99db68cbcb3c015d171aa421445280912e1923979bb74756a15b782f05165048","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-24T07:44:27Z","title_canon_sha256":"fe9be9868ec6834c9f07c403bf5d0b724978159e7f96732126584e41100a04e8"},"schema_version":"1.0","source":{"id":"2405.19360","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.19360","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"arxiv_version","alias_value":"2405.19360v3","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.19360","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"pith_short_12","alias_value":"Q2URTDVRO5DY","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"pith_short_16","alias_value":"Q2URTDVRO5DYHBRR","created_at":"2026-07-05T09:19:09Z"},{"alias_kind":"pith_short_8","alias_value":"Q2URTDVR","created_at":"2026-07-05T09:19:09Z"}],"graph_snapshots":[{"event_id":"sha256:ea2fe268a12634f405135ec3c44f3efad383cb9637dc9e9e294baa6dc0574f7a","target":"graph","created_at":"2026-07-05T09:19:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.19360/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large-scale pre-trained generative models are taking the world by storm, due to their abilities in generating creative content. Meanwhile, safeguards for these generative models are developed, to protect users' rights and safety, most of which are designed for large language models. Existing methods primarily focus on jailbreak and adversarial attacks, which mainly evaluate the model's safety under malicious prompts. Recent work found that manually crafted safe prompts can unintentionally trigger unsafe generations. To further systematically evaluate the safety risks of text-to-image models, w","authors_text":"Guanlin Li, Jie Zhang, Kangjie Chen, Shudong Zhang, Tianwei Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-24T07:44:27Z","title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.19360","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bee3546b3010884f1a08780e467d27b711debd87a6592333d3b0eec4bed67e18","target":"record","created_at":"2026-07-05T09:19:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"99db68cbcb3c015d171aa421445280912e1923979bb74756a15b782f05165048","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-24T07:44:27Z","title_canon_sha256":"fe9be9868ec6834c9f07c403bf5d0b724978159e7f96732126584e41100a04e8"},"schema_version":"1.0","source":{"id":"2405.19360","kind":"arxiv","version":3}},"canonical_sha256":"86a9198eb1774783863129044cedc064865dfb34409345b26778ed55e4e8bcbc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"86a9198eb1774783863129044cedc064865dfb34409345b26778ed55e4e8bcbc","first_computed_at":"2026-07-05T09:19:09.904831Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:19:09.904831Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3cfwxa730Zf+Ew6B6mQLZ4nlYHzeYPh7Hp0XlbiD3pAsqpm23LX9pwcr9qhfgRCIGx74TPgTROjsb1S+YeYLDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:19:09.905288Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.19360","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bee3546b3010884f1a08780e467d27b711debd87a6592333d3b0eec4bed67e18","sha256:ea2fe268a12634f405135ec3c44f3efad383cb9637dc9e9e294baa6dc0574f7a"],"state_sha256":"0f84b4e06e805ea92259c4b45f469a82664713767335741d6238576d57df55e5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MBtpWjZsTe+EuWwY14xw2jVbyhG2CRnuSN6WUIE7Gdol0rjLtu8bGiJiJTc+VXl7pEdrY0AAbQn42MbHbboqAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T20:09:54.955683Z","bundle_sha256":"a6176978f6e23ca6e49b845da00dcb4e2a27e7974cc92eb162a9eb0ab906a0f8"}}