{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:V5E5ITRRHQUXNLTJWCT2EIXLVD","short_pith_number":"pith:V5E5ITRR","canonical_record":{"source":{"id":"2502.02438","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-04T16:04:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"985de83e7a812429ae93ab3bd42d9d99de26f5ccaa7c6f6f3263a89e1add1f8e","abstract_canon_sha256":"d59be87e0fce280914a60998bacef8d49603c70974af1bcb5b73232c5e5591ab"},"schema_version":"1.0"},"canonical_sha256":"af49d44e313c2976ae69b0a7a222eba8f2e87ed910ab3826ff9c5dd62bcad7b9","source":{"kind":"arxiv","id":"2502.02438","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.02438","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"arxiv_version","alias_value":"2502.02438v1","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.02438","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"pith_short_12","alias_value":"V5E5ITRRHQUX","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"pith_short_16","alias_value":"V5E5ITRRHQUXNLTJ","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"pith_short_8","alias_value":"V5E5ITRR","created_at":"2026-07-05T10:09:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:V5E5ITRRHQUXNLTJWCT2EIXLVD","target":"record","payload":{"canonical_record":{"source":{"id":"2502.02438","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-04T16:04:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"985de83e7a812429ae93ab3bd42d9d99de26f5ccaa7c6f6f3263a89e1add1f8e","abstract_canon_sha256":"d59be87e0fce280914a60998bacef8d49603c70974af1bcb5b73232c5e5591ab"},"schema_version":"1.0"},"canonical_sha256":"af49d44e313c2976ae69b0a7a222eba8f2e87ed910ab3826ff9c5dd62bcad7b9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:09:28.659584Z","signature_b64":"hUDmjAoZe7VasrZJrIJ9Yb+X47UZ43ZILESMgFlAv4ptjgtZ5Hz0NfyraeyQm4a5nBnGJjPOy9KqfF5g7UoMAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"af49d44e313c2976ae69b0a7a222eba8f2e87ed910ab3826ff9c5dd62bcad7b9","last_reissued_at":"2026-07-05T10:09:28.659121Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:09:28.659121Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.02438","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:09:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DSdMam8esiroE5vSGvy9EOHRUvGFGIj+EKfILwZ7QjCHeLwi5WXhHRLp6FAC9FDP+nmDHfy0sr8il67AcFeWAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:29:35.351164Z"},"content_sha256":"3c1475bd18318f2d59a4bc5e9aba7f04c43d33d951381f9844de7588cd64d5be","schema_version":"1.0","event_id":"sha256:3c1475bd18318f2d59a4bc5e9aba7f04c43d33d951381f9844de7588cd64d5be"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:V5E5ITRRHQUXNLTJWCT2EIXLVD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Medical Multimodal Model Stealing Attacks via Adversarial Domain Alignment","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Kun Yuan, Maria-Irina Nicolae, Mario Fritz, Nassir Navab, Nicolas Padoy, Yaling Shen, Zhixiong Zhuang","submitted_at":"2025-02-04T16:04:48Z","abstract_excerpt":"Medical multimodal large language models (MLLMs) are becoming an instrumental part of healthcare systems, assisting medical personnel with decision making and results analysis. Models for radiology report generation are able to interpret medical imagery, thus reducing the workload of radiologists. As medical data is scarce and protected by privacy regulations, medical MLLMs represent valuable intellectual property. However, these assets are potentially vulnerable to model stealing, where attackers aim to replicate their functionality via black-box access. So far, model stealing for the medical"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.02438","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.02438/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:09:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qVni1FxEdHr/jAQ6dLx1y6i7Yf4PPLqH4Wl4qaklZQ+yf6FFFdu3tKUryTC/li4uEIGHKM8gP35GypryiDW1Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:29:35.352512Z"},"content_sha256":"eecb833c25ddaa153839d7c9db405ce02da67754ffa483d7fcbb820594046d1e","schema_version":"1.0","event_id":"sha256:eecb833c25ddaa153839d7c9db405ce02da67754ffa483d7fcbb820594046d1e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V5E5ITRRHQUXNLTJWCT2EIXLVD/bundle.json","state_url":"https://pith.science/pith/V5E5ITRRHQUXNLTJWCT2EIXLVD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V5E5ITRRHQUXNLTJWCT2EIXLVD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T08:29:35Z","links":{"resolver":"https://pith.science/pith/V5E5ITRRHQUXNLTJWCT2EIXLVD","bundle":"https://pith.science/pith/V5E5ITRRHQUXNLTJWCT2EIXLVD/bundle.json","state":"https://pith.science/pith/V5E5ITRRHQUXNLTJWCT2EIXLVD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V5E5ITRRHQUXNLTJWCT2EIXLVD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:V5E5ITRRHQUXNLTJWCT2EIXLVD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d59be87e0fce280914a60998bacef8d49603c70974af1bcb5b73232c5e5591ab","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-04T16:04:48Z","title_canon_sha256":"985de83e7a812429ae93ab3bd42d9d99de26f5ccaa7c6f6f3263a89e1add1f8e"},"schema_version":"1.0","source":{"id":"2502.02438","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.02438","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"arxiv_version","alias_value":"2502.02438v1","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.02438","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"pith_short_12","alias_value":"V5E5ITRRHQUX","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"pith_short_16","alias_value":"V5E5ITRRHQUXNLTJ","created_at":"2026-07-05T10:09:28Z"},{"alias_kind":"pith_short_8","alias_value":"V5E5ITRR","created_at":"2026-07-05T10:09:28Z"}],"graph_snapshots":[{"event_id":"sha256:eecb833c25ddaa153839d7c9db405ce02da67754ffa483d7fcbb820594046d1e","target":"graph","created_at":"2026-07-05T10:09:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.02438/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Medical multimodal large language models (MLLMs) are becoming an instrumental part of healthcare systems, assisting medical personnel with decision making and results analysis. Models for radiology report generation are able to interpret medical imagery, thus reducing the workload of radiologists. As medical data is scarce and protected by privacy regulations, medical MLLMs represent valuable intellectual property. However, these assets are potentially vulnerable to model stealing, where attackers aim to replicate their functionality via black-box access. So far, model stealing for the medical","authors_text":"Kun Yuan, Maria-Irina Nicolae, Mario Fritz, Nassir Navab, Nicolas Padoy, Yaling Shen, Zhixiong Zhuang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-04T16:04:48Z","title":"Medical Multimodal Model Stealing Attacks via Adversarial Domain Alignment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.02438","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3c1475bd18318f2d59a4bc5e9aba7f04c43d33d951381f9844de7588cd64d5be","target":"record","created_at":"2026-07-05T10:09:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d59be87e0fce280914a60998bacef8d49603c70974af1bcb5b73232c5e5591ab","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-04T16:04:48Z","title_canon_sha256":"985de83e7a812429ae93ab3bd42d9d99de26f5ccaa7c6f6f3263a89e1add1f8e"},"schema_version":"1.0","source":{"id":"2502.02438","kind":"arxiv","version":1}},"canonical_sha256":"af49d44e313c2976ae69b0a7a222eba8f2e87ed910ab3826ff9c5dd62bcad7b9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af49d44e313c2976ae69b0a7a222eba8f2e87ed910ab3826ff9c5dd62bcad7b9","first_computed_at":"2026-07-05T10:09:28.659121Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:09:28.659121Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hUDmjAoZe7VasrZJrIJ9Yb+X47UZ43ZILESMgFlAv4ptjgtZ5Hz0NfyraeyQm4a5nBnGJjPOy9KqfF5g7UoMAw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:09:28.659584Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.02438","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3c1475bd18318f2d59a4bc5e9aba7f04c43d33d951381f9844de7588cd64d5be","sha256:eecb833c25ddaa153839d7c9db405ce02da67754ffa483d7fcbb820594046d1e"],"state_sha256":"bf0a916187d02aa06df6c9780ed08bb46f46213ffac2b57d6a4fc83ceed3c4cc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OvjJTywiOV5KBNauh8yLd4sj3uTBwqArVcyXdhI/b523ch+7AQhoBKm3dvFeH7imrtQoRi9ePwSwryyq7JSoAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T08:29:35.360018Z","bundle_sha256":"79cd522ba790cf321f48059e7bb30ad153064d98d26e8150aa5fa4c290794bf3"}}