{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TNC2AVNFOIHUWFMAMBFLPQPWDN","short_pith_number":"pith:TNC2AVNF","canonical_record":{"source":{"id":"2506.12430","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T10:03:17Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"f1c8f497bc6832d4e9ea31645776d3562241cdfc93d928064723750b71d767e5","abstract_canon_sha256":"20d8b568d32ce86b69df775da2558fc2701d5764746208102f48b01d8b6f7ad1"},"schema_version":"1.0"},"canonical_sha256":"9b45a055a5720f4b1580604ab7c1f61b49c66c350f5b50745c47863ce0297d68","source":{"kind":"arxiv","id":"2506.12430","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.12430","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"arxiv_version","alias_value":"2506.12430v2","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.12430","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"pith_short_12","alias_value":"TNC2AVNFOIHU","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"pith_short_16","alias_value":"TNC2AVNFOIHUWFMA","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"pith_short_8","alias_value":"TNC2AVNF","created_at":"2026-07-05T11:35:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TNC2AVNFOIHUWFMAMBFLPQPWDN","target":"record","payload":{"canonical_record":{"source":{"id":"2506.12430","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T10:03:17Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"f1c8f497bc6832d4e9ea31645776d3562241cdfc93d928064723750b71d767e5","abstract_canon_sha256":"20d8b568d32ce86b69df775da2558fc2701d5764746208102f48b01d8b6f7ad1"},"schema_version":"1.0"},"canonical_sha256":"9b45a055a5720f4b1580604ab7c1f61b49c66c350f5b50745c47863ce0297d68","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:35:14.544187Z","signature_b64":"jv44cpeC8Fis+Fn1h45WoTsdhwuQ0Kt343n8HN5pdF8JhsIJksetJQuJYpRV049zRsYRXIDUsCnzajYrkqieDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9b45a055a5720f4b1580604ab7c1f61b49c66c350f5b50745c47863ce0297d68","last_reissued_at":"2026-07-05T11:35:14.543647Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:35:14.543647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.12430","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:35:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P9RS+e4G+dHD6x/V33EUor2EStKl/D4VkDPo/ZGpFEONxaIu9E9Sj8/pGpicXQA89CSL9uTqAsWKX7J6Vp19AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:12:59.865781Z"},"content_sha256":"2d23f0c41557fe5c6c8b52f86d151c20792a8e08bf1d8312c09da00bbf179c54","schema_version":"1.0","event_id":"sha256:2d23f0c41557fe5c6c8b52f86d151c20792a8e08bf1d8312c09da00bbf179c54"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TNC2AVNFOIHUWFMAMBFLPQPWDN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Aishan Liu, Alan Yuille, Changting Lin, Dacheng Tao, Dawn Song, Felix Juefei-Xu, Hainan Li, Hao Du, Haotong Qin, Jiakai Wang, Jiwei Wei, Junjie Mu, Junze Chen, Kaiwen Shen, Ke Ma, Lei Chen, Meng Han, Peng Ying, Pengyu Chen, Philip Torr, Qianqian Xu, Qing Guo, Qingming Huang, Run Hao, Shangkun Wu, Shi Lin, Shixuan Sun, Shiyuan He, Siqi Lai, Siyang Wu, Siyuan Liang, Tianyuan Zhang, Xianglong Kong, Xianglong Liu, Xiangyu Yue, Xiaohai Xu, Xinyun Chen, Xun Wang, Yang Yang, Yaozhi Zheng, Yew Soon Ong, Yifei Song, Yilei Jiang, Yue Yu, Zhilei Zhu, Zonghao Ying, Zonglei Jing","submitted_at":"2025-06-14T10:03:17Z","abstract_excerpt":"Multimodal Large Language Models (MLLMs) have enabled transformative advancements across diverse applications but remain susceptible to safety threats, especially jailbreak attacks that induce harmful outputs. To systematically evaluate and improve their safety, we organized the Adversarial Testing & Large-model Alignment Safety Grand Challenge (ATLAS) 2025}. This technical report presents findings from the competition, which involved 86 teams testing MLLM vulnerabilities via adversarial image-text attacks in two phases: white-box and black-box evaluations. The competition results highlight on"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.12430","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.12430/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:35:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"elGGJGtQxvBWtQFN2rgal8BCWX2br4frkEp4p3gjkwIz9P7M5zwMINpYjfZ2rvVQNOy4MYxcp63e4rv673j+Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:12:59.866335Z"},"content_sha256":"12f8045e1a64e54d6485e26b09218bd31096a6aaf82c6367d621c81f6bd4bc41","schema_version":"1.0","event_id":"sha256:12f8045e1a64e54d6485e26b09218bd31096a6aaf82c6367d621c81f6bd4bc41"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TNC2AVNFOIHUWFMAMBFLPQPWDN/bundle.json","state_url":"https://pith.science/pith/TNC2AVNFOIHUWFMAMBFLPQPWDN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TNC2AVNFOIHUWFMAMBFLPQPWDN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T02:12:59Z","links":{"resolver":"https://pith.science/pith/TNC2AVNFOIHUWFMAMBFLPQPWDN","bundle":"https://pith.science/pith/TNC2AVNFOIHUWFMAMBFLPQPWDN/bundle.json","state":"https://pith.science/pith/TNC2AVNFOIHUWFMAMBFLPQPWDN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TNC2AVNFOIHUWFMAMBFLPQPWDN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TNC2AVNFOIHUWFMAMBFLPQPWDN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"20d8b568d32ce86b69df775da2558fc2701d5764746208102f48b01d8b6f7ad1","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T10:03:17Z","title_canon_sha256":"f1c8f497bc6832d4e9ea31645776d3562241cdfc93d928064723750b71d767e5"},"schema_version":"1.0","source":{"id":"2506.12430","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.12430","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"arxiv_version","alias_value":"2506.12430v2","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.12430","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"pith_short_12","alias_value":"TNC2AVNFOIHU","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"pith_short_16","alias_value":"TNC2AVNFOIHUWFMA","created_at":"2026-07-05T11:35:14Z"},{"alias_kind":"pith_short_8","alias_value":"TNC2AVNF","created_at":"2026-07-05T11:35:14Z"}],"graph_snapshots":[{"event_id":"sha256:12f8045e1a64e54d6485e26b09218bd31096a6aaf82c6367d621c81f6bd4bc41","target":"graph","created_at":"2026-07-05T11:35:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.12430/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal Large Language Models (MLLMs) have enabled transformative advancements across diverse applications but remain susceptible to safety threats, especially jailbreak attacks that induce harmful outputs. To systematically evaluate and improve their safety, we organized the Adversarial Testing & Large-model Alignment Safety Grand Challenge (ATLAS) 2025}. This technical report presents findings from the competition, which involved 86 teams testing MLLM vulnerabilities via adversarial image-text attacks in two phases: white-box and black-box evaluations. The competition results highlight on","authors_text":"Aishan Liu, Alan Yuille, Changting Lin, Dacheng Tao, Dawn Song, Felix Juefei-Xu, Hainan Li, Hao Du, Haotong Qin, Jiakai Wang, Jiwei Wei, Junjie Mu, Junze Chen, Kaiwen Shen, Ke Ma, Lei Chen, Meng Han, Peng Ying, Pengyu Chen, Philip Torr, Qianqian Xu, Qing Guo, Qingming Huang, Run Hao, Shangkun Wu, Shi Lin, Shixuan Sun, Shiyuan He, Siqi Lai, Siyang Wu, Siyuan Liang, Tianyuan Zhang, Xianglong Kong, Xianglong Liu, Xiangyu Yue, Xiaohai Xu, Xinyun Chen, Xun Wang, Yang Yang, Yaozhi Zheng, Yew Soon Ong, Yifei Song, Yilei Jiang, Yue Yu, Zhilei Zhu, Zonghao Ying, Zonglei Jing","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T10:03:17Z","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.12430","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2d23f0c41557fe5c6c8b52f86d151c20792a8e08bf1d8312c09da00bbf179c54","target":"record","created_at":"2026-07-05T11:35:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"20d8b568d32ce86b69df775da2558fc2701d5764746208102f48b01d8b6f7ad1","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T10:03:17Z","title_canon_sha256":"f1c8f497bc6832d4e9ea31645776d3562241cdfc93d928064723750b71d767e5"},"schema_version":"1.0","source":{"id":"2506.12430","kind":"arxiv","version":2}},"canonical_sha256":"9b45a055a5720f4b1580604ab7c1f61b49c66c350f5b50745c47863ce0297d68","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9b45a055a5720f4b1580604ab7c1f61b49c66c350f5b50745c47863ce0297d68","first_computed_at":"2026-07-05T11:35:14.543647Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:35:14.543647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jv44cpeC8Fis+Fn1h45WoTsdhwuQ0Kt343n8HN5pdF8JhsIJksetJQuJYpRV049zRsYRXIDUsCnzajYrkqieDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:35:14.544187Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.12430","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2d23f0c41557fe5c6c8b52f86d151c20792a8e08bf1d8312c09da00bbf179c54","sha256:12f8045e1a64e54d6485e26b09218bd31096a6aaf82c6367d621c81f6bd4bc41"],"state_sha256":"947e9b2587a11e0d02929ac031bcb30243fe714c027bbaf6c8f10dc3bfe19253"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O0iz80lrxO14mIHuPY5bt0ZVXHrJE+3ACAZDEvowYzSKXAAGwo+BTFZD22tmkn9LVZzafofA/+H96WS9D2KtCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T02:12:59.872063Z","bundle_sha256":"5e43d4f29c0c30adcea0d4a76cc1fed19be48063df86d84fdd9a3e6db4813fd8"}}