{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:R3YADF7E7SODR757QCEOWKUVFC","short_pith_number":"pith:R3YADF7E","canonical_record":{"source":{"id":"2504.11923","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-16T09:58:04Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"1a2371365aee93eccd87b1d34fafb789d1d8311b65bc17466bfb7386b205d4b9","abstract_canon_sha256":"a6e0a6a50ab9154029e27aa60006293fdec09d55d9d64ede4ff577bb043dc471"},"schema_version":"1.0"},"canonical_sha256":"8ef00197e4fc9c38ffbf8088eb2a9528a81a8e0f5332c4340d7ec8cd9497eaed","source":{"kind":"arxiv","id":"2504.11923","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.11923","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"arxiv_version","alias_value":"2504.11923v1","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.11923","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"pith_short_12","alias_value":"R3YADF7E7SOD","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"pith_short_16","alias_value":"R3YADF7E7SODR757","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"pith_short_8","alias_value":"R3YADF7E","created_at":"2026-07-05T10:49:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:R3YADF7E7SODR757QCEOWKUVFC","target":"record","payload":{"canonical_record":{"source":{"id":"2504.11923","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-16T09:58:04Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"1a2371365aee93eccd87b1d34fafb789d1d8311b65bc17466bfb7386b205d4b9","abstract_canon_sha256":"a6e0a6a50ab9154029e27aa60006293fdec09d55d9d64ede4ff577bb043dc471"},"schema_version":"1.0"},"canonical_sha256":"8ef00197e4fc9c38ffbf8088eb2a9528a81a8e0f5332c4340d7ec8cd9497eaed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:49:59.815443Z","signature_b64":"KVQyXABgoudnmuXqENuXQlP9eHAa3jTDSQIUJOGvrBJsnUKIVS1xB8O4HxiXhpZTpL/EEwgMlPv/yYN20XY0Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8ef00197e4fc9c38ffbf8088eb2a9528a81a8e0f5332c4340d7ec8cd9497eaed","last_reissued_at":"2026-07-05T10:49:59.814945Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:49:59.814945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.11923","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:49:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oS3VKElas4RhjpKrb92nF7EGBw2N2s1MEEGGEh4msU/vxjjuAtD003cqVYueosiBisjmg6JWLIsBcR29GVoRBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:20:54.938101Z"},"content_sha256":"fe7bd1d425cf4acf3a8c6ed3a5fa2369093f22ff7b858ec1b7b6f9530d7f8502","schema_version":"1.0","event_id":"sha256:fe7bd1d425cf4acf3a8c6ed3a5fa2369093f22ff7b858ec1b7b6f9530d7f8502"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:R3YADF7E7SODR757QCEOWKUVFC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SemDiff: Generating Natural Unrestricted Adversarial Examples via Semantic Attributes Optimization in Diffusion Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Jiahao Wu, Ke Tang, Ning Lu, Qing Li, Rui He, Shengcai Liu, Wenqi Fan, Zeyu Dai","submitted_at":"2025-04-16T09:58:04Z","abstract_excerpt":"Unrestricted adversarial examples (UAEs), allow the attacker to create non-constrained adversarial examples without given clean samples, posing a severe threat to the safety of deep learning models. Recent works utilize diffusion models to generate UAEs. However, these UAEs often lack naturalness and imperceptibility due to simply optimizing in intermediate latent noises. In light of this, we propose SemDiff, a novel unrestricted adversarial attack that explores the semantic latent space of diffusion models for meaningful attributes, and devises a multi-attributes optimization approach to ensu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.11923","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.11923/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:49:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Zh7N2FKc37o7Vq9yFAe4Bpk9neU+tWLrNkaYWVhbbs+6BMkVp194M5kEM9EVXWbhramSanhSb9vVgiAmizwmAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:20:54.938496Z"},"content_sha256":"be978f9b8e3cdce7a13ec02c533f446320804847c78e20bef991c2f2073f36b5","schema_version":"1.0","event_id":"sha256:be978f9b8e3cdce7a13ec02c533f446320804847c78e20bef991c2f2073f36b5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R3YADF7E7SODR757QCEOWKUVFC/bundle.json","state_url":"https://pith.science/pith/R3YADF7E7SODR757QCEOWKUVFC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R3YADF7E7SODR757QCEOWKUVFC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T22:20:54Z","links":{"resolver":"https://pith.science/pith/R3YADF7E7SODR757QCEOWKUVFC","bundle":"https://pith.science/pith/R3YADF7E7SODR757QCEOWKUVFC/bundle.json","state":"https://pith.science/pith/R3YADF7E7SODR757QCEOWKUVFC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R3YADF7E7SODR757QCEOWKUVFC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:R3YADF7E7SODR757QCEOWKUVFC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a6e0a6a50ab9154029e27aa60006293fdec09d55d9d64ede4ff577bb043dc471","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-16T09:58:04Z","title_canon_sha256":"1a2371365aee93eccd87b1d34fafb789d1d8311b65bc17466bfb7386b205d4b9"},"schema_version":"1.0","source":{"id":"2504.11923","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.11923","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"arxiv_version","alias_value":"2504.11923v1","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.11923","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"pith_short_12","alias_value":"R3YADF7E7SOD","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"pith_short_16","alias_value":"R3YADF7E7SODR757","created_at":"2026-07-05T10:49:59Z"},{"alias_kind":"pith_short_8","alias_value":"R3YADF7E","created_at":"2026-07-05T10:49:59Z"}],"graph_snapshots":[{"event_id":"sha256:be978f9b8e3cdce7a13ec02c533f446320804847c78e20bef991c2f2073f36b5","target":"graph","created_at":"2026-07-05T10:49:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.11923/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Unrestricted adversarial examples (UAEs), allow the attacker to create non-constrained adversarial examples without given clean samples, posing a severe threat to the safety of deep learning models. Recent works utilize diffusion models to generate UAEs. However, these UAEs often lack naturalness and imperceptibility due to simply optimizing in intermediate latent noises. In light of this, we propose SemDiff, a novel unrestricted adversarial attack that explores the semantic latent space of diffusion models for meaningful attributes, and devises a multi-attributes optimization approach to ensu","authors_text":"Jiahao Wu, Ke Tang, Ning Lu, Qing Li, Rui He, Shengcai Liu, Wenqi Fan, Zeyu Dai","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-16T09:58:04Z","title":"SemDiff: Generating Natural Unrestricted Adversarial Examples via Semantic Attributes Optimization in Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.11923","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fe7bd1d425cf4acf3a8c6ed3a5fa2369093f22ff7b858ec1b7b6f9530d7f8502","target":"record","created_at":"2026-07-05T10:49:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a6e0a6a50ab9154029e27aa60006293fdec09d55d9d64ede4ff577bb043dc471","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-16T09:58:04Z","title_canon_sha256":"1a2371365aee93eccd87b1d34fafb789d1d8311b65bc17466bfb7386b205d4b9"},"schema_version":"1.0","source":{"id":"2504.11923","kind":"arxiv","version":1}},"canonical_sha256":"8ef00197e4fc9c38ffbf8088eb2a9528a81a8e0f5332c4340d7ec8cd9497eaed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8ef00197e4fc9c38ffbf8088eb2a9528a81a8e0f5332c4340d7ec8cd9497eaed","first_computed_at":"2026-07-05T10:49:59.814945Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:49:59.814945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KVQyXABgoudnmuXqENuXQlP9eHAa3jTDSQIUJOGvrBJsnUKIVS1xB8O4HxiXhpZTpL/EEwgMlPv/yYN20XY0Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:49:59.815443Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.11923","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fe7bd1d425cf4acf3a8c6ed3a5fa2369093f22ff7b858ec1b7b6f9530d7f8502","sha256:be978f9b8e3cdce7a13ec02c533f446320804847c78e20bef991c2f2073f36b5"],"state_sha256":"80b022b52a8ca33e844d364806c27cd24e77fa86eb3ca5f07ecf3e3bc227dbf5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Oi9C3q832/tLRAZCqhXoEEtiICIfOKjkY7sYXE3qocb4so8ecsuWzkJMqZY47e3AM8mqkdw7CTvB5yUg9AY1Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T22:20:54.947075Z","bundle_sha256":"2e45b963078ba05557c383f82e2d1755b992eba6122c474a116ec3e1066fb354"}}