{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WROTOBLPL6RPGZPYZLSYK5VCTG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d3e5ecaa165d486b0c3dd9bf222c37af409f887451858a0cd80f5fcbd0537634","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","title_canon_sha256":"f61326bd2d6af800a5339dcb2124f08a01f2d953a777c6f2bfcad7292f9263e1"},"schema_version":"1.0","source":{"id":"2509.24566","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.24566","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"arxiv_version","alias_value":"2509.24566v2","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.24566","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_12","alias_value":"WROTOBLPL6RP","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_16","alias_value":"WROTOBLPL6RPGZPY","created_at":"2026-07-17T01:20:38Z"},{"alias_kind":"pith_short_8","alias_value":"WROTOBLP","created_at":"2026-07-17T01:20:38Z"}],"graph_snapshots":[{"event_id":"sha256:13deebd18e0d51e466c4c124ed498c2c34a20082b4f9c09b6d30776222224e4d","target":"graph","created_at":"2026-07-17T01:20:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.24566/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large vision-language models (LVLMs) have achieved impressive performance across a wide range of vision-language tasks, while they remain vulnerable to backdoor attacks. Existing backdoor attacks on LVLMs aim to force the victim model to generate a predefined target pattern, which is either inserted into or replaces the original content. We find that these fixed-pattern attacks are relatively easy to detect, because the attacked LVLM tends to memorize such frequent patterns in the training dataset, thereby exhibiting overconfidence on these targets given poisoned inputs. To address these limit","authors_text":"Jiaqi Lv, Joey Tianyi Zhou, Lei Feng, Na Zhao, Qiqi Tao, Zhifang Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.24566","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:32563a5eed4902827d3763599b59ad64b855c4a79366de75ed15b7561a870edf","target":"record","created_at":"2026-07-17T01:20:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d3e5ecaa165d486b0c3dd9bf222c37af409f887451858a0cd80f5fcbd0537634","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-09-29T10:19:22Z","title_canon_sha256":"f61326bd2d6af800a5339dcb2124f08a01f2d953a777c6f2bfcad7292f9263e1"},"schema_version":"1.0","source":{"id":"2509.24566","kind":"arxiv","version":2}},"canonical_sha256":"b45d37056f5fa2f365f8cae58576a2998a51ad935bfee7c72c9c1a7bf1e5f032","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b45d37056f5fa2f365f8cae58576a2998a51ad935bfee7c72c9c1a7bf1e5f032","first_computed_at":"2026-07-17T01:20:38.889462Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-17T01:20:38.889462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LfYQGyTkzj3qlgA4odbBskzLips72I6aK+s1O78zOlYZ1VGopY8+wgxjNcNYv9yX54CSCP6is0RCZ+PvMFRBCg==","signature_status":"signed_v1","signed_at":"2026-07-17T01:20:38.890348Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.24566","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:32563a5eed4902827d3763599b59ad64b855c4a79366de75ed15b7561a870edf","sha256:13deebd18e0d51e466c4c124ed498c2c34a20082b4f9c09b6d30776222224e4d"],"state_sha256":"7f80efbe8d7bd0ae8565138f450bfa8ad3898630fd5002c7a4d30e4d93cc7599"}