{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TC73LDBVDN6LK6BB2DLF5WRPAZ","short_pith_number":"pith:TC73LDBV","canonical_record":{"source":{"id":"2507.23202","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-31T02:57:20Z","cross_cats_sorted":[],"title_canon_sha256":"39c7d82007c730324e5a69fb928190a53dd6130c2a4b9d753d26967637101a57","abstract_canon_sha256":"29baa9fce0e97e76291ba733ac511efa53cd3f73b7e11a4e8c91687951ab3466"},"schema_version":"1.0"},"canonical_sha256":"98bfb58c351b7cb57821d0d65eda2f067e9c280ec28f1f72bf20e80cdee0c6d8","source":{"kind":"arxiv","id":"2507.23202","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.23202","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"arxiv_version","alias_value":"2507.23202v1","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.23202","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"pith_short_12","alias_value":"TC73LDBVDN6L","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"pith_short_16","alias_value":"TC73LDBVDN6LK6BB","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"pith_short_8","alias_value":"TC73LDBV","created_at":"2026-07-05T11:46:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TC73LDBVDN6LK6BB2DLF5WRPAZ","target":"record","payload":{"canonical_record":{"source":{"id":"2507.23202","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-31T02:57:20Z","cross_cats_sorted":[],"title_canon_sha256":"39c7d82007c730324e5a69fb928190a53dd6130c2a4b9d753d26967637101a57","abstract_canon_sha256":"29baa9fce0e97e76291ba733ac511efa53cd3f73b7e11a4e8c91687951ab3466"},"schema_version":"1.0"},"canonical_sha256":"98bfb58c351b7cb57821d0d65eda2f067e9c280ec28f1f72bf20e80cdee0c6d8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:46:07.359837Z","signature_b64":"B6voy2Iqzq4Mt3nVzMghhNJsRgX4pZOvDA5H/mFL0vUTRhjHjTxD5pgJdnEnE1f5l8jyJ+xkCQ0tv9J40sZEBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"98bfb58c351b7cb57821d0d65eda2f067e9c280ec28f1f72bf20e80cdee0c6d8","last_reissued_at":"2026-07-05T11:46:07.359074Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:46:07.359074Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.23202","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:46:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U1Vix/iEuLoQFyVzP42lYyjFwOs1NSivMt3GtnDzYU0DgjNvk8ztJQtdeSRGbX3SCGDW3hVoJpbmojEIkUFPCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:54:20.645890Z"},"content_sha256":"5b3fc2e2d66630e21c84480b9ed3cbac55da4bca80c7aa6984a56d5744d05185","schema_version":"1.0","event_id":"sha256:5b3fc2e2d66630e21c84480b9ed3cbac55da4bca80c7aa6984a56d5744d05185"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TC73LDBVDN6LK6BB2DLF5WRPAZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial-Guided Diffusion for Multimodal LLM Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Chengwei Xia, Fan Ma, Kun Zhan, Ruijie Quan, Yi Yang","submitted_at":"2025-07-31T02:57:20Z","abstract_excerpt":"This paper addresses the challenge of generating adversarial image using a diffusion model to deceive multimodal large language models (MLLMs) into generating the targeted responses, while avoiding significant distortion of the clean image. To address the above challenges, we propose an adversarial-guided diffusion (AGD) approach for adversarial attack MLLMs. We introduce adversarial-guided noise to ensure attack efficacy. A key observation in our design is that, unlike most traditional adversarial attacks which embed high-frequency perturbations directly into the clean image, AGD injects targ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.23202","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.23202/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:46:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zxOxy297MycXNTK17vSS122P+NQWSyWS4WHwMSdOHFaVQ22vDs1cEK8CBVBG/ZCJVsMiKhCJXPEghLd1ZvCNBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:54:20.646445Z"},"content_sha256":"60f0af165a28fc3c96c21e2e60e9a9a4d8f6cc9d7ca3d811495ccc67674a7bbd","schema_version":"1.0","event_id":"sha256:60f0af165a28fc3c96c21e2e60e9a9a4d8f6cc9d7ca3d811495ccc67674a7bbd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TC73LDBVDN6LK6BB2DLF5WRPAZ/bundle.json","state_url":"https://pith.science/pith/TC73LDBVDN6LK6BB2DLF5WRPAZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TC73LDBVDN6LK6BB2DLF5WRPAZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:54:20Z","links":{"resolver":"https://pith.science/pith/TC73LDBVDN6LK6BB2DLF5WRPAZ","bundle":"https://pith.science/pith/TC73LDBVDN6LK6BB2DLF5WRPAZ/bundle.json","state":"https://pith.science/pith/TC73LDBVDN6LK6BB2DLF5WRPAZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TC73LDBVDN6LK6BB2DLF5WRPAZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TC73LDBVDN6LK6BB2DLF5WRPAZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"29baa9fce0e97e76291ba733ac511efa53cd3f73b7e11a4e8c91687951ab3466","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-31T02:57:20Z","title_canon_sha256":"39c7d82007c730324e5a69fb928190a53dd6130c2a4b9d753d26967637101a57"},"schema_version":"1.0","source":{"id":"2507.23202","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.23202","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"arxiv_version","alias_value":"2507.23202v1","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.23202","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"pith_short_12","alias_value":"TC73LDBVDN6L","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"pith_short_16","alias_value":"TC73LDBVDN6LK6BB","created_at":"2026-07-05T11:46:07Z"},{"alias_kind":"pith_short_8","alias_value":"TC73LDBV","created_at":"2026-07-05T11:46:07Z"}],"graph_snapshots":[{"event_id":"sha256:60f0af165a28fc3c96c21e2e60e9a9a4d8f6cc9d7ca3d811495ccc67674a7bbd","target":"graph","created_at":"2026-07-05T11:46:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.23202/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper addresses the challenge of generating adversarial image using a diffusion model to deceive multimodal large language models (MLLMs) into generating the targeted responses, while avoiding significant distortion of the clean image. To address the above challenges, we propose an adversarial-guided diffusion (AGD) approach for adversarial attack MLLMs. We introduce adversarial-guided noise to ensure attack efficacy. A key observation in our design is that, unlike most traditional adversarial attacks which embed high-frequency perturbations directly into the clean image, AGD injects targ","authors_text":"Chengwei Xia, Fan Ma, Kun Zhan, Ruijie Quan, Yi Yang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-31T02:57:20Z","title":"Adversarial-Guided Diffusion for Multimodal LLM Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.23202","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5b3fc2e2d66630e21c84480b9ed3cbac55da4bca80c7aa6984a56d5744d05185","target":"record","created_at":"2026-07-05T11:46:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"29baa9fce0e97e76291ba733ac511efa53cd3f73b7e11a4e8c91687951ab3466","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-31T02:57:20Z","title_canon_sha256":"39c7d82007c730324e5a69fb928190a53dd6130c2a4b9d753d26967637101a57"},"schema_version":"1.0","source":{"id":"2507.23202","kind":"arxiv","version":1}},"canonical_sha256":"98bfb58c351b7cb57821d0d65eda2f067e9c280ec28f1f72bf20e80cdee0c6d8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"98bfb58c351b7cb57821d0d65eda2f067e9c280ec28f1f72bf20e80cdee0c6d8","first_computed_at":"2026-07-05T11:46:07.359074Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:46:07.359074Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"B6voy2Iqzq4Mt3nVzMghhNJsRgX4pZOvDA5H/mFL0vUTRhjHjTxD5pgJdnEnE1f5l8jyJ+xkCQ0tv9J40sZEBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:46:07.359837Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.23202","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5b3fc2e2d66630e21c84480b9ed3cbac55da4bca80c7aa6984a56d5744d05185","sha256:60f0af165a28fc3c96c21e2e60e9a9a4d8f6cc9d7ca3d811495ccc67674a7bbd"],"state_sha256":"60b80f7650b80aefc42210ca919bddba608179cdf7d4c4c844701207a7c73cdb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FsUwmO63siMml9x0JG+iieFmTlg2yvcqGkj6eDolfD23WL52IW+OBknwQcErblrz57xLNa0pB5gPj5P4eYFXCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:54:20.650062Z","bundle_sha256":"cf0fb12e3801aa2dfabf76834cd92e7148ff20d3e405a4e49dce756f52104646"}}