{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QQ2BC7QAK66N6JRLHIDKYDPUF3","short_pith_number":"pith:QQ2BC7QA","canonical_record":{"source":{"id":"2505.23192","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T07:31:17Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"09eb10e727aae8d177162d28b995e4d592b994373a1de81f726bf9a16a6926f1","abstract_canon_sha256":"1f5a562eaa754e6afeebe1d5b4610bfb7247aa0655bf4ed6c712222261819f9a"},"schema_version":"1.0"},"canonical_sha256":"8434117e0057bcdf262b3a06ac0df42eefd6ee5082411e31bb1c9629da48212b","source":{"kind":"arxiv","id":"2505.23192","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23192","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23192v1","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23192","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"pith_short_12","alias_value":"QQ2BC7QAK66N","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"pith_short_16","alias_value":"QQ2BC7QAK66N6JRL","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"pith_short_8","alias_value":"QQ2BC7QA","created_at":"2026-07-05T11:11:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QQ2BC7QAK66N6JRLHIDKYDPUF3","target":"record","payload":{"canonical_record":{"source":{"id":"2505.23192","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T07:31:17Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"09eb10e727aae8d177162d28b995e4d592b994373a1de81f726bf9a16a6926f1","abstract_canon_sha256":"1f5a562eaa754e6afeebe1d5b4610bfb7247aa0655bf4ed6c712222261819f9a"},"schema_version":"1.0"},"canonical_sha256":"8434117e0057bcdf262b3a06ac0df42eefd6ee5082411e31bb1c9629da48212b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:11:57.398763Z","signature_b64":"Ag7kNeERbVWAkubT5pDx2AJ4ArX+LHZbW/sGOWsMdqS24Nsl1EFVobnAABVo4xrATCbKzWjtruc8Vdc94eTbBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8434117e0057bcdf262b3a06ac0df42eefd6ee5082411e31bb1c9629da48212b","last_reissued_at":"2026-07-05T11:11:57.398172Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:11:57.398172Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.23192","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lfj/ACTeM8lqZfZ8Ad09IZZPXYFV+Bg9NHSw8P44PfooySYoCs5V/qTy8FeUZshGlM5XV+O/W6ZeNe2x5MD9Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:00:52.855361Z"},"content_sha256":"25b341c5daa95785d9593e85c5c7897ed4f07928e613f75da0c72b8ff08a4162","schema_version":"1.0","event_id":"sha256:25b341c5daa95785d9593e85c5c7897ed4f07928e613f75da0c72b8ff08a4162"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QQ2BC7QAK66N6JRLHIDKYDPUF3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fooling the Watchers: Breaking AIGC Detectors via Semantic Prompt Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CV","authors_text":"Peng Ying, Run Hao","submitted_at":"2025-05-29T07:31:17Z","abstract_excerpt":"The rise of text-to-image (T2I) models has enabled the synthesis of photorealistic human portraits, raising serious concerns about identity misuse and the robustness of AIGC detectors. In this work, we propose an automated adversarial prompt generation framework that leverages a grammar tree structure and a variant of the Monte Carlo tree search algorithm to systematically explore the semantic prompt space. Our method generates diverse, controllable prompts that consistently evade both open-source and commercial AIGC detectors. Extensive experiments across multiple T2I models validate its effe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23192","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.23192/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8vJ+mijGiGfCeI9pHQ4tU9CWeElX1EaEapyc11sR63qYBJ7O6ChfUcF9FYxPjxPBxPomvzFSn7+OgV6jgv+GDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:00:52.856174Z"},"content_sha256":"055a7baeae90039baa7551b14bff90be612debf15b44681c2c9f9580ed26f139","schema_version":"1.0","event_id":"sha256:055a7baeae90039baa7551b14bff90be612debf15b44681c2c9f9580ed26f139"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QQ2BC7QAK66N6JRLHIDKYDPUF3/bundle.json","state_url":"https://pith.science/pith/QQ2BC7QAK66N6JRLHIDKYDPUF3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QQ2BC7QAK66N6JRLHIDKYDPUF3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T14:00:52Z","links":{"resolver":"https://pith.science/pith/QQ2BC7QAK66N6JRLHIDKYDPUF3","bundle":"https://pith.science/pith/QQ2BC7QAK66N6JRLHIDKYDPUF3/bundle.json","state":"https://pith.science/pith/QQ2BC7QAK66N6JRLHIDKYDPUF3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QQ2BC7QAK66N6JRLHIDKYDPUF3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QQ2BC7QAK66N6JRLHIDKYDPUF3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f5a562eaa754e6afeebe1d5b4610bfb7247aa0655bf4ed6c712222261819f9a","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T07:31:17Z","title_canon_sha256":"09eb10e727aae8d177162d28b995e4d592b994373a1de81f726bf9a16a6926f1"},"schema_version":"1.0","source":{"id":"2505.23192","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23192","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23192v1","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23192","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"pith_short_12","alias_value":"QQ2BC7QAK66N","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"pith_short_16","alias_value":"QQ2BC7QAK66N6JRL","created_at":"2026-07-05T11:11:57Z"},{"alias_kind":"pith_short_8","alias_value":"QQ2BC7QA","created_at":"2026-07-05T11:11:57Z"}],"graph_snapshots":[{"event_id":"sha256:055a7baeae90039baa7551b14bff90be612debf15b44681c2c9f9580ed26f139","target":"graph","created_at":"2026-07-05T11:11:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.23192/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rise of text-to-image (T2I) models has enabled the synthesis of photorealistic human portraits, raising serious concerns about identity misuse and the robustness of AIGC detectors. In this work, we propose an automated adversarial prompt generation framework that leverages a grammar tree structure and a variant of the Monte Carlo tree search algorithm to systematically explore the semantic prompt space. Our method generates diverse, controllable prompts that consistently evade both open-source and commercial AIGC detectors. Extensive experiments across multiple T2I models validate its effe","authors_text":"Peng Ying, Run Hao","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T07:31:17Z","title":"Fooling the Watchers: Breaking AIGC Detectors via Semantic Prompt Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23192","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:25b341c5daa95785d9593e85c5c7897ed4f07928e613f75da0c72b8ff08a4162","target":"record","created_at":"2026-07-05T11:11:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f5a562eaa754e6afeebe1d5b4610bfb7247aa0655bf4ed6c712222261819f9a","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-29T07:31:17Z","title_canon_sha256":"09eb10e727aae8d177162d28b995e4d592b994373a1de81f726bf9a16a6926f1"},"schema_version":"1.0","source":{"id":"2505.23192","kind":"arxiv","version":1}},"canonical_sha256":"8434117e0057bcdf262b3a06ac0df42eefd6ee5082411e31bb1c9629da48212b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8434117e0057bcdf262b3a06ac0df42eefd6ee5082411e31bb1c9629da48212b","first_computed_at":"2026-07-05T11:11:57.398172Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:11:57.398172Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ag7kNeERbVWAkubT5pDx2AJ4ArX+LHZbW/sGOWsMdqS24Nsl1EFVobnAABVo4xrATCbKzWjtruc8Vdc94eTbBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:11:57.398763Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.23192","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:25b341c5daa95785d9593e85c5c7897ed4f07928e613f75da0c72b8ff08a4162","sha256:055a7baeae90039baa7551b14bff90be612debf15b44681c2c9f9580ed26f139"],"state_sha256":"c30bac5a1108a4ba22ee77de34b2c068b80d9314a46fe614da154a560e39f87b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e/FhOTbxrS2XOvjUHEjUWMPUdkMLGSz0E3wBj6+jq5IO16uMyufQOt9w6cAW4k2WsLdJUbkXMcvv+eEEaNR/Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T14:00:52.862295Z","bundle_sha256":"60a26214a8bdfe696caa97bc58975f1d61586eda20356b7f9c3759defa27de91"}}