{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RDTP3Q2IDZ3LCXOSVISYL6MZ3X","short_pith_number":"pith:RDTP3Q2I","canonical_record":{"source":{"id":"2407.15211","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-07-21T16:27:24Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.LG"],"title_canon_sha256":"d0f33ac16b2f524e2ab8ddd0ba417984b04a81a4442815c9bca4df36a30f6999","abstract_canon_sha256":"9e6d9b0c47d3539b02e0a461033015d767b4380827cb706ff1d6b5e9c1c22b4a"},"schema_version":"1.0"},"canonical_sha256":"88e6fdc3481e76b15dd2aa2585f999ddc02d0d11b2b29685b35d893b0207361d","source":{"kind":"arxiv","id":"2407.15211","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.15211","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"arxiv_version","alias_value":"2407.15211v2","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.15211","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"pith_short_12","alias_value":"RDTP3Q2IDZ3L","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"pith_short_16","alias_value":"RDTP3Q2IDZ3LCXOS","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"pith_short_8","alias_value":"RDTP3Q2I","created_at":"2026-07-05T09:49:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RDTP3Q2IDZ3LCXOSVISYL6MZ3X","target":"record","payload":{"canonical_record":{"source":{"id":"2407.15211","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-07-21T16:27:24Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.LG"],"title_canon_sha256":"d0f33ac16b2f524e2ab8ddd0ba417984b04a81a4442815c9bca4df36a30f6999","abstract_canon_sha256":"9e6d9b0c47d3539b02e0a461033015d767b4380827cb706ff1d6b5e9c1c22b4a"},"schema_version":"1.0"},"canonical_sha256":"88e6fdc3481e76b15dd2aa2585f999ddc02d0d11b2b29685b35d893b0207361d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:49:08.222226Z","signature_b64":"+YH3fx5I8UyEvHi36jAz2e+W9u+UmMzm0lHphWth20mC1ohvxdOaU7TsD1eWNpjfpgQLTK/DjD71Cj9g3bMdDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"88e6fdc3481e76b15dd2aa2585f999ddc02d0d11b2b29685b35d893b0207361d","last_reissued_at":"2026-07-05T09:49:08.221736Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:49:08.221736Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.15211","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:49:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tEuwt1gbUiOLklppleTEzuTyezgWqb1RFDm/BRia2V2IZ0T5qndIsc8GDmO40IDFY0Qv4uP9YOSnkHU9ngV8DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:38:31.158102Z"},"content_sha256":"cf0fbaf862dda744d6c0f191ded13bcc774375ba1f073ca5f76c34b2cac97f3c","schema_version":"1.0","event_id":"sha256:cf0fbaf862dda744d6c0f191ded13bcc774375ba1f073ca5f76c34b2cac97f3c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RDTP3Q2IDZ3LCXOSVISYL6MZ3X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Failures to Find Transferable Image Jailbreaks Between Vision-Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV","cs.LG"],"primary_cat":"cs.CL","authors_text":"Brando Miranda, Crist\\'obal Eyzaguirre, Dan Valentine, Ethan Perez, Henry Sleight, James Chua, Joe Benton, John Hughes, Luke Bailey, Mrinank Sharma, Rajashree Agrawal, Rylan Schaeffer, Sanmi Koyejo, Scott Emmons, Zane Durante","submitted_at":"2024-07-21T16:27:24Z","abstract_excerpt":"The integration of new modalities into frontier AI systems offers exciting capabilities, but also increases the possibility such systems can be adversarially manipulated in undesirable ways. In this work, we focus on a popular class of vision-language models (VLMs) that generate text outputs conditioned on visual and textual inputs. We conducted a large-scale empirical study to assess the transferability of gradient-based universal image ``jailbreaks\" using a diverse set of over 40 open-parameter VLMs, including 18 new VLMs that we publicly release. Overall, we find that transferable gradient-"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.15211","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.15211/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:49:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NEI193LV8rFIMQ6zf3KuYRcJJi3KrW9WT0Efr0VQbAXek/Uj3fsoSftZqXVl0+oyDpGim7oaCNDTZPansyvFDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:38:31.159570Z"},"content_sha256":"7cdb56c35968a64b4070e9828e8edd864580910cddd0a31b119f5acd59d57d2f","schema_version":"1.0","event_id":"sha256:7cdb56c35968a64b4070e9828e8edd864580910cddd0a31b119f5acd59d57d2f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RDTP3Q2IDZ3LCXOSVISYL6MZ3X/bundle.json","state_url":"https://pith.science/pith/RDTP3Q2IDZ3LCXOSVISYL6MZ3X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RDTP3Q2IDZ3LCXOSVISYL6MZ3X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:38:31Z","links":{"resolver":"https://pith.science/pith/RDTP3Q2IDZ3LCXOSVISYL6MZ3X","bundle":"https://pith.science/pith/RDTP3Q2IDZ3LCXOSVISYL6MZ3X/bundle.json","state":"https://pith.science/pith/RDTP3Q2IDZ3LCXOSVISYL6MZ3X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RDTP3Q2IDZ3LCXOSVISYL6MZ3X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RDTP3Q2IDZ3LCXOSVISYL6MZ3X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9e6d9b0c47d3539b02e0a461033015d767b4380827cb706ff1d6b5e9c1c22b4a","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-07-21T16:27:24Z","title_canon_sha256":"d0f33ac16b2f524e2ab8ddd0ba417984b04a81a4442815c9bca4df36a30f6999"},"schema_version":"1.0","source":{"id":"2407.15211","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.15211","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"arxiv_version","alias_value":"2407.15211v2","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.15211","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"pith_short_12","alias_value":"RDTP3Q2IDZ3L","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"pith_short_16","alias_value":"RDTP3Q2IDZ3LCXOS","created_at":"2026-07-05T09:49:08Z"},{"alias_kind":"pith_short_8","alias_value":"RDTP3Q2I","created_at":"2026-07-05T09:49:08Z"}],"graph_snapshots":[{"event_id":"sha256:7cdb56c35968a64b4070e9828e8edd864580910cddd0a31b119f5acd59d57d2f","target":"graph","created_at":"2026-07-05T09:49:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.15211/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The integration of new modalities into frontier AI systems offers exciting capabilities, but also increases the possibility such systems can be adversarially manipulated in undesirable ways. In this work, we focus on a popular class of vision-language models (VLMs) that generate text outputs conditioned on visual and textual inputs. We conducted a large-scale empirical study to assess the transferability of gradient-based universal image ``jailbreaks\" using a diverse set of over 40 open-parameter VLMs, including 18 new VLMs that we publicly release. Overall, we find that transferable gradient-","authors_text":"Brando Miranda, Crist\\'obal Eyzaguirre, Dan Valentine, Ethan Perez, Henry Sleight, James Chua, Joe Benton, John Hughes, Luke Bailey, Mrinank Sharma, Rajashree Agrawal, Rylan Schaeffer, Sanmi Koyejo, Scott Emmons, Zane Durante","cross_cats":["cs.AI","cs.CR","cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-07-21T16:27:24Z","title":"Failures to Find Transferable Image Jailbreaks Between Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.15211","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cf0fbaf862dda744d6c0f191ded13bcc774375ba1f073ca5f76c34b2cac97f3c","target":"record","created_at":"2026-07-05T09:49:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9e6d9b0c47d3539b02e0a461033015d767b4380827cb706ff1d6b5e9c1c22b4a","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-07-21T16:27:24Z","title_canon_sha256":"d0f33ac16b2f524e2ab8ddd0ba417984b04a81a4442815c9bca4df36a30f6999"},"schema_version":"1.0","source":{"id":"2407.15211","kind":"arxiv","version":2}},"canonical_sha256":"88e6fdc3481e76b15dd2aa2585f999ddc02d0d11b2b29685b35d893b0207361d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"88e6fdc3481e76b15dd2aa2585f999ddc02d0d11b2b29685b35d893b0207361d","first_computed_at":"2026-07-05T09:49:08.221736Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:49:08.221736Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+YH3fx5I8UyEvHi36jAz2e+W9u+UmMzm0lHphWth20mC1ohvxdOaU7TsD1eWNpjfpgQLTK/DjD71Cj9g3bMdDw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:49:08.222226Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.15211","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cf0fbaf862dda744d6c0f191ded13bcc774375ba1f073ca5f76c34b2cac97f3c","sha256:7cdb56c35968a64b4070e9828e8edd864580910cddd0a31b119f5acd59d57d2f"],"state_sha256":"44a441a3eacfc229c11ec16c139b6454453bd13c621701e844dab082071577fa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7i0xuZlRzK+bHGs4kvUYpRl4KrMVil2MKUKv3qi+OeKcT0nDbsxhIUGxkiNrms3uY9H/bY2QJupOJFCjRRcFBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:38:31.165177Z","bundle_sha256":"9c6a5daf5c76d68fa8cf3279e3ff52641f04a588b45a806c4e7ec6f1c2ed3205"}}