{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:RDT5WKCTPUQ2JYPC5BVY7X2PNW","short_pith_number":"pith:RDT5WKCT","canonical_record":{"source":{"id":"2608.03740","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T14:34:41Z","cross_cats_sorted":[],"title_canon_sha256":"bc31446a854b4fd6f538cca85f476ae64ab9f24fa9513a680ab6148944381d24","abstract_canon_sha256":"053ecce1edcc0ec29abe9337c44bcd0b031f012ad406831a176e2551773f5fb2"},"schema_version":"1.0"},"canonical_sha256":"88e7db28537d21a4e1e2e86b8fdf4f6dab81dee0d6d2a7ffce2b59fe42f015f6","source":{"kind":"arxiv","id":"2608.03740","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03740","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03740v1","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03740","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"pith_short_12","alias_value":"RDT5WKCTPUQ2","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"pith_short_16","alias_value":"RDT5WKCTPUQ2JYPC","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"pith_short_8","alias_value":"RDT5WKCT","created_at":"2026-08-05T01:36:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:RDT5WKCTPUQ2JYPC5BVY7X2PNW","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03740","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T14:34:41Z","cross_cats_sorted":[],"title_canon_sha256":"bc31446a854b4fd6f538cca85f476ae64ab9f24fa9513a680ab6148944381d24","abstract_canon_sha256":"053ecce1edcc0ec29abe9337c44bcd0b031f012ad406831a176e2551773f5fb2"},"schema_version":"1.0"},"canonical_sha256":"88e7db28537d21a4e1e2e86b8fdf4f6dab81dee0d6d2a7ffce2b59fe42f015f6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T01:36:59.792396Z","signature_b64":"BYVkbe45W6Wwt8Fj8CkZNZQDiVd/CLt1xjBKedZM61GvupEbDL/NHqJSrKrss0iBCGIQRtHx2lwiC64rDEtdBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"88e7db28537d21a4e1e2e86b8fdf4f6dab81dee0d6d2a7ffce2b59fe42f015f6","last_reissued_at":"2026-08-05T01:36:59.791002Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T01:36:59.791002Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03740","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:36:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RzlTW4I9OQWEmHtbGql21lOwsz2CeSj+zgflgE2GWGwWT+ejdD0v4hS88pk2y37JoW9+ebVUyGC1TZiWtOGyCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:40:46.477962Z"},"content_sha256":"831a9134dcd77fbd7607a5779c70bd2a6fc0bd67132854c25c2339a5a3ab22d6","schema_version":"1.0","event_id":"sha256:831a9134dcd77fbd7607a5779c70bd2a6fc0bd67132854c25c2339a5a3ab22d6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:RDT5WKCTPUQ2JYPC5BVY7X2PNW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MissClick: Exploiting Digit-Serialized Coordinates to Attack GUI Grounding Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Wentao Zhao, Xin Zhang, Yi Pan, Yu Ran","submitted_at":"2026-08-04T14:34:41Z","abstract_excerpt":"Recent GUI visual grounding models generate screen coordinates as sequences of digit tokens that are parsed into numerical values and mapped to executable clicks. The security implications of this coordinate generation process have been largely overlooked. We observe that each coordinate digit is predicted as a categorical token, yet after parsing, changing a hundreds-place digit by one changes the corresponding numerical coordinate component by 100 units, which can induce a large displacement of the executed click. This observation motivates attack objectives that account for the numerical an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03740","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03740/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:36:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uRAgjjU1jHaOfSsNDgmAQ8KHCLlFriJ/8v+qSdikY31wE9Lyv+4nA9+vQwldhxwSaOonX5WCnWPha90GRzFFBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:40:46.478463Z"},"content_sha256":"dd52bec067e2507acc8793747a5bc46837b7f94c0c410f4e1975db41f9ac7e92","schema_version":"1.0","event_id":"sha256:dd52bec067e2507acc8793747a5bc46837b7f94c0c410f4e1975db41f9ac7e92"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RDT5WKCTPUQ2JYPC5BVY7X2PNW/bundle.json","state_url":"https://pith.science/pith/RDT5WKCTPUQ2JYPC5BVY7X2PNW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RDT5WKCTPUQ2JYPC5BVY7X2PNW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T18:40:46Z","links":{"resolver":"https://pith.science/pith/RDT5WKCTPUQ2JYPC5BVY7X2PNW","bundle":"https://pith.science/pith/RDT5WKCTPUQ2JYPC5BVY7X2PNW/bundle.json","state":"https://pith.science/pith/RDT5WKCTPUQ2JYPC5BVY7X2PNW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RDT5WKCTPUQ2JYPC5BVY7X2PNW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:RDT5WKCTPUQ2JYPC5BVY7X2PNW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"053ecce1edcc0ec29abe9337c44bcd0b031f012ad406831a176e2551773f5fb2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T14:34:41Z","title_canon_sha256":"bc31446a854b4fd6f538cca85f476ae64ab9f24fa9513a680ab6148944381d24"},"schema_version":"1.0","source":{"id":"2608.03740","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03740","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03740v1","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03740","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"pith_short_12","alias_value":"RDT5WKCTPUQ2","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"pith_short_16","alias_value":"RDT5WKCTPUQ2JYPC","created_at":"2026-08-05T01:36:59Z"},{"alias_kind":"pith_short_8","alias_value":"RDT5WKCT","created_at":"2026-08-05T01:36:59Z"}],"graph_snapshots":[{"event_id":"sha256:dd52bec067e2507acc8793747a5bc46837b7f94c0c410f4e1975db41f9ac7e92","target":"graph","created_at":"2026-08-05T01:36:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03740/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent GUI visual grounding models generate screen coordinates as sequences of digit tokens that are parsed into numerical values and mapped to executable clicks. The security implications of this coordinate generation process have been largely overlooked. We observe that each coordinate digit is predicted as a categorical token, yet after parsing, changing a hundreds-place digit by one changes the corresponding numerical coordinate component by 100 units, which can induce a large displacement of the executed click. This observation motivates attack objectives that account for the numerical an","authors_text":"Wentao Zhao, Xin Zhang, Yi Pan, Yu Ran","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T14:34:41Z","title":"MissClick: Exploiting Digit-Serialized Coordinates to Attack GUI Grounding Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03740","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:831a9134dcd77fbd7607a5779c70bd2a6fc0bd67132854c25c2339a5a3ab22d6","target":"record","created_at":"2026-08-05T01:36:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"053ecce1edcc0ec29abe9337c44bcd0b031f012ad406831a176e2551773f5fb2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T14:34:41Z","title_canon_sha256":"bc31446a854b4fd6f538cca85f476ae64ab9f24fa9513a680ab6148944381d24"},"schema_version":"1.0","source":{"id":"2608.03740","kind":"arxiv","version":1}},"canonical_sha256":"88e7db28537d21a4e1e2e86b8fdf4f6dab81dee0d6d2a7ffce2b59fe42f015f6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"88e7db28537d21a4e1e2e86b8fdf4f6dab81dee0d6d2a7ffce2b59fe42f015f6","first_computed_at":"2026-08-05T01:36:59.791002Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T01:36:59.791002Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BYVkbe45W6Wwt8Fj8CkZNZQDiVd/CLt1xjBKedZM61GvupEbDL/NHqJSrKrss0iBCGIQRtHx2lwiC64rDEtdBQ==","signature_status":"signed_v1","signed_at":"2026-08-05T01:36:59.792396Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03740","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:831a9134dcd77fbd7607a5779c70bd2a6fc0bd67132854c25c2339a5a3ab22d6","sha256:dd52bec067e2507acc8793747a5bc46837b7f94c0c410f4e1975db41f9ac7e92"],"state_sha256":"19e0c50f814bd36db428a90f171a76b89c02b6edad4be55e4f14d90ecb17da4c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wikVQxxaERwDfBhEqg3aXKnXO/88aHQS1RVgy8l1RJuMFD+qO3Nhwq50ZaD6YSSzJ4YT24YpAEqDrf/Gtd7UBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T18:40:46.483425Z","bundle_sha256":"45471c714c02c5a5a790041ea3fcaa1dfc32cc6e73374aa5caf8080996b998bb"}}