{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:TRGTGNWB7S2X3J6E4C2C6R4ZKI","short_pith_number":"pith:TRGTGNWB","canonical_record":{"source":{"id":"2601.19210","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-01-27T05:24:45Z","cross_cats_sorted":[],"title_canon_sha256":"a389468f6e2ffa948f30a2792a8c1f974a730e4534d182d7065ca00f84c3ad70","abstract_canon_sha256":"6704bf4fe58e58151d9d35036e5d6e1f35e5d603478eec789b28c8435a44b7dd"},"schema_version":"1.0"},"canonical_sha256":"9c4d3336c1fcb57da7c4e0b42f4799522a02b496628814d2e980f0eb78a437ed","source":{"kind":"arxiv","id":"2601.19210","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2601.19210","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"arxiv_version","alias_value":"2601.19210v2","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2601.19210","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"pith_short_12","alias_value":"TRGTGNWB7S2X","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"pith_short_16","alias_value":"TRGTGNWB7S2X3J6E","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"pith_short_8","alias_value":"TRGTGNWB","created_at":"2026-06-10T01:10:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:TRGTGNWB7S2X3J6E4C2C6R4ZKI","target":"record","payload":{"canonical_record":{"source":{"id":"2601.19210","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-01-27T05:24:45Z","cross_cats_sorted":[],"title_canon_sha256":"a389468f6e2ffa948f30a2792a8c1f974a730e4534d182d7065ca00f84c3ad70","abstract_canon_sha256":"6704bf4fe58e58151d9d35036e5d6e1f35e5d603478eec789b28c8435a44b7dd"},"schema_version":"1.0"},"canonical_sha256":"9c4d3336c1fcb57da7c4e0b42f4799522a02b496628814d2e980f0eb78a437ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-10T01:10:59.158438Z","signature_b64":"PKobZM95mHzkQeyhjYigOGyZAsq4+dbkaM2aHtAJXyLUqXM4h8FbEdQ2zLcz8A4P31Lf7+KAkHSZGKJp/D0eDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9c4d3336c1fcb57da7c4e0b42f4799522a02b496628814d2e980f0eb78a437ed","last_reissued_at":"2026-06-10T01:10:59.157305Z","signature_status":"signed_v1","first_computed_at":"2026-06-10T01:10:59.157305Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2601.19210","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-10T01:10:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3yrMiVAqobcbA+58yMVo1T6laKz2hUqxpiWZ3wY2dc1Z8J3u4sdMPSfegJMaw4Mwlfn/1suX9OicH9+wS6imAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T13:55:55.126510Z"},"content_sha256":"a77e6674718f2241bc3f19d5ab34be8f1d38f09e79aaf5a4cc0bd7c8b07aa289","schema_version":"1.0","event_id":"sha256:a77e6674718f2241bc3f19d5ab34be8f1d38f09e79aaf5a4cc0bd7c8b07aa289"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:TRGTGNWB7S2X3J6E4C2C6R4ZKI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jie Zhang, Sen Nie, Shiguang Shan, Xilin Chen, Zhuo Wang","submitted_at":"2026-01-27T05:24:45Z","abstract_excerpt":"Vision-language models (VLMs) such as CLIP have demonstrated remarkable zero-shot generalization, yet remain highly vulnerable to adversarial examples (AEs). While test-time defenses are promising, existing methods fail to provide sufficient robustness against strong attacks and are often hampered by high inference latency and task-specific applicability. To address these limitations, we start by investigating the intrinsic properties of AEs, which reveals that AEs exhibit severe feature inconsistency under progressive frequency attenuation. We further attribute this to the model's inherent sp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2601.19210","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2601.19210/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-10T01:10:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MgCO7BM5o94fA6VYuhZSRu3385v0WuqSLxVgqUDOODa5tHaeJy+OVKq13ruuzGo3kPQ0VXydgi2XP3tFhUmlCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T13:55:55.130613Z"},"content_sha256":"2f3d2657fd68843ea0f9b9489957ae85b5e56ed48e1602c5cf62ca6e5ad5ab66","schema_version":"1.0","event_id":"sha256:2f3d2657fd68843ea0f9b9489957ae85b5e56ed48e1602c5cf62ca6e5ad5ab66"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TRGTGNWB7S2X3J6E4C2C6R4ZKI/bundle.json","state_url":"https://pith.science/pith/TRGTGNWB7S2X3J6E4C2C6R4ZKI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TRGTGNWB7S2X3J6E4C2C6R4ZKI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T13:55:55Z","links":{"resolver":"https://pith.science/pith/TRGTGNWB7S2X3J6E4C2C6R4ZKI","bundle":"https://pith.science/pith/TRGTGNWB7S2X3J6E4C2C6R4ZKI/bundle.json","state":"https://pith.science/pith/TRGTGNWB7S2X3J6E4C2C6R4ZKI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TRGTGNWB7S2X3J6E4C2C6R4ZKI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:TRGTGNWB7S2X3J6E4C2C6R4ZKI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6704bf4fe58e58151d9d35036e5d6e1f35e5d603478eec789b28c8435a44b7dd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-01-27T05:24:45Z","title_canon_sha256":"a389468f6e2ffa948f30a2792a8c1f974a730e4534d182d7065ca00f84c3ad70"},"schema_version":"1.0","source":{"id":"2601.19210","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2601.19210","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"arxiv_version","alias_value":"2601.19210v2","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2601.19210","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"pith_short_12","alias_value":"TRGTGNWB7S2X","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"pith_short_16","alias_value":"TRGTGNWB7S2X3J6E","created_at":"2026-06-10T01:10:59Z"},{"alias_kind":"pith_short_8","alias_value":"TRGTGNWB","created_at":"2026-06-10T01:10:59Z"}],"graph_snapshots":[{"event_id":"sha256:2f3d2657fd68843ea0f9b9489957ae85b5e56ed48e1602c5cf62ca6e5ad5ab66","target":"graph","created_at":"2026-06-10T01:10:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2601.19210/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-language models (VLMs) such as CLIP have demonstrated remarkable zero-shot generalization, yet remain highly vulnerable to adversarial examples (AEs). While test-time defenses are promising, existing methods fail to provide sufficient robustness against strong attacks and are often hampered by high inference latency and task-specific applicability. To address these limitations, we start by investigating the intrinsic properties of AEs, which reveals that AEs exhibit severe feature inconsistency under progressive frequency attenuation. We further attribute this to the model's inherent sp","authors_text":"Jie Zhang, Sen Nie, Shiguang Shan, Xilin Chen, Zhuo Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2601.19210","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a77e6674718f2241bc3f19d5ab34be8f1d38f09e79aaf5a4cc0bd7c8b07aa289","target":"record","created_at":"2026-06-10T01:10:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6704bf4fe58e58151d9d35036e5d6e1f35e5d603478eec789b28c8435a44b7dd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-01-27T05:24:45Z","title_canon_sha256":"a389468f6e2ffa948f30a2792a8c1f974a730e4534d182d7065ca00f84c3ad70"},"schema_version":"1.0","source":{"id":"2601.19210","kind":"arxiv","version":2}},"canonical_sha256":"9c4d3336c1fcb57da7c4e0b42f4799522a02b496628814d2e980f0eb78a437ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9c4d3336c1fcb57da7c4e0b42f4799522a02b496628814d2e980f0eb78a437ed","first_computed_at":"2026-06-10T01:10:59.157305Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-10T01:10:59.157305Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PKobZM95mHzkQeyhjYigOGyZAsq4+dbkaM2aHtAJXyLUqXM4h8FbEdQ2zLcz8A4P31Lf7+KAkHSZGKJp/D0eDg==","signature_status":"signed_v1","signed_at":"2026-06-10T01:10:59.158438Z","signed_message":"canonical_sha256_bytes"},"source_id":"2601.19210","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a77e6674718f2241bc3f19d5ab34be8f1d38f09e79aaf5a4cc0bd7c8b07aa289","sha256:2f3d2657fd68843ea0f9b9489957ae85b5e56ed48e1602c5cf62ca6e5ad5ab66"],"state_sha256":"5486a9f50549f8c0c1aa7e8779f5c2453502661e0eb3fec7162090738c8a9577"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rphSVpJcGxZNXyGEKch5lOJux/CgqFOmKtQXlvcI2OIdzSiIMPx+IWJvDe8gAxLsNxvPsGBYyZ1kpdr/zteQAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T13:55:55.150716Z","bundle_sha256":"c9d11705376851b2de5e8555049261c819637e01b17c24e12ed3e5d545eabbe9"}}