{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QC2D3VFEZ6HDCOZVGKRS6Z4NXP","short_pith_number":"pith:QC2D3VFE","canonical_record":{"source":{"id":"2506.07399","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"291a492964934396b74c4b2adf058d00f058ee91cc7b6f6521fe301055b9c682","abstract_canon_sha256":"4716d57d579d09a4c9089de068d6a2eef8a73cdde425dbc523df4ae20fc1536c"},"schema_version":"1.0"},"canonical_sha256":"80b43dd4a4cf8e313b3532a32f678dbbfb14e256fe305d9d09009aff51c91447","source":{"kind":"arxiv","id":"2506.07399","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07399","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07399v1","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07399","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_12","alias_value":"QC2D3VFEZ6HD","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_16","alias_value":"QC2D3VFEZ6HDCOZV","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_8","alias_value":"QC2D3VFE","created_at":"2026-07-05T11:18:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QC2D3VFEZ6HDCOZVGKRS6Z4NXP","target":"record","payload":{"canonical_record":{"source":{"id":"2506.07399","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"291a492964934396b74c4b2adf058d00f058ee91cc7b6f6521fe301055b9c682","abstract_canon_sha256":"4716d57d579d09a4c9089de068d6a2eef8a73cdde425dbc523df4ae20fc1536c"},"schema_version":"1.0"},"canonical_sha256":"80b43dd4a4cf8e313b3532a32f678dbbfb14e256fe305d9d09009aff51c91447","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:18:26.583307Z","signature_b64":"GSgMJ57LxHFFbl5PmzG+77TP+vduzTx5Pg1lKbrgsngmUg9gYNGsWv40KUBUpPeTQuJir7vQ6yQpCtJFf77QBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"80b43dd4a4cf8e313b3532a32f678dbbfb14e256fe305d9d09009aff51c91447","last_reissued_at":"2026-07-05T11:18:26.582796Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:18:26.582796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.07399","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/MV5TQSIKK6KRtP9EWRVeCdl+KTRxwFReRXHgGcufHKaJV6qGUC9PHF7xRAxvisCr3r2zXBgRluWHiNjULkADw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:36:46.496594Z"},"content_sha256":"bf38108f21a3997a19eb710b694d4bf2e68a2d89bd5f04e22be665a7fedcfceb","schema_version":"1.0","event_id":"sha256:bf38108f21a3997a19eb710b694d4bf2e68a2d89bd5f04e22be665a7fedcfceb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QC2D3VFEZ6HDCOZVGKRS6Z4NXP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Haoran Zheng, Huili Wang, Jinhua Yin, Peiru Yang, Shangguang Wang, Tao Qi, Xintian Li, Xueying Bai, Yongfeng Huang, Yufei Sun","submitted_at":"2025-06-09T03:48:50Z","abstract_excerpt":"Multimodal retrieval-augmented generation (RAG) systems enhance large vision-language models by integrating cross-modal knowledge, enabling their increasing adoption across real-world multimodal tasks. These knowledge databases may contain sensitive information that requires privacy protection. However, multimodal RAG systems inherently grant external users indirect access to such data, making them potentially vulnerable to privacy attacks, particularly membership inference attacks (MIAs). % Existing MIA methods targeting RAG systems predominantly focus on the textual modality, while the visua"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07399","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.07399/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"whoF+/+B51//WgCQ4wH/AnfIMRdOSHPujMEHOKm6N/l/wKBZbnVMM8+yzFu5WQ/4VQPci4udsVpyulfYcgnWDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:36:46.497255Z"},"content_sha256":"f5230310eb26ee207871a5d861797074c4f9774116381394ba546da26ac83b37","schema_version":"1.0","event_id":"sha256:f5230310eb26ee207871a5d861797074c4f9774116381394ba546da26ac83b37"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QC2D3VFEZ6HDCOZVGKRS6Z4NXP/bundle.json","state_url":"https://pith.science/pith/QC2D3VFEZ6HDCOZVGKRS6Z4NXP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QC2D3VFEZ6HDCOZVGKRS6Z4NXP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:36:46Z","links":{"resolver":"https://pith.science/pith/QC2D3VFEZ6HDCOZVGKRS6Z4NXP","bundle":"https://pith.science/pith/QC2D3VFEZ6HDCOZVGKRS6Z4NXP/bundle.json","state":"https://pith.science/pith/QC2D3VFEZ6HDCOZVGKRS6Z4NXP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QC2D3VFEZ6HDCOZVGKRS6Z4NXP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QC2D3VFEZ6HDCOZVGKRS6Z4NXP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4716d57d579d09a4c9089de068d6a2eef8a73cdde425dbc523df4ae20fc1536c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","title_canon_sha256":"291a492964934396b74c4b2adf058d00f058ee91cc7b6f6521fe301055b9c682"},"schema_version":"1.0","source":{"id":"2506.07399","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07399","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07399v1","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07399","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_12","alias_value":"QC2D3VFEZ6HD","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_16","alias_value":"QC2D3VFEZ6HDCOZV","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_8","alias_value":"QC2D3VFE","created_at":"2026-07-05T11:18:26Z"}],"graph_snapshots":[{"event_id":"sha256:f5230310eb26ee207871a5d861797074c4f9774116381394ba546da26ac83b37","target":"graph","created_at":"2026-07-05T11:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07399/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal retrieval-augmented generation (RAG) systems enhance large vision-language models by integrating cross-modal knowledge, enabling their increasing adoption across real-world multimodal tasks. These knowledge databases may contain sensitive information that requires privacy protection. However, multimodal RAG systems inherently grant external users indirect access to such data, making them potentially vulnerable to privacy attacks, particularly membership inference attacks (MIAs). % Existing MIA methods targeting RAG systems predominantly focus on the textual modality, while the visua","authors_text":"Haoran Zheng, Huili Wang, Jinhua Yin, Peiru Yang, Shangguang Wang, Tao Qi, Xintian Li, Xueying Bai, Yongfeng Huang, Yufei Sun","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07399","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bf38108f21a3997a19eb710b694d4bf2e68a2d89bd5f04e22be665a7fedcfceb","target":"record","created_at":"2026-07-05T11:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4716d57d579d09a4c9089de068d6a2eef8a73cdde425dbc523df4ae20fc1536c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","title_canon_sha256":"291a492964934396b74c4b2adf058d00f058ee91cc7b6f6521fe301055b9c682"},"schema_version":"1.0","source":{"id":"2506.07399","kind":"arxiv","version":1}},"canonical_sha256":"80b43dd4a4cf8e313b3532a32f678dbbfb14e256fe305d9d09009aff51c91447","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"80b43dd4a4cf8e313b3532a32f678dbbfb14e256fe305d9d09009aff51c91447","first_computed_at":"2026-07-05T11:18:26.582796Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:18:26.582796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GSgMJ57LxHFFbl5PmzG+77TP+vduzTx5Pg1lKbrgsngmUg9gYNGsWv40KUBUpPeTQuJir7vQ6yQpCtJFf77QBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:18:26.583307Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07399","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bf38108f21a3997a19eb710b694d4bf2e68a2d89bd5f04e22be665a7fedcfceb","sha256:f5230310eb26ee207871a5d861797074c4f9774116381394ba546da26ac83b37"],"state_sha256":"a1bb4fc755c24fd41e262b08455b996a180f4cb52126cdb403f4ef5a90a0fc05"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XrhocyFGWyNtnUdi+oSHB1YAI34VDc9uuecYiI3+WosVsRY8Az9R1MY56aU0E8C8RENEu/vOYWrerNb19D+sDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:36:46.504195Z","bundle_sha256":"9ebed68d18706d7b64be7eaa90c4a0639fa4f7fd621c1041ce624d9ef098db03"}}