{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:RARLQC2OBUQPHA5NLWKJEUDZ3M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3ebd85a6b573c4578a5ad601ab8cc07c99eb80e786e02fd2241000d4bb1a20e6","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-04T06:46:06Z","title_canon_sha256":"680e683ca67791cb2e2c9e40b267a16a22a75bff6e264ae4f7ade06128974699"},"schema_version":"1.0","source":{"id":"2506.03614","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.03614","created_at":"2026-07-05T11:16:36Z"},{"alias_kind":"arxiv_version","alias_value":"2506.03614v1","created_at":"2026-07-05T11:16:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.03614","created_at":"2026-07-05T11:16:36Z"},{"alias_kind":"pith_short_12","alias_value":"RARLQC2OBUQP","created_at":"2026-07-05T11:16:36Z"},{"alias_kind":"pith_short_16","alias_value":"RARLQC2OBUQPHA5N","created_at":"2026-07-05T11:16:36Z"},{"alias_kind":"pith_short_8","alias_value":"RARLQC2O","created_at":"2026-07-05T11:16:36Z"}],"graph_snapshots":[{"event_id":"sha256:065961bcf40d730d92b0b0b996bec5c06fab0026383bfd40bf3c4e5604acf9ce","target":"graph","created_at":"2026-07-05T11:16:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.03614/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"One way to mitigate risks in vision-language models (VLMs) is to remove dangerous samples in their training data. However, such data moderation can be easily bypassed when harmful images are split into small, benign-looking patches, scattered across many training samples. VLMs may then learn to piece these fragments together during training and generate harmful responses at inference, either from full images or text references. For instance, if trained on image patches from a bloody scene paired with the descriptions \"safe,\" VLMs may later describe, the full image or a text reference to the sc","authors_text":"Chaochao Lu, Chao Yang, Lingjie Chen, Zhanhui Zhou","cross_cats":["cs.AI","cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-04T06:46:06Z","title":"VLMs Can Aggregate Scattered Training Patches"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.03614","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:87a2c9ede43d46a0a64b4f389555bc56c96568c5c825ce8d9fa813625df6c6a3","target":"record","created_at":"2026-07-05T11:16:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3ebd85a6b573c4578a5ad601ab8cc07c99eb80e786e02fd2241000d4bb1a20e6","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-04T06:46:06Z","title_canon_sha256":"680e683ca67791cb2e2c9e40b267a16a22a75bff6e264ae4f7ade06128974699"},"schema_version":"1.0","source":{"id":"2506.03614","kind":"arxiv","version":1}},"canonical_sha256":"8822b80b4e0d20f383ad5d94925079db39b20c0fc895001bed589294eba31298","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8822b80b4e0d20f383ad5d94925079db39b20c0fc895001bed589294eba31298","first_computed_at":"2026-07-05T11:16:36.135974Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:16:36.135974Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vVYC+1sktVLdzN9fsZQvnM3BsaEXie6iJ1TvEnLBEabfd7G5an6f5L0wGJGuZ8aD45GDXi5L0CkHMKvIUT8sAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:16:36.136532Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.03614","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:87a2c9ede43d46a0a64b4f389555bc56c96568c5c825ce8d9fa813625df6c6a3","sha256:065961bcf40d730d92b0b0b996bec5c06fab0026383bfd40bf3c4e5604acf9ce"],"state_sha256":"16058b3be159fc84d63b87c1957ebb10ac3b5eb6467fdb212a88c6bc9d6e4316"}