{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WO5UTURPEUQD7BSJUY7HATVRFP","short_pith_number":"pith:WO5UTURP","canonical_record":{"source":{"id":"2508.09218","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T18:57:55Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7f5cab0c45ae240461652ecb1dc55182f5a25a00fb33215e16d4a488bbd88e79","abstract_canon_sha256":"6eb913192505ffeaea02f13f29f6626bdecec08eace8045892f1eefd3b6a9655"},"schema_version":"1.0"},"canonical_sha256":"b3bb49d22f25203f8649a63e704eb12bd22807d6253b8b12ca342fb597b1b576","source":{"kind":"arxiv","id":"2508.09218","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.09218","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"arxiv_version","alias_value":"2508.09218v1","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.09218","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"pith_short_12","alias_value":"WO5UTURPEUQD","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"pith_short_16","alias_value":"WO5UTURPEUQD7BSJ","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"pith_short_8","alias_value":"WO5UTURP","created_at":"2026-07-05T11:53:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WO5UTURPEUQD7BSJUY7HATVRFP","target":"record","payload":{"canonical_record":{"source":{"id":"2508.09218","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T18:57:55Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7f5cab0c45ae240461652ecb1dc55182f5a25a00fb33215e16d4a488bbd88e79","abstract_canon_sha256":"6eb913192505ffeaea02f13f29f6626bdecec08eace8045892f1eefd3b6a9655"},"schema_version":"1.0"},"canonical_sha256":"b3bb49d22f25203f8649a63e704eb12bd22807d6253b8b12ca342fb597b1b576","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:53:10.323105Z","signature_b64":"N5bE6fU8Athi6dzetDADduWkRMuyph2r8N+VfPOadhRrQ3wmo5okOKwzeps4UQhsbL0ZCiohithN0op2kpBWAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b3bb49d22f25203f8649a63e704eb12bd22807d6253b8b12ca342fb597b1b576","last_reissued_at":"2026-07-05T11:53:10.322579Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:53:10.322579Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.09218","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e+m8bmTvi6MV4w3CR+ndTI7/A2N6p9u2b9nVVbvpxvmFHCR/pdcqgh6nF9wXaCOUR+jUbxjdqco9dnUiVUW/Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T01:25:58.600660Z"},"content_sha256":"6a9af8813e9f4ae0c7c4eb692eeafafa0739e8b09773b5984797e5798c8510eb","schema_version":"1.0","event_id":"sha256:6a9af8813e9f4ae0c7c4eb692eeafafa0739e8b09773b5984797e5798c8510eb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WO5UTURPEUQD7BSJUY7HATVRFP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Effective MLLM Jailbreaking Through Balanced On-Topicness and OOD-Intensity","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Bernhard Kainz, Jingyuan Wang, Mengyun Qiao, Shuyuan Zhang, Weitong Zhang, Wenjia Bai, Zuoou Li","submitted_at":"2025-08-11T18:57:55Z","abstract_excerpt":"Multimodal large language models (MLLMs) are widely used in vision-language reasoning tasks. However, their vulnerability to adversarial prompts remains a serious concern, as safety mechanisms often fail to prevent the generation of harmful outputs. Although recent jailbreak strategies report high success rates, many responses classified as \"successful\" are actually benign, vague, or unrelated to the intended malicious goal. This mismatch suggests that current evaluation standards may overestimate the effectiveness of such attacks. To address this issue, we introduce a four-axis evaluation fra"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.09218","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.09218/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nnVSaBNeIpeCsukOyuy1SoBamR5mkDrb38nQdnMHVv0eSobK+gosaLAuKB3C4WJPGANxGs0p3B1hyfvRTe7FAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T01:25:58.601431Z"},"content_sha256":"223d2b4a3c21ca0048c6e298ea4fbefda4c61d0d7430ef5c4cd3435be649e5a7","schema_version":"1.0","event_id":"sha256:223d2b4a3c21ca0048c6e298ea4fbefda4c61d0d7430ef5c4cd3435be649e5a7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WO5UTURPEUQD7BSJUY7HATVRFP/bundle.json","state_url":"https://pith.science/pith/WO5UTURPEUQD7BSJUY7HATVRFP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WO5UTURPEUQD7BSJUY7HATVRFP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T01:25:58Z","links":{"resolver":"https://pith.science/pith/WO5UTURPEUQD7BSJUY7HATVRFP","bundle":"https://pith.science/pith/WO5UTURPEUQD7BSJUY7HATVRFP/bundle.json","state":"https://pith.science/pith/WO5UTURPEUQD7BSJUY7HATVRFP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WO5UTURPEUQD7BSJUY7HATVRFP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WO5UTURPEUQD7BSJUY7HATVRFP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6eb913192505ffeaea02f13f29f6626bdecec08eace8045892f1eefd3b6a9655","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T18:57:55Z","title_canon_sha256":"7f5cab0c45ae240461652ecb1dc55182f5a25a00fb33215e16d4a488bbd88e79"},"schema_version":"1.0","source":{"id":"2508.09218","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.09218","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"arxiv_version","alias_value":"2508.09218v1","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.09218","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"pith_short_12","alias_value":"WO5UTURPEUQD","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"pith_short_16","alias_value":"WO5UTURPEUQD7BSJ","created_at":"2026-07-05T11:53:10Z"},{"alias_kind":"pith_short_8","alias_value":"WO5UTURP","created_at":"2026-07-05T11:53:10Z"}],"graph_snapshots":[{"event_id":"sha256:223d2b4a3c21ca0048c6e298ea4fbefda4c61d0d7430ef5c4cd3435be649e5a7","target":"graph","created_at":"2026-07-05T11:53:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.09218/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal large language models (MLLMs) are widely used in vision-language reasoning tasks. However, their vulnerability to adversarial prompts remains a serious concern, as safety mechanisms often fail to prevent the generation of harmful outputs. Although recent jailbreak strategies report high success rates, many responses classified as \"successful\" are actually benign, vague, or unrelated to the intended malicious goal. This mismatch suggests that current evaluation standards may overestimate the effectiveness of such attacks. To address this issue, we introduce a four-axis evaluation fra","authors_text":"Bernhard Kainz, Jingyuan Wang, Mengyun Qiao, Shuyuan Zhang, Weitong Zhang, Wenjia Bai, Zuoou Li","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T18:57:55Z","title":"Towards Effective MLLM Jailbreaking Through Balanced On-Topicness and OOD-Intensity"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.09218","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6a9af8813e9f4ae0c7c4eb692eeafafa0739e8b09773b5984797e5798c8510eb","target":"record","created_at":"2026-07-05T11:53:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6eb913192505ffeaea02f13f29f6626bdecec08eace8045892f1eefd3b6a9655","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-08-11T18:57:55Z","title_canon_sha256":"7f5cab0c45ae240461652ecb1dc55182f5a25a00fb33215e16d4a488bbd88e79"},"schema_version":"1.0","source":{"id":"2508.09218","kind":"arxiv","version":1}},"canonical_sha256":"b3bb49d22f25203f8649a63e704eb12bd22807d6253b8b12ca342fb597b1b576","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b3bb49d22f25203f8649a63e704eb12bd22807d6253b8b12ca342fb597b1b576","first_computed_at":"2026-07-05T11:53:10.322579Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:53:10.322579Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"N5bE6fU8Athi6dzetDADduWkRMuyph2r8N+VfPOadhRrQ3wmo5okOKwzeps4UQhsbL0ZCiohithN0op2kpBWAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:53:10.323105Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.09218","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6a9af8813e9f4ae0c7c4eb692eeafafa0739e8b09773b5984797e5798c8510eb","sha256:223d2b4a3c21ca0048c6e298ea4fbefda4c61d0d7430ef5c4cd3435be649e5a7"],"state_sha256":"76067463d2e5f271ab99de849bda567843d85ade99658808c6cd63d31c021c4a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+2vkMEVBb6Ub3jpaQ/Vs54QMLtgud9AEmzvC6+3f3C5glnQSfrehvV17jhIsk00Q6h0HZktELI1few3K38/kCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T01:25:58.610448Z","bundle_sha256":"f188cfcf73debc559401f1b9b777c76566372f66a0cfa6ddf6b23e653bad3dae"}}