{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QS5KHM5LJHKUIJHA325GGBFWLT","short_pith_number":"pith:QS5KHM5L","canonical_record":{"source":{"id":"2505.19139","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-25T13:22:10Z","cross_cats_sorted":[],"title_canon_sha256":"61bd54a9c4348259fe1cf4e26f994093cc6d1fc32f3ddd8f10147bb03cc0fc8b","abstract_canon_sha256":"4a8cf5cb1558eb26fafd85e2973cb1f32438a0185a4805cd7d0e17f3d9240583"},"schema_version":"1.0"},"canonical_sha256":"84baa3b3ab49d54424e0deba6304b65cc4fde0e06f3bbbba83a0a322059d43c5","source":{"kind":"arxiv","id":"2505.19139","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19139","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19139v1","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19139","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"pith_short_12","alias_value":"QS5KHM5LJHKU","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"pith_short_16","alias_value":"QS5KHM5LJHKUIJHA","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"pith_short_8","alias_value":"QS5KHM5L","created_at":"2026-07-05T11:09:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QS5KHM5LJHKUIJHA325GGBFWLT","target":"record","payload":{"canonical_record":{"source":{"id":"2505.19139","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-25T13:22:10Z","cross_cats_sorted":[],"title_canon_sha256":"61bd54a9c4348259fe1cf4e26f994093cc6d1fc32f3ddd8f10147bb03cc0fc8b","abstract_canon_sha256":"4a8cf5cb1558eb26fafd85e2973cb1f32438a0185a4805cd7d0e17f3d9240583"},"schema_version":"1.0"},"canonical_sha256":"84baa3b3ab49d54424e0deba6304b65cc4fde0e06f3bbbba83a0a322059d43c5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:25.578032Z","signature_b64":"QdjbG3DkqJ+d+Z5zWnQ8lXRmtIAq/gCnCuZGRrvPYdssH/ATYoCyw6r3L0JsPlIpHmsu+PrrnPGISP4iKbu3Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"84baa3b3ab49d54424e0deba6304b65cc4fde0e06f3bbbba83a0a322059d43c5","last_reissued_at":"2026-07-05T11:09:25.577404Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:25.577404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.19139","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SaBe4M4JDUILX7W7g8JLVvmTtHBouKJ9p+5kqGIDEmmP77lE6lR3C9Yy21u0z0dw2SHTtfUn9RUrELcpJ7cqAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:19:40.757187Z"},"content_sha256":"2dd66882c7d3986ef234bf13bc0bf3c8fa8fcca83c5ebfec3b595ce23310e752","schema_version":"1.0","event_id":"sha256:2dd66882c7d3986ef234bf13bc0bf3c8fa8fcca83c5ebfec3b595ce23310e752"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QS5KHM5LJHKUIJHA325GGBFWLT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Eye of Sherlock Holmes: Uncovering User Private Attribute Profiling via Vision-Language Model Agentic Framework","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Feiran Liu, Lixu Wang, Qingsong Wen, Ranjie Duan, Simeng Qin, Wei Dong, Xiaojun Jia, Xinfeng Li, Xinyi Huang, Yinan Peng, Yutong Shen, Yuzhe Zhang","submitted_at":"2025-05-25T13:22:10Z","abstract_excerpt":"Our research reveals a new privacy risk associated with the vision-language model (VLM) agentic framework: the ability to infer sensitive attributes (e.g., age and health information) and even abstract ones (e.g., personality and social traits) from a set of personal images, which we term \"image private attribute profiling.\" This threat is particularly severe given that modern apps can easily access users' photo albums, and inference from image sets enables models to exploit inter-image relations for more sophisticated profiling. However, two main challenges hinder our understanding of how wel"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19139","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.19139/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EnxjGxGMdsrf4KEGhUB863M7Gi1yZ0B3rZUIoM8a3KvYL/BTD85bUrSQfMBciY5oYkF1Q6S4qsoDFO0ecG3pDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:19:40.758090Z"},"content_sha256":"2cd5ba4bf5019c567d37e1532ad7acd115de8c70de8afd536fe425d6ced8d21e","schema_version":"1.0","event_id":"sha256:2cd5ba4bf5019c567d37e1532ad7acd115de8c70de8afd536fe425d6ced8d21e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QS5KHM5LJHKUIJHA325GGBFWLT/bundle.json","state_url":"https://pith.science/pith/QS5KHM5LJHKUIJHA325GGBFWLT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QS5KHM5LJHKUIJHA325GGBFWLT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T23:19:40Z","links":{"resolver":"https://pith.science/pith/QS5KHM5LJHKUIJHA325GGBFWLT","bundle":"https://pith.science/pith/QS5KHM5LJHKUIJHA325GGBFWLT/bundle.json","state":"https://pith.science/pith/QS5KHM5LJHKUIJHA325GGBFWLT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QS5KHM5LJHKUIJHA325GGBFWLT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QS5KHM5LJHKUIJHA325GGBFWLT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4a8cf5cb1558eb26fafd85e2973cb1f32438a0185a4805cd7d0e17f3d9240583","cross_cats_sorted":[],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-25T13:22:10Z","title_canon_sha256":"61bd54a9c4348259fe1cf4e26f994093cc6d1fc32f3ddd8f10147bb03cc0fc8b"},"schema_version":"1.0","source":{"id":"2505.19139","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19139","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19139v1","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19139","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"pith_short_12","alias_value":"QS5KHM5LJHKU","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"pith_short_16","alias_value":"QS5KHM5LJHKUIJHA","created_at":"2026-07-05T11:09:25Z"},{"alias_kind":"pith_short_8","alias_value":"QS5KHM5L","created_at":"2026-07-05T11:09:25Z"}],"graph_snapshots":[{"event_id":"sha256:2cd5ba4bf5019c567d37e1532ad7acd115de8c70de8afd536fe425d6ced8d21e","target":"graph","created_at":"2026-07-05T11:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.19139/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Our research reveals a new privacy risk associated with the vision-language model (VLM) agentic framework: the ability to infer sensitive attributes (e.g., age and health information) and even abstract ones (e.g., personality and social traits) from a set of personal images, which we term \"image private attribute profiling.\" This threat is particularly severe given that modern apps can easily access users' photo albums, and inference from image sets enables models to exploit inter-image relations for more sophisticated profiling. However, two main challenges hinder our understanding of how wel","authors_text":"Feiran Liu, Lixu Wang, Qingsong Wen, Ranjie Duan, Simeng Qin, Wei Dong, Xiaojun Jia, Xinfeng Li, Xinyi Huang, Yinan Peng, Yutong Shen, Yuzhe Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-25T13:22:10Z","title":"The Eye of Sherlock Holmes: Uncovering User Private Attribute Profiling via Vision-Language Model Agentic Framework"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19139","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2dd66882c7d3986ef234bf13bc0bf3c8fa8fcca83c5ebfec3b595ce23310e752","target":"record","created_at":"2026-07-05T11:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4a8cf5cb1558eb26fafd85e2973cb1f32438a0185a4805cd7d0e17f3d9240583","cross_cats_sorted":[],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-25T13:22:10Z","title_canon_sha256":"61bd54a9c4348259fe1cf4e26f994093cc6d1fc32f3ddd8f10147bb03cc0fc8b"},"schema_version":"1.0","source":{"id":"2505.19139","kind":"arxiv","version":1}},"canonical_sha256":"84baa3b3ab49d54424e0deba6304b65cc4fde0e06f3bbbba83a0a322059d43c5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"84baa3b3ab49d54424e0deba6304b65cc4fde0e06f3bbbba83a0a322059d43c5","first_computed_at":"2026-07-05T11:09:25.577404Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:25.577404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QdjbG3DkqJ+d+Z5zWnQ8lXRmtIAq/gCnCuZGRrvPYdssH/ATYoCyw6r3L0JsPlIpHmsu+PrrnPGISP4iKbu3Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:25.578032Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.19139","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2dd66882c7d3986ef234bf13bc0bf3c8fa8fcca83c5ebfec3b595ce23310e752","sha256:2cd5ba4bf5019c567d37e1532ad7acd115de8c70de8afd536fe425d6ced8d21e"],"state_sha256":"bf13001ac46e29f12c970ae77d618d24e2764b547d899e280614924d5b859695"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eGoT2ddTcMKIGEXg7HlxgbwGUBLiwGb+oq9si37U8e57KqQoLdftlu6zA797zJa+nB3IUFU/HlIdtUi+HvDiBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T23:19:40.761581Z","bundle_sha256":"0d74fb581bf63fcceeb60130592ca126f798f1dbc0d85358a6c4feb045127b90"}}