{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WDIZN3N7RSIXUITCRS7INFXGCK","short_pith_number":"pith:WDIZN3N7","canonical_record":{"source":{"id":"2505.24227","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T05:30:02Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b7757d9a2eb4e61107ceb02d3615c59a3767337accf1db7c216e58a29caac2dc","abstract_canon_sha256":"9310b554dbf18bf34736e1ba876a91406ab38324c16d8b8db75789d8c1df9578"},"schema_version":"1.0"},"canonical_sha256":"b0d196edbf8c917a22628cbe8696e61289a42d8461dcdd34aff1e170d1384d31","source":{"kind":"arxiv","id":"2505.24227","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.24227","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.24227v1","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24227","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"pith_short_12","alias_value":"WDIZN3N7RSIX","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"pith_short_16","alias_value":"WDIZN3N7RSIXUITC","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"pith_short_8","alias_value":"WDIZN3N7","created_at":"2026-07-05T11:12:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WDIZN3N7RSIXUITCRS7INFXGCK","target":"record","payload":{"canonical_record":{"source":{"id":"2505.24227","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T05:30:02Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b7757d9a2eb4e61107ceb02d3615c59a3767337accf1db7c216e58a29caac2dc","abstract_canon_sha256":"9310b554dbf18bf34736e1ba876a91406ab38324c16d8b8db75789d8c1df9578"},"schema_version":"1.0"},"canonical_sha256":"b0d196edbf8c917a22628cbe8696e61289a42d8461dcdd34aff1e170d1384d31","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:44.600462Z","signature_b64":"vdRAyUd5xtI3poAV8Ad+er1OhtB1eLighlY9MhwUI7HS8E04KtG+EvUnHo4kZAUlwzI2dqo9sBnenpku0xykDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b0d196edbf8c917a22628cbe8696e61289a42d8461dcdd34aff1e170d1384d31","last_reissued_at":"2026-07-05T11:12:44.599874Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:44.599874Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.24227","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2yqWxWLApB/9BEXun1KyyzQWZ9fzbMqLhJ1kIgQMBwzpAlVVofkt1YP1coX2Cc1UqjBpYhiZseUvbiWaj78EBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T22:15:27.450535Z"},"content_sha256":"572887f9568904b30f83108e547a744db0ee0d459b46f1f164cd324ce3c954ac","schema_version":"1.0","event_id":"sha256:572887f9568904b30f83108e547a744db0ee0d459b46f1f164cd324ce3c954ac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WDIZN3N7RSIXUITCRS7INFXGCK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Di Lin, Jie Zhang, Qing Guo, Tao Xiang, Xiao Lv, Ying Yang","submitted_at":"2025-05-30T05:30:02Z","abstract_excerpt":"While adversarial attacks on vision-and-language pretraining (VLP) models have been explored, generating natural adversarial samples crafted through realistic and semantically meaningful perturbations remains an open challenge. Existing methods, primarily designed for classification tasks, struggle when adapted to VLP models due to their restricted optimization spaces, leading to ineffective attacks or unnatural artifacts. To address this, we propose \\textbf{LightD}, a novel framework that generates natural adversarial samples for VLP models via semantically guided relighting. Specifically, Li"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24227","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.24227/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4Uc4wE9LfQbQ82Da999t8pSNsXHNj4VKrjPB4InhvJJTa0R695CcrYs9IbXVAkFgQ8a+Pe3R64DXzJcmhLzxCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T22:15:27.451123Z"},"content_sha256":"ec1a629e3efd79c697eb61936f01eb615ed4f913d6790ddff5a25ed4a45950cc","schema_version":"1.0","event_id":"sha256:ec1a629e3efd79c697eb61936f01eb615ed4f913d6790ddff5a25ed4a45950cc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WDIZN3N7RSIXUITCRS7INFXGCK/bundle.json","state_url":"https://pith.science/pith/WDIZN3N7RSIXUITCRS7INFXGCK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WDIZN3N7RSIXUITCRS7INFXGCK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T22:15:27Z","links":{"resolver":"https://pith.science/pith/WDIZN3N7RSIXUITCRS7INFXGCK","bundle":"https://pith.science/pith/WDIZN3N7RSIXUITCRS7INFXGCK/bundle.json","state":"https://pith.science/pith/WDIZN3N7RSIXUITCRS7INFXGCK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WDIZN3N7RSIXUITCRS7INFXGCK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WDIZN3N7RSIXUITCRS7INFXGCK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9310b554dbf18bf34736e1ba876a91406ab38324c16d8b8db75789d8c1df9578","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T05:30:02Z","title_canon_sha256":"b7757d9a2eb4e61107ceb02d3615c59a3767337accf1db7c216e58a29caac2dc"},"schema_version":"1.0","source":{"id":"2505.24227","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.24227","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.24227v1","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24227","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"pith_short_12","alias_value":"WDIZN3N7RSIX","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"pith_short_16","alias_value":"WDIZN3N7RSIXUITC","created_at":"2026-07-05T11:12:44Z"},{"alias_kind":"pith_short_8","alias_value":"WDIZN3N7","created_at":"2026-07-05T11:12:44Z"}],"graph_snapshots":[{"event_id":"sha256:ec1a629e3efd79c697eb61936f01eb615ed4f913d6790ddff5a25ed4a45950cc","target":"graph","created_at":"2026-07-05T11:12:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.24227/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While adversarial attacks on vision-and-language pretraining (VLP) models have been explored, generating natural adversarial samples crafted through realistic and semantically meaningful perturbations remains an open challenge. Existing methods, primarily designed for classification tasks, struggle when adapted to VLP models due to their restricted optimization spaces, leading to ineffective attacks or unnatural artifacts. To address this, we propose \\textbf{LightD}, a novel framework that generates natural adversarial samples for VLP models via semantically guided relighting. Specifically, Li","authors_text":"Di Lin, Jie Zhang, Qing Guo, Tao Xiang, Xiao Lv, Ying Yang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T05:30:02Z","title":"Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24227","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:572887f9568904b30f83108e547a744db0ee0d459b46f1f164cd324ce3c954ac","target":"record","created_at":"2026-07-05T11:12:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9310b554dbf18bf34736e1ba876a91406ab38324c16d8b8db75789d8c1df9578","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-30T05:30:02Z","title_canon_sha256":"b7757d9a2eb4e61107ceb02d3615c59a3767337accf1db7c216e58a29caac2dc"},"schema_version":"1.0","source":{"id":"2505.24227","kind":"arxiv","version":1}},"canonical_sha256":"b0d196edbf8c917a22628cbe8696e61289a42d8461dcdd34aff1e170d1384d31","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b0d196edbf8c917a22628cbe8696e61289a42d8461dcdd34aff1e170d1384d31","first_computed_at":"2026-07-05T11:12:44.599874Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:44.599874Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vdRAyUd5xtI3poAV8Ad+er1OhtB1eLighlY9MhwUI7HS8E04KtG+EvUnHo4kZAUlwzI2dqo9sBnenpku0xykDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:44.600462Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.24227","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:572887f9568904b30f83108e547a744db0ee0d459b46f1f164cd324ce3c954ac","sha256:ec1a629e3efd79c697eb61936f01eb615ed4f913d6790ddff5a25ed4a45950cc"],"state_sha256":"65e025a6603f8903a769d90df09009ee11762855f945fe9acb2abb4b10f40f67"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6LQcjjK7Qg3qAjvSftQO6lM9mfpkyBKwEz32MLIFmSm2DMStxfA8IWg5kMyMc9Tdvi/lGxTAC9u/Ko1xPDH8BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T22:15:27.456068Z","bundle_sha256":"ae5af6e590a05a84d6ff3997cc563498a26d162670edb29b1f96bcee135fdcfd"}}