{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WROTOBLPL6RPGZPYZLSYK5VCTG","short_pith_number":"pith:WROTOBLP","canonical_record":{"source":{"id":"2509.24566","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","cross_cats_sorted":[],"title_canon_sha256":"f61326bd2d6af800a5339dcb2124f08a01f2d953a777c6f2bfcad7292f9263e1","abstract_canon_sha256":"d3e5ecaa165d486b0c3dd9bf222c37af409f887451858a0cd80f5fcbd0537634"},"schema_version":"1.0"},"canonical_sha256":"b45d37056f5fa2f365f8cae58576a2998a51ad935bfee7c72c9c1a7bf1e5f032","source":{"kind":"arxiv","id":"2509.24566","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.24566","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"arxiv_version","alias_value":"2509.24566v2","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.24566","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_12","alias_value":"WROTOBLPL6RP","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_16","alias_value":"WROTOBLPL6RPGZPY","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_8","alias_value":"WROTOBLP","created_at":"2026-07-17T01:20:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WROTOBLPL6RPGZPYZLSYK5VCTG","target":"record","payload":{"canonical_record":{"source":{"id":"2509.24566","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","cross_cats_sorted":[],"title_canon_sha256":"f61326bd2d6af800a5339dcb2124f08a01f2d953a777c6f2bfcad7292f9263e1","abstract_canon_sha256":"d3e5ecaa165d486b0c3dd9bf222c37af409f887451858a0cd80f5fcbd0537634"},"schema_version":"1.0"},"canonical_sha256":"b45d37056f5fa2f365f8cae58576a2998a51ad935bfee7c72c9c1a7bf1e5f032","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-17T01:20:38.890348Z","signature_b64":"LfYQGyTkzj3qlgA4odbBskzLips72I6aK+s1O78zOlYZ1VGopY8+wgxjNcNYv9yX54CSCP6is0RCZ+PvMFRBCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b45d37056f5fa2f365f8cae58576a2998a51ad935bfee7c72c9c1a7bf1e5f032","last_reissued_at":"2026-07-17T01:20:38.889462Z","signature_status":"signed_v1","first_computed_at":"2026-07-17T01:20:38.889462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.24566","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-17T01:20:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9O9Txrb8lFGLJjktTYAaO3YQE4pLRUwrW60hdTgrkNnvf7rGLjV8P69Wrsms12+98uDMG44QpxJu9RI+/7weDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T22:18:25.802384Z"},"content_sha256":"32563a5eed4902827d3763599b59ad64b855c4a79366de75ed15b7561a870edf","schema_version":"1.0","event_id":"sha256:32563a5eed4902827d3763599b59ad64b855c4a79366de75ed15b7561a870edf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WROTOBLPL6RPGZPYZLSYK5VCTG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jiaqi Lv, Joey Tianyi Zhou, Lei Feng, Na Zhao, Qiqi Tao, Zhifang Zhang","submitted_at":"2025-09-29T10:19:22Z","abstract_excerpt":"Large vision-language models (LVLMs) have achieved impressive performance across a wide range of vision-language tasks, while they remain vulnerable to backdoor attacks. Existing backdoor attacks on LVLMs aim to force the victim model to generate a predefined target pattern, which is either inserted into or replaces the original content. We find that these fixed-pattern attacks are relatively easy to detect, because the attacked LVLM tends to memorize such frequent patterns in the training dataset, thereby exhibiting overconfidence on these targets given poisoned inputs. To address these limit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.24566","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.24566/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-17T01:20:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MZ7z6YVXyCpLlQSG5Bq2Ls6ItVAtWv8SBB/6a/1vhztToJjMjVtNG0ry3Ksn5mXNqh7j46ntebE1MgkKtlF3BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T22:18:25.803319Z"},"content_sha256":"13deebd18e0d51e466c4c124ed498c2c34a20082b4f9c09b6d30776222224e4d","schema_version":"1.0","event_id":"sha256:13deebd18e0d51e466c4c124ed498c2c34a20082b4f9c09b6d30776222224e4d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WROTOBLPL6RPGZPYZLSYK5VCTG/bundle.json","state_url":"https://pith.science/pith/WROTOBLPL6RPGZPYZLSYK5VCTG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WROTOBLPL6RPGZPYZLSYK5VCTG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T22:18:25Z","links":{"resolver":"https://pith.science/pith/WROTOBLPL6RPGZPYZLSYK5VCTG","bundle":"https://pith.science/pith/WROTOBLPL6RPGZPYZLSYK5VCTG/bundle.json","state":"https://pith.science/pith/WROTOBLPL6RPGZPYZLSYK5VCTG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WROTOBLPL6RPGZPYZLSYK5VCTG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WROTOBLPL6RPGZPYZLSYK5VCTG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d3e5ecaa165d486b0c3dd9bf222c37af409f887451858a0cd80f5fcbd0537634","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","title_canon_sha256":"f61326bd2d6af800a5339dcb2124f08a01f2d953a777c6f2bfcad7292f9263e1"},"schema_version":"1.0","source":{"id":"2509.24566","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.24566","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"arxiv_version","alias_value":"2509.24566v2","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.24566","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_12","alias_value":"WROTOBLPL6RP","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_16","alias_value":"WROTOBLPL6RPGZPY","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_8","alias_value":"WROTOBLP","created_at":"2026-07-17T01:20:38Z"}],"graph_snapshots":[{"event_id":"sha256:13deebd18e0d51e466c4c124ed498c2c34a20082b4f9c09b6d30776222224e4d","target":"graph","created_at":"2026-07-17T01:20:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.24566/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large vision-language models (LVLMs) have achieved impressive performance across a wide range of vision-language tasks, while they remain vulnerable to backdoor attacks. Existing backdoor attacks on LVLMs aim to force the victim model to generate a predefined target pattern, which is either inserted into or replaces the original content. We find that these fixed-pattern attacks are relatively easy to detect, because the attacked LVLM tends to memorize such frequent patterns in the training dataset, thereby exhibiting overconfidence on these targets given poisoned inputs. To address these limit","authors_text":"Jiaqi Lv, Joey Tianyi Zhou, Lei Feng, Na Zhao, Qiqi Tao, Zhifang Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.24566","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:32563a5eed4902827d3763599b59ad64b855c4a79366de75ed15b7561a870edf","target":"record","created_at":"2026-07-17T01:20:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d3e5ecaa165d486b0c3dd9bf222c37af409f887451858a0cd80f5fcbd0537634","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","title_canon_sha256":"f61326bd2d6af800a5339dcb2124f08a01f2d953a777c6f2bfcad7292f9263e1"},"schema_version":"1.0","source":{"id":"2509.24566","kind":"arxiv","version":2}},"canonical_sha256":"b45d37056f5fa2f365f8cae58576a2998a51ad935bfee7c72c9c1a7bf1e5f032","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b45d37056f5fa2f365f8cae58576a2998a51ad935bfee7c72c9c1a7bf1e5f032","first_computed_at":"2026-07-17T01:20:38.889462Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-17T01:20:38.889462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LfYQGyTkzj3qlgA4odbBskzLips72I6aK+s1O78zOlYZ1VGopY8+wgxjNcNYv9yX54CSCP6is0RCZ+PvMFRBCg==","signature_status":"signed_v1","signed_at":"2026-07-17T01:20:38.890348Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.24566","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:32563a5eed4902827d3763599b59ad64b855c4a79366de75ed15b7561a870edf","sha256:13deebd18e0d51e466c4c124ed498c2c34a20082b4f9c09b6d30776222224e4d"],"state_sha256":"7f80efbe8d7bd0ae8565138f450bfa8ad3898630fd5002c7a4d30e4d93cc7599"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yslKv0ziZL+Q9J6QWrbrYtml4xLv/9ODPvZXAADt1Cp5KlS58MrBxnwhWWEVI73xYx0S9aDpNyXW4wnpydEzDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T22:18:25.809270Z","bundle_sha256":"19f81092de2ba3c10bc2d5505051659d8c2aee96c468c307222c792dd91f7e68"}}