{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QC2D3VFEZ6HDCOZVGKRS6Z4NXP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4716d57d579d09a4c9089de068d6a2eef8a73cdde425dbc523df4ae20fc1536c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","title_canon_sha256":"291a492964934396b74c4b2adf058d00f058ee91cc7b6f6521fe301055b9c682"},"schema_version":"1.0","source":{"id":"2506.07399","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07399","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07399v1","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07399","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_12","alias_value":"QC2D3VFEZ6HD","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_16","alias_value":"QC2D3VFEZ6HDCOZV","created_at":"2026-07-05T11:18:26Z"},{"alias_kind":"pith_short_8","alias_value":"QC2D3VFE","created_at":"2026-07-05T11:18:26Z"}],"graph_snapshots":[{"event_id":"sha256:f5230310eb26ee207871a5d861797074c4f9774116381394ba546da26ac83b37","target":"graph","created_at":"2026-07-05T11:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07399/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal retrieval-augmented generation (RAG) systems enhance large vision-language models by integrating cross-modal knowledge, enabling their increasing adoption across real-world multimodal tasks. These knowledge databases may contain sensitive information that requires privacy protection. However, multimodal RAG systems inherently grant external users indirect access to such data, making them potentially vulnerable to privacy attacks, particularly membership inference attacks (MIAs). % Existing MIA methods targeting RAG systems predominantly focus on the textual modality, while the visua","authors_text":"Haoran Zheng, Huili Wang, Jinhua Yin, Peiru Yang, Shangguang Wang, Tao Qi, Xintian Li, Xueying Bai, Yongfeng Huang, Yufei Sun","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07399","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bf38108f21a3997a19eb710b694d4bf2e68a2d89bd5f04e22be665a7fedcfceb","target":"record","created_at":"2026-07-05T11:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4716d57d579d09a4c9089de068d6a2eef8a73cdde425dbc523df4ae20fc1536c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T03:48:50Z","title_canon_sha256":"291a492964934396b74c4b2adf058d00f058ee91cc7b6f6521fe301055b9c682"},"schema_version":"1.0","source":{"id":"2506.07399","kind":"arxiv","version":1}},"canonical_sha256":"80b43dd4a4cf8e313b3532a32f678dbbfb14e256fe305d9d09009aff51c91447","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"80b43dd4a4cf8e313b3532a32f678dbbfb14e256fe305d9d09009aff51c91447","first_computed_at":"2026-07-05T11:18:26.582796Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:18:26.582796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GSgMJ57LxHFFbl5PmzG+77TP+vduzTx5Pg1lKbrgsngmUg9gYNGsWv40KUBUpPeTQuJir7vQ6yQpCtJFf77QBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:18:26.583307Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07399","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bf38108f21a3997a19eb710b694d4bf2e68a2d89bd5f04e22be665a7fedcfceb","sha256:f5230310eb26ee207871a5d861797074c4f9774116381394ba546da26ac83b37"],"state_sha256":"a1bb4fc755c24fd41e262b08455b996a180f4cb52126cdb403f4ef5a90a0fc05"}