{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:VJRUXDLXQONOQZ7RYC2BQW3OM4","short_pith_number":"pith:VJRUXDLX","canonical_record":{"source":{"id":"2607.04474","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T19:38:18Z","cross_cats_sorted":[],"title_canon_sha256":"f5b02986a613c7ff04963181f205cff3599241bbb1aa2efbdbd53cc2fc4ea1e9","abstract_canon_sha256":"ad8ef27c86d79337bf665a665e3bebfb8e2dbc019ae27e54df4a3215f666b7c8"},"schema_version":"1.0"},"canonical_sha256":"aa634b8d77839ae867f1c0b4185b6e673328704a6300b6b652b9e30cd91ba529","source":{"kind":"arxiv","id":"2607.04474","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.04474","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"arxiv_version","alias_value":"2607.04474v1","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.04474","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"pith_short_12","alias_value":"VJRUXDLXQONO","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"pith_short_16","alias_value":"VJRUXDLXQONOQZ7R","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"pith_short_8","alias_value":"VJRUXDLX","created_at":"2026-07-07T02:19:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:VJRUXDLXQONOQZ7RYC2BQW3OM4","target":"record","payload":{"canonical_record":{"source":{"id":"2607.04474","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T19:38:18Z","cross_cats_sorted":[],"title_canon_sha256":"f5b02986a613c7ff04963181f205cff3599241bbb1aa2efbdbd53cc2fc4ea1e9","abstract_canon_sha256":"ad8ef27c86d79337bf665a665e3bebfb8e2dbc019ae27e54df4a3215f666b7c8"},"schema_version":"1.0"},"canonical_sha256":"aa634b8d77839ae867f1c0b4185b6e673328704a6300b6b652b9e30cd91ba529","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T02:19:20.943743Z","signature_b64":"4My8ubf/y0Ohz/ggbI5mvajy1VMecmlX4Yp5bTepC7cZQ2EuoZATY9dhqQMfE4YJ1Ynp6KikgBEGscm5RWArCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"aa634b8d77839ae867f1c0b4185b6e673328704a6300b6b652b9e30cd91ba529","last_reissued_at":"2026-07-07T02:19:20.943140Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T02:19:20.943140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.04474","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:19:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9+I5Ml9XKij5AQH4AumOiilyvVosQzyOcQ17JD3bxmr7T4PO6kRqrosyHs/XyEfdohqeXBxnZdY9Mv7jozArDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T19:26:41.413437Z"},"content_sha256":"0fbe7931c1d862c6f43fc098a99216e86b6620272edb95c324dc71e68680114a","schema_version":"1.0","event_id":"sha256:0fbe7931c1d862c6f43fc098a99216e86b6620272edb95c324dc71e68680114a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:VJRUXDLXQONOQZ7RYC2BQW3OM4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AMRM-Pure: Semantic-Preserving Adversarial Purification","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dinggen Zhang, Dongfei Cui, Jun Yan, Qinjian Zhao, Shufei Zhang, Weida Wang, Zeke Xie, Zhihao Dou, Zhiqiang Gao","submitted_at":"2026-07-05T19:38:18Z","abstract_excerpt":"Adversarial purification is a defense technique that employs generative models to remove adversarial perturbations. Current methods often rely on powerful generators, typically diffusion models, and focus on reducing the gap between adversarial and clean samples in the feature space, while overlooking semantic correlation within a single sample. To address this issue, we explore adversarial purification from the perspective of preserving semantic relationships among image patches. We employ an Attentive Mask Reconstruction Model (AMRM), which shows superior performance. Our theoretical and exp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.04474","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.04474/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:19:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zEHK5u506mnbmIF4L1CHijloWEFoCcZIkrLHViT11dPkJCLazYYenCBfHABaC4G9M4MT4hOtHSRj4oTGJnBtDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T19:26:41.414110Z"},"content_sha256":"09c0f012f61b64577d422d4de7d972d39c9228be058637054c8e44f5581e8b89","schema_version":"1.0","event_id":"sha256:09c0f012f61b64577d422d4de7d972d39c9228be058637054c8e44f5581e8b89"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VJRUXDLXQONOQZ7RYC2BQW3OM4/bundle.json","state_url":"https://pith.science/pith/VJRUXDLXQONOQZ7RYC2BQW3OM4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VJRUXDLXQONOQZ7RYC2BQW3OM4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T19:26:41Z","links":{"resolver":"https://pith.science/pith/VJRUXDLXQONOQZ7RYC2BQW3OM4","bundle":"https://pith.science/pith/VJRUXDLXQONOQZ7RYC2BQW3OM4/bundle.json","state":"https://pith.science/pith/VJRUXDLXQONOQZ7RYC2BQW3OM4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VJRUXDLXQONOQZ7RYC2BQW3OM4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:VJRUXDLXQONOQZ7RYC2BQW3OM4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad8ef27c86d79337bf665a665e3bebfb8e2dbc019ae27e54df4a3215f666b7c8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T19:38:18Z","title_canon_sha256":"f5b02986a613c7ff04963181f205cff3599241bbb1aa2efbdbd53cc2fc4ea1e9"},"schema_version":"1.0","source":{"id":"2607.04474","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.04474","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"arxiv_version","alias_value":"2607.04474v1","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.04474","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"pith_short_12","alias_value":"VJRUXDLXQONO","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"pith_short_16","alias_value":"VJRUXDLXQONOQZ7R","created_at":"2026-07-07T02:19:20Z"},{"alias_kind":"pith_short_8","alias_value":"VJRUXDLX","created_at":"2026-07-07T02:19:20Z"}],"graph_snapshots":[{"event_id":"sha256:09c0f012f61b64577d422d4de7d972d39c9228be058637054c8e44f5581e8b89","target":"graph","created_at":"2026-07-07T02:19:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.04474/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial purification is a defense technique that employs generative models to remove adversarial perturbations. Current methods often rely on powerful generators, typically diffusion models, and focus on reducing the gap between adversarial and clean samples in the feature space, while overlooking semantic correlation within a single sample. To address this issue, we explore adversarial purification from the perspective of preserving semantic relationships among image patches. We employ an Attentive Mask Reconstruction Model (AMRM), which shows superior performance. Our theoretical and exp","authors_text":"Dinggen Zhang, Dongfei Cui, Jun Yan, Qinjian Zhao, Shufei Zhang, Weida Wang, Zeke Xie, Zhihao Dou, Zhiqiang Gao","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T19:38:18Z","title":"AMRM-Pure: Semantic-Preserving Adversarial Purification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.04474","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0fbe7931c1d862c6f43fc098a99216e86b6620272edb95c324dc71e68680114a","target":"record","created_at":"2026-07-07T02:19:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad8ef27c86d79337bf665a665e3bebfb8e2dbc019ae27e54df4a3215f666b7c8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T19:38:18Z","title_canon_sha256":"f5b02986a613c7ff04963181f205cff3599241bbb1aa2efbdbd53cc2fc4ea1e9"},"schema_version":"1.0","source":{"id":"2607.04474","kind":"arxiv","version":1}},"canonical_sha256":"aa634b8d77839ae867f1c0b4185b6e673328704a6300b6b652b9e30cd91ba529","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aa634b8d77839ae867f1c0b4185b6e673328704a6300b6b652b9e30cd91ba529","first_computed_at":"2026-07-07T02:19:20.943140Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T02:19:20.943140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4My8ubf/y0Ohz/ggbI5mvajy1VMecmlX4Yp5bTepC7cZQ2EuoZATY9dhqQMfE4YJ1Ynp6KikgBEGscm5RWArCA==","signature_status":"signed_v1","signed_at":"2026-07-07T02:19:20.943743Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.04474","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0fbe7931c1d862c6f43fc098a99216e86b6620272edb95c324dc71e68680114a","sha256:09c0f012f61b64577d422d4de7d972d39c9228be058637054c8e44f5581e8b89"],"state_sha256":"f86735e0f5d7325682128a54f7ec2d677c2c6eb399254a463aaafe7c927ab608"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xzx6B2DoQMRRpCEMYaxc9PkNABO/0Qv+dBqhb2VEhhXDsky00LfiedZezHUgGAYvhuppYHJ/Czx24m8mqcr3CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T19:26:41.419749Z","bundle_sha256":"afe86d4667e370a26196e8b9f23e74957f370462d8d41b281703cfbd0b8c2b76"}}