{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:X6NP2JONPIHGRQXRS2WQTHBGPQ","short_pith_number":"pith:X6NP2JON","canonical_record":{"source":{"id":"2607.07922","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-08T21:08:57Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ebda192063682d59bb9c1681629f1cebd6c7963c9299508646fb9c3dcaf2d588","abstract_canon_sha256":"aff3dc2e54483442c97d5d5360ed50ce203c2bdaf962d0c3e8803007010fd165"},"schema_version":"1.0"},"canonical_sha256":"bf9afd25cd7a0e68c2f196ad099c267c2da736fa72785b820170a3ba0bd21263","source":{"kind":"arxiv","id":"2607.07922","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07922","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07922v1","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07922","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"pith_short_12","alias_value":"X6NP2JONPIHG","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"pith_short_16","alias_value":"X6NP2JONPIHGRQXR","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"pith_short_8","alias_value":"X6NP2JON","created_at":"2026-07-10T00:19:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:X6NP2JONPIHGRQXRS2WQTHBGPQ","target":"record","payload":{"canonical_record":{"source":{"id":"2607.07922","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-08T21:08:57Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ebda192063682d59bb9c1681629f1cebd6c7963c9299508646fb9c3dcaf2d588","abstract_canon_sha256":"aff3dc2e54483442c97d5d5360ed50ce203c2bdaf962d0c3e8803007010fd165"},"schema_version":"1.0"},"canonical_sha256":"bf9afd25cd7a0e68c2f196ad099c267c2da736fa72785b820170a3ba0bd21263","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-10T00:19:04.896594Z","signature_b64":"IP4XeiUaQqSaVqrQQ3l5jUYNGipu3/ORrC+iq/uGApBUO81W59fDZAoklFWB74OTf4E4xMSztDOsG9aba4ERBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf9afd25cd7a0e68c2f196ad099c267c2da736fa72785b820170a3ba0bd21263","last_reissued_at":"2026-07-10T00:19:04.896164Z","signature_status":"signed_v1","first_computed_at":"2026-07-10T00:19:04.896164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.07922","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T00:19:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+TzYC+AqEtKs2vdUJOMHJ63oep4G20Y9U4ejMUjWElMAEJB43etzoZJodahcv/1o8Mn9jDJTooHVuQ2o1RiIDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T18:28:43.165660Z"},"content_sha256":"0eb735b4edc9d2d5f332bb9892af5c5c98c16e2861cb9f44447da7baf053e449","schema_version":"1.0","event_id":"sha256:0eb735b4edc9d2d5f332bb9892af5c5c98c16e2861cb9f44447da7baf053e449"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:X6NP2JONPIHGRQXRS2WQTHBGPQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Giorgio Buttazzo, Giulia Marchiori Pietrosanti, Giulio Rossolini","submitted_at":"2026-07-08T21:08:57Z","abstract_excerpt":"Vision Transformers (ViTs) remain vulnerable to localized adversarial attacks, e.g., adversarial patches, while recent test-time defenses mitigate them by suppressing image tokens with abnormally high attention scores. These defenses exploit a strong coupling between attention and adversarial effectiveness: adversarial tokens often need to attract substantial attention to influence the prediction. We introduce adversarial decoys, independently optimized image patches that redirect the attention, and therefore related defenses, toward selected target tokens. Rather than jointly optimizing miscl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07922","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07922/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T00:19:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hwErGqnlyZt9PoP2GY9IxdWKSZ+NZR7vEQtNngPNG8aMdiD2Q2KQWkTG3SPUZagawMGTymSDrV9aXD5E4qqrDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T18:28:43.166555Z"},"content_sha256":"081b33ba6ab4a9c79c242bba60c13c208bd9fe1cfc40811f903b10a160ebdc04","schema_version":"1.0","event_id":"sha256:081b33ba6ab4a9c79c242bba60c13c208bd9fe1cfc40811f903b10a160ebdc04"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/bundle.json","state_url":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T18:28:43Z","links":{"resolver":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ","bundle":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/bundle.json","state":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:X6NP2JONPIHGRQXRS2WQTHBGPQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aff3dc2e54483442c97d5d5360ed50ce203c2bdaf962d0c3e8803007010fd165","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-08T21:08:57Z","title_canon_sha256":"ebda192063682d59bb9c1681629f1cebd6c7963c9299508646fb9c3dcaf2d588"},"schema_version":"1.0","source":{"id":"2607.07922","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07922","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07922v1","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07922","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"pith_short_12","alias_value":"X6NP2JONPIHG","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"pith_short_16","alias_value":"X6NP2JONPIHGRQXR","created_at":"2026-07-10T00:19:04Z"},{"alias_kind":"pith_short_8","alias_value":"X6NP2JON","created_at":"2026-07-10T00:19:04Z"}],"graph_snapshots":[{"event_id":"sha256:081b33ba6ab4a9c79c242bba60c13c208bd9fe1cfc40811f903b10a160ebdc04","target":"graph","created_at":"2026-07-10T00:19:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.07922/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Transformers (ViTs) remain vulnerable to localized adversarial attacks, e.g., adversarial patches, while recent test-time defenses mitigate them by suppressing image tokens with abnormally high attention scores. These defenses exploit a strong coupling between attention and adversarial effectiveness: adversarial tokens often need to attract substantial attention to influence the prediction. We introduce adversarial decoys, independently optimized image patches that redirect the attention, and therefore related defenses, toward selected target tokens. Rather than jointly optimizing miscl","authors_text":"Giorgio Buttazzo, Giulia Marchiori Pietrosanti, Giulio Rossolini","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07922","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0eb735b4edc9d2d5f332bb9892af5c5c98c16e2861cb9f44447da7baf053e449","target":"record","created_at":"2026-07-10T00:19:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aff3dc2e54483442c97d5d5360ed50ce203c2bdaf962d0c3e8803007010fd165","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-08T21:08:57Z","title_canon_sha256":"ebda192063682d59bb9c1681629f1cebd6c7963c9299508646fb9c3dcaf2d588"},"schema_version":"1.0","source":{"id":"2607.07922","kind":"arxiv","version":1}},"canonical_sha256":"bf9afd25cd7a0e68c2f196ad099c267c2da736fa72785b820170a3ba0bd21263","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bf9afd25cd7a0e68c2f196ad099c267c2da736fa72785b820170a3ba0bd21263","first_computed_at":"2026-07-10T00:19:04.896164Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-10T00:19:04.896164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IP4XeiUaQqSaVqrQQ3l5jUYNGipu3/ORrC+iq/uGApBUO81W59fDZAoklFWB74OTf4E4xMSztDOsG9aba4ERBw==","signature_status":"signed_v1","signed_at":"2026-07-10T00:19:04.896594Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.07922","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0eb735b4edc9d2d5f332bb9892af5c5c98c16e2861cb9f44447da7baf053e449","sha256:081b33ba6ab4a9c79c242bba60c13c208bd9fe1cfc40811f903b10a160ebdc04"],"state_sha256":"d94aec8ed3b7a2da6ce7f493845ff9df4bcba71431b33c5cc1a933e3b317af9e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q/O/Xjfhb9oeJ2UNxYCU3tjazfSlVVFT5TC+aQ61XoNWm8ZYIOBP85SSaTeiTlqMz1WA7Wv9QkqjjuiuakzFBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T18:28:43.201286Z","bundle_sha256":"642ac119f3a95470f28f3a3e177a8cbac141fb7b0663c123fcb15ade7110930f"}}