{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:UEPQ4XJQJ5TWEJ75UNFTSDVS2V","short_pith_number":"pith:UEPQ4XJQ","canonical_record":{"source":{"id":"2606.25376","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-24T04:09:57Z","cross_cats_sorted":[],"title_canon_sha256":"03ef1526bd18fd06638ecd6f962d675bb5b926840778fc3cb2468a974b92c8ef","abstract_canon_sha256":"6450d31393f169cab61e0e0784ab0a3f4c2210f2c5ccc45f318438af6f505c96"},"schema_version":"1.0"},"canonical_sha256":"a11f0e5d304f676227fda34b390eb2d547327cad7c5bd16d920e87eb0a5f3d36","source":{"kind":"arxiv","id":"2606.25376","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.25376","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"arxiv_version","alias_value":"2606.25376v1","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.25376","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"pith_short_12","alias_value":"UEPQ4XJQJ5TW","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"pith_short_16","alias_value":"UEPQ4XJQJ5TWEJ75","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"pith_short_8","alias_value":"UEPQ4XJQ","created_at":"2026-06-25T01:18:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:UEPQ4XJQJ5TWEJ75UNFTSDVS2V","target":"record","payload":{"canonical_record":{"source":{"id":"2606.25376","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-24T04:09:57Z","cross_cats_sorted":[],"title_canon_sha256":"03ef1526bd18fd06638ecd6f962d675bb5b926840778fc3cb2468a974b92c8ef","abstract_canon_sha256":"6450d31393f169cab61e0e0784ab0a3f4c2210f2c5ccc45f318438af6f505c96"},"schema_version":"1.0"},"canonical_sha256":"a11f0e5d304f676227fda34b390eb2d547327cad7c5bd16d920e87eb0a5f3d36","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-25T01:18:03.635798Z","signature_b64":"rnrrDE8oTV6k87qhgGhADfMuCxS5SqFAntjfUHc+lUWQfE4GaLvDyr9oCg0TEzI7gjbLZY4C3C3vuS0a9fxgBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a11f0e5d304f676227fda34b390eb2d547327cad7c5bd16d920e87eb0a5f3d36","last_reissued_at":"2026-06-25T01:18:03.635364Z","signature_status":"signed_v1","first_computed_at":"2026-06-25T01:18:03.635364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.25376","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:18:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R+g11J9b72clvl1v5FOxSgDA+XH5CEyr8cc9I5Ym38tbz9YbgT772tse8/1pndRfuBy4MsjPUZJWchOgPlikDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:53:08.656549Z"},"content_sha256":"f106c751fd2db592f7d5a7ba84f0d52630ba13e445cccab9817c409e48f2eea0","schema_version":"1.0","event_id":"sha256:f106c751fd2db592f7d5a7ba84f0d52630ba13e445cccab9817c409e48f2eea0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:UEPQ4XJQJ5TWEJ75UNFTSDVS2V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Transferable Attack against Face Swapping in an Extended Space","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Adams Wai-Kin Kong, Hong Xu, Jun Xie, Mingzhi Lyu, Yi Huang, Zihao Zhao","submitted_at":"2026-06-24T04:09:57Z","abstract_excerpt":"Although deep Face Swapping (FS) models may benefit the entertainment industry, they pose severe threats to privacy and security. Existing protections, including deepfake detection and adversarial perturbation, are either passive responses or ineffective to unseen subject-agnostic FS models. In this paper, we propose a transferable attack against subject-agnostic FS models named Additive Identity attack based on a Relighting function (AIR). AIR leverages reillumination and additive perturbations to mislead the identity extraction modules in subject-agnostic FS models. By using these two types "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.25376","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.25376/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:18:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hQkLZ4IlOw3WG82+QyLZhg6DZTL4fRsmVwdebWjXKVnSVflZWl/zQXvYB/uS5bDAEoFcuwyEQpK0F2P91uaBAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:53:08.657071Z"},"content_sha256":"3dbe7581dfe5b16f8f5b481262fe679fb806c1a29ea7b65cba403ee0548ef253","schema_version":"1.0","event_id":"sha256:3dbe7581dfe5b16f8f5b481262fe679fb806c1a29ea7b65cba403ee0548ef253"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UEPQ4XJQJ5TWEJ75UNFTSDVS2V/bundle.json","state_url":"https://pith.science/pith/UEPQ4XJQJ5TWEJ75UNFTSDVS2V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UEPQ4XJQJ5TWEJ75UNFTSDVS2V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T18:53:08Z","links":{"resolver":"https://pith.science/pith/UEPQ4XJQJ5TWEJ75UNFTSDVS2V","bundle":"https://pith.science/pith/UEPQ4XJQJ5TWEJ75UNFTSDVS2V/bundle.json","state":"https://pith.science/pith/UEPQ4XJQJ5TWEJ75UNFTSDVS2V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UEPQ4XJQJ5TWEJ75UNFTSDVS2V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:UEPQ4XJQJ5TWEJ75UNFTSDVS2V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6450d31393f169cab61e0e0784ab0a3f4c2210f2c5ccc45f318438af6f505c96","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-24T04:09:57Z","title_canon_sha256":"03ef1526bd18fd06638ecd6f962d675bb5b926840778fc3cb2468a974b92c8ef"},"schema_version":"1.0","source":{"id":"2606.25376","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.25376","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"arxiv_version","alias_value":"2606.25376v1","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.25376","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"pith_short_12","alias_value":"UEPQ4XJQJ5TW","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"pith_short_16","alias_value":"UEPQ4XJQJ5TWEJ75","created_at":"2026-06-25T01:18:03Z"},{"alias_kind":"pith_short_8","alias_value":"UEPQ4XJQ","created_at":"2026-06-25T01:18:03Z"}],"graph_snapshots":[{"event_id":"sha256:3dbe7581dfe5b16f8f5b481262fe679fb806c1a29ea7b65cba403ee0548ef253","target":"graph","created_at":"2026-06-25T01:18:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.25376/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Although deep Face Swapping (FS) models may benefit the entertainment industry, they pose severe threats to privacy and security. Existing protections, including deepfake detection and adversarial perturbation, are either passive responses or ineffective to unseen subject-agnostic FS models. In this paper, we propose a transferable attack against subject-agnostic FS models named Additive Identity attack based on a Relighting function (AIR). AIR leverages reillumination and additive perturbations to mislead the identity extraction modules in subject-agnostic FS models. By using these two types ","authors_text":"Adams Wai-Kin Kong, Hong Xu, Jun Xie, Mingzhi Lyu, Yi Huang, Zihao Zhao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-24T04:09:57Z","title":"Transferable Attack against Face Swapping in an Extended Space"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.25376","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f106c751fd2db592f7d5a7ba84f0d52630ba13e445cccab9817c409e48f2eea0","target":"record","created_at":"2026-06-25T01:18:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6450d31393f169cab61e0e0784ab0a3f4c2210f2c5ccc45f318438af6f505c96","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-24T04:09:57Z","title_canon_sha256":"03ef1526bd18fd06638ecd6f962d675bb5b926840778fc3cb2468a974b92c8ef"},"schema_version":"1.0","source":{"id":"2606.25376","kind":"arxiv","version":1}},"canonical_sha256":"a11f0e5d304f676227fda34b390eb2d547327cad7c5bd16d920e87eb0a5f3d36","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a11f0e5d304f676227fda34b390eb2d547327cad7c5bd16d920e87eb0a5f3d36","first_computed_at":"2026-06-25T01:18:03.635364Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-25T01:18:03.635364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rnrrDE8oTV6k87qhgGhADfMuCxS5SqFAntjfUHc+lUWQfE4GaLvDyr9oCg0TEzI7gjbLZY4C3C3vuS0a9fxgBw==","signature_status":"signed_v1","signed_at":"2026-06-25T01:18:03.635798Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.25376","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f106c751fd2db592f7d5a7ba84f0d52630ba13e445cccab9817c409e48f2eea0","sha256:3dbe7581dfe5b16f8f5b481262fe679fb806c1a29ea7b65cba403ee0548ef253"],"state_sha256":"d3cd321777355cc8da3f47686e31de4f42a9673db111166c99e1a63fdb827de6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wnc6aFxBrmxiKL7eietkILbtdSGwSqZuOnxOU4xTz8CsZoLxYwexLYXUtqIeWzxH0renI6wmC+0L4SuCOqm+CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T18:53:08.661240Z","bundle_sha256":"cdb0f58c3c6387c3e455036db5a2fc8d1f36515ecc6f129574ceab807a664d6f"}}