{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:SDGQWVYC77S67APGK2SYB5VIKM","short_pith_number":"pith:SDGQWVYC","canonical_record":{"source":{"id":"2608.01373","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T16:49:25Z","cross_cats_sorted":[],"title_canon_sha256":"9110f39593fb4df884e775954a83e9d756bbd9446e1587b14d3726d8344e7e38","abstract_canon_sha256":"3b36a6b16e46a90682686442cfcfa66675ab2fa20f449dcc601d948eca4aecbd"},"schema_version":"1.0"},"canonical_sha256":"90cd0b5702ffe5ef81e656a580f6a85305ea9f444d26c6c397d751c33fc27d98","source":{"kind":"arxiv","id":"2608.01373","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01373","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01373v1","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01373","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"pith_short_12","alias_value":"SDGQWVYC77S6","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"pith_short_16","alias_value":"SDGQWVYC77S67APG","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"pith_short_8","alias_value":"SDGQWVYC","created_at":"2026-08-04T02:04:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:SDGQWVYC77S67APGK2SYB5VIKM","target":"record","payload":{"canonical_record":{"source":{"id":"2608.01373","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T16:49:25Z","cross_cats_sorted":[],"title_canon_sha256":"9110f39593fb4df884e775954a83e9d756bbd9446e1587b14d3726d8344e7e38","abstract_canon_sha256":"3b36a6b16e46a90682686442cfcfa66675ab2fa20f449dcc601d948eca4aecbd"},"schema_version":"1.0"},"canonical_sha256":"90cd0b5702ffe5ef81e656a580f6a85305ea9f444d26c6c397d751c33fc27d98","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T02:04:54.216447Z","signature_b64":"pLVFcIgGL8D3NFEdOaHlppW12CbgomL7JFUeL/7fDBYbtILlNCFqjDgrxaCqQCtoXZRY1ZGHqnd1Iob9Z1WyCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"90cd0b5702ffe5ef81e656a580f6a85305ea9f444d26c6c397d751c33fc27d98","last_reissued_at":"2026-08-04T02:04:54.214588Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T02:04:54.214588Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.01373","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:04:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fKxlGGiy7LPQ4TWHNEzSj94uGySKEiNHMbeVfEhl1TAO3qRdLkLsRzSHH2aiFLsbcujJhHcFHxd25q/2H1PrBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:00:06.902376Z"},"content_sha256":"74e48d69d5e13a39b2b52e4a5cc1535a8a0c4443a4074e2e6d00f3b9dc0fbbdf","schema_version":"1.0","event_id":"sha256:74e48d69d5e13a39b2b52e4a5cc1535a8a0c4443a4074e2e6d00f3b9dc0fbbdf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:SDGQWVYC77S67APGK2SYB5VIKM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Boy Who Cried Wolf: Adversarial Misclassification of Safe Inputs as Unsafe in Multimodal Guardrails","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chunyi Zhou, Jiahao Chen, Jun Wang, Naen Xu, Rui Yin, Shouling Ji, Shuo Shi, Tianyu Du, Zhaoxiang Wang, Zhihui Fu","submitted_at":"2026-08-02T16:49:25Z","abstract_excerpt":"Multimodal guard models have emerged as critical safety components for screening content in vision-language systems. While adversarial research has extensively studied jailbreaking attacks that produce false negatives, the inverse threat of inducing false positives on benign inputs remains unexplored. We introduce Unsafe Induction Attacks, where adversaries distribute imperceptibly perturbed safe images that trigger guard models to reject legitimate user requests, causing a \"Boy Who Cried Wolf\" effect that degrades service availability and erodes trust. This reveals an availability failure mod"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01373","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.01373/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:04:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BsqjvrRV9E5lxj0eiZa0MDdGhhvOh4ZBrb8aMgybNeiQoVOlwdwm2U70V/PLkuYnxdCtEOTT/gVzfIYzM0gRBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:00:06.902907Z"},"content_sha256":"c0352bf732a8ab7203bb19a3acbf8d35f950616852079b3c45fdd66ba4016e54","schema_version":"1.0","event_id":"sha256:c0352bf732a8ab7203bb19a3acbf8d35f950616852079b3c45fdd66ba4016e54"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SDGQWVYC77S67APGK2SYB5VIKM/bundle.json","state_url":"https://pith.science/pith/SDGQWVYC77S67APGK2SYB5VIKM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SDGQWVYC77S67APGK2SYB5VIKM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T00:00:06Z","links":{"resolver":"https://pith.science/pith/SDGQWVYC77S67APGK2SYB5VIKM","bundle":"https://pith.science/pith/SDGQWVYC77S67APGK2SYB5VIKM/bundle.json","state":"https://pith.science/pith/SDGQWVYC77S67APGK2SYB5VIKM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SDGQWVYC77S67APGK2SYB5VIKM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:SDGQWVYC77S67APGK2SYB5VIKM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3b36a6b16e46a90682686442cfcfa66675ab2fa20f449dcc601d948eca4aecbd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T16:49:25Z","title_canon_sha256":"9110f39593fb4df884e775954a83e9d756bbd9446e1587b14d3726d8344e7e38"},"schema_version":"1.0","source":{"id":"2608.01373","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01373","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01373v1","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01373","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"pith_short_12","alias_value":"SDGQWVYC77S6","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"pith_short_16","alias_value":"SDGQWVYC77S67APG","created_at":"2026-08-04T02:04:54Z"},{"alias_kind":"pith_short_8","alias_value":"SDGQWVYC","created_at":"2026-08-04T02:04:54Z"}],"graph_snapshots":[{"event_id":"sha256:c0352bf732a8ab7203bb19a3acbf8d35f950616852079b3c45fdd66ba4016e54","target":"graph","created_at":"2026-08-04T02:04:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.01373/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal guard models have emerged as critical safety components for screening content in vision-language systems. While adversarial research has extensively studied jailbreaking attacks that produce false negatives, the inverse threat of inducing false positives on benign inputs remains unexplored. We introduce Unsafe Induction Attacks, where adversaries distribute imperceptibly perturbed safe images that trigger guard models to reject legitimate user requests, causing a \"Boy Who Cried Wolf\" effect that degrades service availability and erodes trust. This reveals an availability failure mod","authors_text":"Chunyi Zhou, Jiahao Chen, Jun Wang, Naen Xu, Rui Yin, Shouling Ji, Shuo Shi, Tianyu Du, Zhaoxiang Wang, Zhihui Fu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T16:49:25Z","title":"The Boy Who Cried Wolf: Adversarial Misclassification of Safe Inputs as Unsafe in Multimodal Guardrails"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01373","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:74e48d69d5e13a39b2b52e4a5cc1535a8a0c4443a4074e2e6d00f3b9dc0fbbdf","target":"record","created_at":"2026-08-04T02:04:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3b36a6b16e46a90682686442cfcfa66675ab2fa20f449dcc601d948eca4aecbd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-02T16:49:25Z","title_canon_sha256":"9110f39593fb4df884e775954a83e9d756bbd9446e1587b14d3726d8344e7e38"},"schema_version":"1.0","source":{"id":"2608.01373","kind":"arxiv","version":1}},"canonical_sha256":"90cd0b5702ffe5ef81e656a580f6a85305ea9f444d26c6c397d751c33fc27d98","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"90cd0b5702ffe5ef81e656a580f6a85305ea9f444d26c6c397d751c33fc27d98","first_computed_at":"2026-08-04T02:04:54.214588Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T02:04:54.214588Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pLVFcIgGL8D3NFEdOaHlppW12CbgomL7JFUeL/7fDBYbtILlNCFqjDgrxaCqQCtoXZRY1ZGHqnd1Iob9Z1WyCg==","signature_status":"signed_v1","signed_at":"2026-08-04T02:04:54.216447Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.01373","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:74e48d69d5e13a39b2b52e4a5cc1535a8a0c4443a4074e2e6d00f3b9dc0fbbdf","sha256:c0352bf732a8ab7203bb19a3acbf8d35f950616852079b3c45fdd66ba4016e54"],"state_sha256":"eda23234f0a67badf0fb16dab3e743ab9e6faf28031f3e5339d47b3d65618693"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ImVZVhsxk8KBhvw/VOfudNCqEHH5kk1XVheJmZ2Kj+C4SlcKqldbtn6EAXZmM02FEzbRK3ssuKld7uddlb4WDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T00:00:06.906709Z","bundle_sha256":"932a741682a645c99ce057e728b142b350ea104602d69b8e2c88ab43fbb15b7e"}}