{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:RZSJQQA7YQMNG2FY4EJFSP4SGB","short_pith_number":"pith:RZSJQQA7","canonical_record":{"source":{"id":"2309.14122","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-25T13:20:15Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ebd5e6e1415472108c96cf4f85e4a83bf346d93da81b1ca35bc6c061808bd418","abstract_canon_sha256":"d62b4cbe3b4ba3146ec37c09ad89a319225e8c412c48ed66415322c5fb8f0274"},"schema_version":"1.0"},"canonical_sha256":"8e6498401fc418d368b8e112593f923060ddb26a8918673a14355d1b43327267","source":{"kind":"arxiv","id":"2309.14122","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.14122","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"arxiv_version","alias_value":"2309.14122v3","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.14122","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"pith_short_12","alias_value":"RZSJQQA7YQMN","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"pith_short_16","alias_value":"RZSJQQA7YQMNG2FY","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"pith_short_8","alias_value":"RZSJQQA7","created_at":"2026-07-05T09:21:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:RZSJQQA7YQMNG2FY4EJFSP4SGB","target":"record","payload":{"canonical_record":{"source":{"id":"2309.14122","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-25T13:20:15Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ebd5e6e1415472108c96cf4f85e4a83bf346d93da81b1ca35bc6c061808bd418","abstract_canon_sha256":"d62b4cbe3b4ba3146ec37c09ad89a319225e8c412c48ed66415322c5fb8f0274"},"schema_version":"1.0"},"canonical_sha256":"8e6498401fc418d368b8e112593f923060ddb26a8918673a14355d1b43327267","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:21:38.197202Z","signature_b64":"Gm4aN3KvdZgpGFQn9CUxow5YxrUqkpNk99PrVd56IL4sth80s1mA3GMTK6vvdtFGdVDL5WG8BeT5RihIGhZyCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8e6498401fc418d368b8e112593f923060ddb26a8918673a14355d1b43327267","last_reissued_at":"2026-07-05T09:21:38.196758Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:21:38.196758Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.14122","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:21:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JAII2PUra3+y8H+pNynUybOO+oYkgELe6jA+/GCAylgRDWeAjcjAHP2x9J2IJXvg8lNwE5vQjklRToI5Uo3SCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T20:24:13.392707Z"},"content_sha256":"2a994be125d695746964891fb2e661755b59596b0443ab7a2c8abd470c583dc9","schema_version":"1.0","event_id":"sha256:2a994be125d695746964891fb2e661755b59596b0443ab7a2c8abd470c583dc9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:RZSJQQA7YQMNG2FY4EJFSP4SGB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Jiachen Lei, Jieming Zhong, Kui Ren, Peng Cheng, Qinglong Wang, Zhan Qin, Zhibo Wang, Zhongjie Ba","submitted_at":"2023-09-25T13:20:15Z","abstract_excerpt":"Advanced text-to-image models such as DALL$\\cdot$E 2 and Midjourney possess the capacity to generate highly realistic images, raising significant concerns regarding the potential proliferation of unsafe content. This includes adult, violent, or deceptive imagery of political figures. Despite claims of rigorous safety mechanisms implemented in these models to restrict the generation of not-safe-for-work (NSFW) content, we successfully devise and exhibit the first prompt attacks on Midjourney, resulting in the production of abundant photorealistic NSFW images. We reveal the fundamental principle"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.14122","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.14122/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:21:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HrztFMv8sCEeBwHNzxhGdqtQjK+U3itpGUPa+Y9mlKEJ0xbDubEFFJOoCm4FldWEf/ncjr+cAtnB846YYGtMAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T20:24:13.393268Z"},"content_sha256":"236b781866a0ec99e8325f782f330b517a9147e986d71c69970600fa9bd5dba9","schema_version":"1.0","event_id":"sha256:236b781866a0ec99e8325f782f330b517a9147e986d71c69970600fa9bd5dba9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RZSJQQA7YQMNG2FY4EJFSP4SGB/bundle.json","state_url":"https://pith.science/pith/RZSJQQA7YQMNG2FY4EJFSP4SGB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RZSJQQA7YQMNG2FY4EJFSP4SGB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T20:24:13Z","links":{"resolver":"https://pith.science/pith/RZSJQQA7YQMNG2FY4EJFSP4SGB","bundle":"https://pith.science/pith/RZSJQQA7YQMNG2FY4EJFSP4SGB/bundle.json","state":"https://pith.science/pith/RZSJQQA7YQMNG2FY4EJFSP4SGB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RZSJQQA7YQMNG2FY4EJFSP4SGB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RZSJQQA7YQMNG2FY4EJFSP4SGB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d62b4cbe3b4ba3146ec37c09ad89a319225e8c412c48ed66415322c5fb8f0274","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-25T13:20:15Z","title_canon_sha256":"ebd5e6e1415472108c96cf4f85e4a83bf346d93da81b1ca35bc6c061808bd418"},"schema_version":"1.0","source":{"id":"2309.14122","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.14122","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"arxiv_version","alias_value":"2309.14122v3","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.14122","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"pith_short_12","alias_value":"RZSJQQA7YQMN","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"pith_short_16","alias_value":"RZSJQQA7YQMNG2FY","created_at":"2026-07-05T09:21:38Z"},{"alias_kind":"pith_short_8","alias_value":"RZSJQQA7","created_at":"2026-07-05T09:21:38Z"}],"graph_snapshots":[{"event_id":"sha256:236b781866a0ec99e8325f782f330b517a9147e986d71c69970600fa9bd5dba9","target":"graph","created_at":"2026-07-05T09:21:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.14122/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Advanced text-to-image models such as DALL$\\cdot$E 2 and Midjourney possess the capacity to generate highly realistic images, raising significant concerns regarding the potential proliferation of unsafe content. This includes adult, violent, or deceptive imagery of political figures. Despite claims of rigorous safety mechanisms implemented in these models to restrict the generation of not-safe-for-work (NSFW) content, we successfully devise and exhibit the first prompt attacks on Midjourney, resulting in the production of abundant photorealistic NSFW images. We reveal the fundamental principle","authors_text":"Jiachen Lei, Jieming Zhong, Kui Ren, Peng Cheng, Qinglong Wang, Zhan Qin, Zhibo Wang, Zhongjie Ba","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-25T13:20:15Z","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.14122","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a994be125d695746964891fb2e661755b59596b0443ab7a2c8abd470c583dc9","target":"record","created_at":"2026-07-05T09:21:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d62b4cbe3b4ba3146ec37c09ad89a319225e8c412c48ed66415322c5fb8f0274","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-25T13:20:15Z","title_canon_sha256":"ebd5e6e1415472108c96cf4f85e4a83bf346d93da81b1ca35bc6c061808bd418"},"schema_version":"1.0","source":{"id":"2309.14122","kind":"arxiv","version":3}},"canonical_sha256":"8e6498401fc418d368b8e112593f923060ddb26a8918673a14355d1b43327267","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8e6498401fc418d368b8e112593f923060ddb26a8918673a14355d1b43327267","first_computed_at":"2026-07-05T09:21:38.196758Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:21:38.196758Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Gm4aN3KvdZgpGFQn9CUxow5YxrUqkpNk99PrVd56IL4sth80s1mA3GMTK6vvdtFGdVDL5WG8BeT5RihIGhZyCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:21:38.197202Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.14122","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a994be125d695746964891fb2e661755b59596b0443ab7a2c8abd470c583dc9","sha256:236b781866a0ec99e8325f782f330b517a9147e986d71c69970600fa9bd5dba9"],"state_sha256":"55b93ebf86b24883476af08bcc5244295995c0eb386231cf66e52e1771564aa8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F5AFU0huTzWEEWoNgLqemiDrsczQ4Wkg0CpOgWNBJzaFRW4KhpfwT9zNuINunHMDoOWH127IVOIgZngPEk1pDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T20:24:13.399482Z","bundle_sha256":"99cf56364eaf9c1b0d6197d8bb8e76448c799d8778c6bf70f012e5ff33da63b7"}}