{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:UCCZANFWN2N3MRQFJU3R5UTG7C","short_pith_number":"pith:UCCZANFW","canonical_record":{"source":{"id":"2607.15657","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T06:05:17Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"1568a4aa8056280dd8f32c7caf8c03f6667d871fe5f7fba3f0c034bdc9845fe1","abstract_canon_sha256":"e71497772a0ca73ca18f41c5b3f9c168856803f41f23fbdd74ddf19531289d29"},"schema_version":"1.0"},"canonical_sha256":"a0859034b66e9bb646054d371ed266f89c7a2db601c1f8e507a5fbea7f5b74b2","source":{"kind":"arxiv","id":"2607.15657","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15657","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15657v1","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15657","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"pith_short_12","alias_value":"UCCZANFWN2N3","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"pith_short_16","alias_value":"UCCZANFWN2N3MRQF","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"pith_short_8","alias_value":"UCCZANFW","created_at":"2026-07-20T01:19:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:UCCZANFWN2N3MRQFJU3R5UTG7C","target":"record","payload":{"canonical_record":{"source":{"id":"2607.15657","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T06:05:17Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"1568a4aa8056280dd8f32c7caf8c03f6667d871fe5f7fba3f0c034bdc9845fe1","abstract_canon_sha256":"e71497772a0ca73ca18f41c5b3f9c168856803f41f23fbdd74ddf19531289d29"},"schema_version":"1.0"},"canonical_sha256":"a0859034b66e9bb646054d371ed266f89c7a2db601c1f8e507a5fbea7f5b74b2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-20T01:19:02.566751Z","signature_b64":"+Iyd8owb2zet+BSVUakj3o3D6fYgM895wsKsaS9oe/EWo9g9EC0OPoaMmXmWuZSZN92buiaIpcvLskJJ4JpZAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a0859034b66e9bb646054d371ed266f89c7a2db601c1f8e507a5fbea7f5b74b2","last_reissued_at":"2026-07-20T01:19:02.565900Z","signature_status":"signed_v1","first_computed_at":"2026-07-20T01:19:02.565900Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.15657","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T01:19:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"opAxxePuDM5TVxSzZJq9L4+S3tV8SufTejFd0l/otVZRegRA1qycdYnNGc0SM6rF9CCGFPLhkbYOZx+eDNVYAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:26:06.873894Z"},"content_sha256":"02e56d359db1860a7897f7e4b578a5552f07befe5f2213b140d68597cdd6cf95","schema_version":"1.0","event_id":"sha256:02e56d359db1860a7897f7e4b578a5552f07befe5f2213b140d68597cdd6cf95"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:UCCZANFWN2N3MRQFJU3R5UTG7C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Halima Bouzidi, Mboutidem Ekemini Mkpong, Mohammad Abdullah Al Faruque","submitted_at":"2026-07-17T06:05:17Z","abstract_excerpt":"Multimodal AI agents increasingly rely on persistent long-term memory to ground generation in past visual and textual episodes. We show that unconditional trust in visual data creates a critical vulnerability. We propose Lucid, a black-box adversarial framework that compromises multimodal memory pipelines under a strictly image-bounded threat model, requiring no access to the target MLLM, target retrieval encoder, or the text channel. Lucid crafts imperceptible perturbations to enable two distinct failure modes based on the availability of historical context: (1) Memory poisoning, an in-contex"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15657","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.15657/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T01:19:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Mm5RDf5gB0+qNtyD8ooepgQLU6JICv27IXxpzg1t5AyS66jmc9s3PFlloaWZEjpCXkkHbZVls+5Dedj6dvCgCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:26:06.874521Z"},"content_sha256":"abbb308ea127eb575b5fb2245be4fb9cd4305a23828e31bbed38ae61fcecaa96","schema_version":"1.0","event_id":"sha256:abbb308ea127eb575b5fb2245be4fb9cd4305a23828e31bbed38ae61fcecaa96"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UCCZANFWN2N3MRQFJU3R5UTG7C/bundle.json","state_url":"https://pith.science/pith/UCCZANFWN2N3MRQFJU3R5UTG7C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UCCZANFWN2N3MRQFJU3R5UTG7C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:26:06Z","links":{"resolver":"https://pith.science/pith/UCCZANFWN2N3MRQFJU3R5UTG7C","bundle":"https://pith.science/pith/UCCZANFWN2N3MRQFJU3R5UTG7C/bundle.json","state":"https://pith.science/pith/UCCZANFWN2N3MRQFJU3R5UTG7C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UCCZANFWN2N3MRQFJU3R5UTG7C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:UCCZANFWN2N3MRQFJU3R5UTG7C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e71497772a0ca73ca18f41c5b3f9c168856803f41f23fbdd74ddf19531289d29","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T06:05:17Z","title_canon_sha256":"1568a4aa8056280dd8f32c7caf8c03f6667d871fe5f7fba3f0c034bdc9845fe1"},"schema_version":"1.0","source":{"id":"2607.15657","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15657","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15657v1","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15657","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"pith_short_12","alias_value":"UCCZANFWN2N3","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"pith_short_16","alias_value":"UCCZANFWN2N3MRQF","created_at":"2026-07-20T01:19:02Z"},{"alias_kind":"pith_short_8","alias_value":"UCCZANFW","created_at":"2026-07-20T01:19:02Z"}],"graph_snapshots":[{"event_id":"sha256:abbb308ea127eb575b5fb2245be4fb9cd4305a23828e31bbed38ae61fcecaa96","target":"graph","created_at":"2026-07-20T01:19:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.15657/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal AI agents increasingly rely on persistent long-term memory to ground generation in past visual and textual episodes. We show that unconditional trust in visual data creates a critical vulnerability. We propose Lucid, a black-box adversarial framework that compromises multimodal memory pipelines under a strictly image-bounded threat model, requiring no access to the target MLLM, target retrieval encoder, or the text channel. Lucid crafts imperceptible perturbations to enable two distinct failure modes based on the availability of historical context: (1) Memory poisoning, an in-contex","authors_text":"Halima Bouzidi, Mboutidem Ekemini Mkpong, Mohammad Abdullah Al Faruque","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15657","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:02e56d359db1860a7897f7e4b578a5552f07befe5f2213b140d68597cdd6cf95","target":"record","created_at":"2026-07-20T01:19:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e71497772a0ca73ca18f41c5b3f9c168856803f41f23fbdd74ddf19531289d29","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T06:05:17Z","title_canon_sha256":"1568a4aa8056280dd8f32c7caf8c03f6667d871fe5f7fba3f0c034bdc9845fe1"},"schema_version":"1.0","source":{"id":"2607.15657","kind":"arxiv","version":1}},"canonical_sha256":"a0859034b66e9bb646054d371ed266f89c7a2db601c1f8e507a5fbea7f5b74b2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a0859034b66e9bb646054d371ed266f89c7a2db601c1f8e507a5fbea7f5b74b2","first_computed_at":"2026-07-20T01:19:02.565900Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-20T01:19:02.565900Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+Iyd8owb2zet+BSVUakj3o3D6fYgM895wsKsaS9oe/EWo9g9EC0OPoaMmXmWuZSZN92buiaIpcvLskJJ4JpZAw==","signature_status":"signed_v1","signed_at":"2026-07-20T01:19:02.566751Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.15657","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:02e56d359db1860a7897f7e4b578a5552f07befe5f2213b140d68597cdd6cf95","sha256:abbb308ea127eb575b5fb2245be4fb9cd4305a23828e31bbed38ae61fcecaa96"],"state_sha256":"7335f7319cd95bfc064f666b74439518bccaed25b17b590b705933dc3152cc17"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aPaLLve5oGPCaUhF8a9Tf+RJ5FFOMU85RE+2LZXp+WXjjyWuB1VmdNYkWYjgekto8SGN5Fdnef/zmm5eii91DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:26:06.878541Z","bundle_sha256":"9de1568aff874fffaac962161d50e077469ea0ce188ccebb3037cc4f8d8bca88"}}