{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:VPIPNJXDXQ674WLE2DVZZVTYXJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cd4d8d8cdb4e898090f71ca2fd51250a6b373ff8dffa78111a8e40bdb67b0759","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-17T04:19:19Z","title_canon_sha256":"63447ae4dc6191e974a3965db4d5a5086105f872618daf68f9cada400069d512"},"schema_version":"1.0","source":{"id":"2405.10529","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.10529","created_at":"2026-07-05T08:58:44Z"},{"alias_kind":"arxiv_version","alias_value":"2405.10529v2","created_at":"2026-07-05T08:58:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.10529","created_at":"2026-07-05T08:58:44Z"},{"alias_kind":"pith_short_12","alias_value":"VPIPNJXDXQ67","created_at":"2026-07-05T08:58:44Z"},{"alias_kind":"pith_short_16","alias_value":"VPIPNJXDXQ674WLE","created_at":"2026-07-05T08:58:44Z"},{"alias_kind":"pith_short_8","alias_value":"VPIPNJXD","created_at":"2026-07-05T08:58:44Z"}],"graph_snapshots":[{"event_id":"sha256:cbbb45e266b01d6c42ca6492628c6f1c4a1657de861162ead96e27ea58f29c37","target":"graph","created_at":"2026-07-05T08:58:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.10529/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models have become increasingly prominent, also signaling a shift towards multimodality as the next frontier in artificial intelligence, where their embeddings are harnessed as prompts to generate textual content. Vision-language models (VLMs) stand at the forefront of this advancement, offering innovative ways to combine visual and textual data for enhanced understanding and interaction. However, this integration also enlarges the attack surface. Patch-based adversarial attack is considered the most realistic threat model in physical vision applications, as demonstrated in many","authors_text":"Changsheng Wang, Chaowei Xiao, Jiachen Sun, Jiongxiao Wang, Yiwei Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-17T04:19:19Z","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.10529","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:80760f8bfd54ca3918e5717e0645fd1f08614244c6638b8066ae43f2bbe203e7","target":"record","created_at":"2026-07-05T08:58:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cd4d8d8cdb4e898090f71ca2fd51250a6b373ff8dffa78111a8e40bdb67b0759","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-17T04:19:19Z","title_canon_sha256":"63447ae4dc6191e974a3965db4d5a5086105f872618daf68f9cada400069d512"},"schema_version":"1.0","source":{"id":"2405.10529","kind":"arxiv","version":2}},"canonical_sha256":"abd0f6a6e3bc3dfe5964d0eb9cd678ba74a21fb2f59f3a5b248333d1cd76ca9f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"abd0f6a6e3bc3dfe5964d0eb9cd678ba74a21fb2f59f3a5b248333d1cd76ca9f","first_computed_at":"2026-07-05T08:58:44.353239Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:58:44.353239Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SCrhBFhAr1Mg5FC4PAGI0JmZCmPHpuJLoBVvLxX8M+Kt9YEaWoqD/GDnLjaeRsbUOb8eX10XvCHmyX5gIM78DA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:58:44.353721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.10529","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:80760f8bfd54ca3918e5717e0645fd1f08614244c6638b8066ae43f2bbe203e7","sha256:cbbb45e266b01d6c42ca6492628c6f1c4a1657de861162ead96e27ea58f29c37"],"state_sha256":"11d637c5c89091858df8d9d58ab2aa5aded994dd311c58d2aca41481aca96b41"}