{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:S6CT7TRMY5VTLEKX4M5GENWCX5","short_pith_number":"pith:S6CT7TRM","canonical_record":{"source":{"id":"2501.16378","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-24T06:17:22Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CV"],"title_canon_sha256":"a61f05c1a372f81aa58da65d888291da5a2f69b763014a35b7f4ad28fcfe75e6","abstract_canon_sha256":"eb865d1a3e23ed6dd5f717bbddeab3ba382495362bd741d308b9b2f7f111e11e"},"schema_version":"1.0"},"canonical_sha256":"97853fce2cc76b359157e33a6236c2bf6676488f5a69696679a9f3df3144e7d1","source":{"kind":"arxiv","id":"2501.16378","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.16378","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"arxiv_version","alias_value":"2501.16378v1","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.16378","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"pith_short_12","alias_value":"S6CT7TRMY5VT","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"pith_short_16","alias_value":"S6CT7TRMY5VTLEKX","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"pith_short_8","alias_value":"S6CT7TRM","created_at":"2026-07-05T10:06:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:S6CT7TRMY5VTLEKX4M5GENWCX5","target":"record","payload":{"canonical_record":{"source":{"id":"2501.16378","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-24T06:17:22Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CV"],"title_canon_sha256":"a61f05c1a372f81aa58da65d888291da5a2f69b763014a35b7f4ad28fcfe75e6","abstract_canon_sha256":"eb865d1a3e23ed6dd5f717bbddeab3ba382495362bd741d308b9b2f7f111e11e"},"schema_version":"1.0"},"canonical_sha256":"97853fce2cc76b359157e33a6236c2bf6676488f5a69696679a9f3df3144e7d1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:06:12.081191Z","signature_b64":"KVMDuXeF154RE2uG/iuJZhH+uIYBU78R+qsQekRcuyy3mtaPUK3XY1Dqxo0YnRec7AGbJTAiNpY02IIXgI8mDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"97853fce2cc76b359157e33a6236c2bf6676488f5a69696679a9f3df3144e7d1","last_reissued_at":"2026-07-05T10:06:12.080749Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:06:12.080749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.16378","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/BYFDk6NFCmDnNDbrVMA3kO+TN0W+2UdAY2CdBC8UuZm93sA/B4yJgizDxAZQdYe5DIu2DkiKcWNEr3notKXDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:09:10.102691Z"},"content_sha256":"5f79c2457fef8f2be9283130592a3a9529dc38942ece51e9e4a51946e1ac7b0f","schema_version":"1.0","event_id":"sha256:5f79c2457fef8f2be9283130592a3a9529dc38942ece51e9e4a51946e1ac7b0f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:S6CT7TRMY5VTLEKX4M5GENWCX5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Internal Activation Revision: Safeguarding Vision Language Models Without Parameter Update","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CV"],"primary_cat":"cs.LG","authors_text":"Fakhri Karray, Jiahui Geng, Kun Song, Lei Ma, Qing Li, Zongxiong Chen","submitted_at":"2025-01-24T06:17:22Z","abstract_excerpt":"Vision-language models (VLMs) demonstrate strong multimodal capabilities but have been found to be more susceptible to generating harmful content compared to their backbone large language models (LLMs). Our investigation reveals that the integration of images significantly shifts the model's internal activations during the forward pass, diverging from those triggered by textual input. Moreover, the safety alignments of LLMs embedded within VLMs are not sufficiently robust to handle the activations discrepancies, making the models vulnerable to even the simplest jailbreaking attacks. To address"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.16378","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.16378/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WkYr+Zb8cTGqYpGnpsvdhXE33TKHKM9M2wmEuir06E25eJobfaJ43wGTeKiHilTBVA8WysKQW2D+Oop5pv4+AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:09:10.103587Z"},"content_sha256":"ac7942a9759f4c7f988de00ab58fc19b7a0f565d0af6ea754e2b6a99b8290fbf","schema_version":"1.0","event_id":"sha256:ac7942a9759f4c7f988de00ab58fc19b7a0f565d0af6ea754e2b6a99b8290fbf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/S6CT7TRMY5VTLEKX4M5GENWCX5/bundle.json","state_url":"https://pith.science/pith/S6CT7TRMY5VTLEKX4M5GENWCX5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/S6CT7TRMY5VTLEKX4M5GENWCX5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T11:09:10Z","links":{"resolver":"https://pith.science/pith/S6CT7TRMY5VTLEKX4M5GENWCX5","bundle":"https://pith.science/pith/S6CT7TRMY5VTLEKX4M5GENWCX5/bundle.json","state":"https://pith.science/pith/S6CT7TRMY5VTLEKX4M5GENWCX5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/S6CT7TRMY5VTLEKX4M5GENWCX5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:S6CT7TRMY5VTLEKX4M5GENWCX5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"eb865d1a3e23ed6dd5f717bbddeab3ba382495362bd741d308b9b2f7f111e11e","cross_cats_sorted":["cs.AI","cs.CL","cs.CV"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-24T06:17:22Z","title_canon_sha256":"a61f05c1a372f81aa58da65d888291da5a2f69b763014a35b7f4ad28fcfe75e6"},"schema_version":"1.0","source":{"id":"2501.16378","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.16378","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"arxiv_version","alias_value":"2501.16378v1","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.16378","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"pith_short_12","alias_value":"S6CT7TRMY5VT","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"pith_short_16","alias_value":"S6CT7TRMY5VTLEKX","created_at":"2026-07-05T10:06:12Z"},{"alias_kind":"pith_short_8","alias_value":"S6CT7TRM","created_at":"2026-07-05T10:06:12Z"}],"graph_snapshots":[{"event_id":"sha256:ac7942a9759f4c7f988de00ab58fc19b7a0f565d0af6ea754e2b6a99b8290fbf","target":"graph","created_at":"2026-07-05T10:06:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.16378/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-language models (VLMs) demonstrate strong multimodal capabilities but have been found to be more susceptible to generating harmful content compared to their backbone large language models (LLMs). Our investigation reveals that the integration of images significantly shifts the model's internal activations during the forward pass, diverging from those triggered by textual input. Moreover, the safety alignments of LLMs embedded within VLMs are not sufficiently robust to handle the activations discrepancies, making the models vulnerable to even the simplest jailbreaking attacks. To address","authors_text":"Fakhri Karray, Jiahui Geng, Kun Song, Lei Ma, Qing Li, Zongxiong Chen","cross_cats":["cs.AI","cs.CL","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-24T06:17:22Z","title":"Internal Activation Revision: Safeguarding Vision Language Models Without Parameter Update"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.16378","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5f79c2457fef8f2be9283130592a3a9529dc38942ece51e9e4a51946e1ac7b0f","target":"record","created_at":"2026-07-05T10:06:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"eb865d1a3e23ed6dd5f717bbddeab3ba382495362bd741d308b9b2f7f111e11e","cross_cats_sorted":["cs.AI","cs.CL","cs.CV"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2025-01-24T06:17:22Z","title_canon_sha256":"a61f05c1a372f81aa58da65d888291da5a2f69b763014a35b7f4ad28fcfe75e6"},"schema_version":"1.0","source":{"id":"2501.16378","kind":"arxiv","version":1}},"canonical_sha256":"97853fce2cc76b359157e33a6236c2bf6676488f5a69696679a9f3df3144e7d1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"97853fce2cc76b359157e33a6236c2bf6676488f5a69696679a9f3df3144e7d1","first_computed_at":"2026-07-05T10:06:12.080749Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:06:12.080749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KVMDuXeF154RE2uG/iuJZhH+uIYBU78R+qsQekRcuyy3mtaPUK3XY1Dqxo0YnRec7AGbJTAiNpY02IIXgI8mDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:06:12.081191Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.16378","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5f79c2457fef8f2be9283130592a3a9529dc38942ece51e9e4a51946e1ac7b0f","sha256:ac7942a9759f4c7f988de00ab58fc19b7a0f565d0af6ea754e2b6a99b8290fbf"],"state_sha256":"35de3e06c2e4bd51200e33ab84c2b91b8e5b5ad2fc69888dbebf097b68e5d910"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RT2fySC5b6mPrPrUb3p0P0zf07OPFb6L6efLWtBNT5eSuYcPdBQcaztPYbSyg7Ljt10D5tIvbKA02kPwiVPZDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T11:09:10.110427Z","bundle_sha256":"eecb626447dfb48b52e2cfb7fe71e11e14d770521ce9968c7287b47d7898fcaa"}}